Edit tour

Windows Analysis Report
http://dne.sendyouropinions.com

Overview

General Information

Sample URL:	http://dne.sendyouropinions.com
Analysis ID:	1524361
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6832 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 --field-trial-handle=2392,i,11199523818883284269,10067761302341695483,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3992 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://dne.sendyouropinions.com" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://dne.sendyouropinions.com/

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49752 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.179
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.179
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.179
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.179
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.209.179
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239370639606_1UY6VCV79VNDR5KH5&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239395019081_1G8JFT41D9TYPNUJJ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239395019080_17DEM3LK5H7QUOJTP&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239370639595_1MX6CE6U5QJ1LNKB2&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239351692182_1I6V30R2J66NF61KL&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239351692183_1GSWAYG616F8PFDNZ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: dne.sendyouropinions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: dne.sendyouropinions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~shared~dne.sendyouropinions.com-443=!7cp7OMT8WzhuBVPoXdMIgqXtwSrnbA1iy3erkVYcfuhZ+tdAmC0S3KOFXM7jfqcLMMCnL7ZID8aJMVw=
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: dne.sendyouropinions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~shared~dne.sendyouropinions.com-443=!7cp7OMT8WzhuBVPoXdMIgqXtwSrnbA1iy3erkVYcfuhZ+tdAmC0S3KOFXM7jfqcLMMCnL7ZID8aJMVw=
Source: global traffic	HTTP traffic detected: GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8fFg99zOYc5H_hWS3hkd36zVUCUy6FBDKEyc-CqVImEytwrjLKWx8Qzg7rcFeU7AqI_TOC104rQj_DV4ts4MGNwPyS4zvUJblqqaHc4ucO95w4-9MBq0k_ODvbEO3oKgR5kHkyYOS_S-kdT4uRGQZwDxVT65g_riR-zGS5f9NYWfKpkB4%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZm9uZWRyaXZlLmxpdmUuY29tJTJmJTNmb2NpZCUzZGNtbTA3YjdkbnU0%26rlid%3Dda7fed0c8c8f1cff41c38bf1e71f2f8f&TIME=20241002T155002Z&CID=531098720&EID=531098720&tids=15000&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=DA18C8825356BAC4E7B23066FFFFFFFF HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: g.bing.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8fFg99zOYc5H_hWS3hkd36zVUCUy6FBDKEyc-CqVImEytwrjLKWx8Qzg7rcFeU7AqI_TOC104rQj_DV4ts4MGNwPyS4zvUJblqqaHc4ucO95w4-9MBq0k_ODvbEO3oKgR5kHkyYOS_S-kdT4uRGQZwDxVT65g_riR-zGS5f9NYWfKpkB4%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZm9uZWRyaXZlLmxpdmUuY29tJTJmJTNmb2NpZCUzZGNtbTA3YjdkbnU0%26rlid%3Dda7fed0c8c8f1cff41c38bf1e71f2f8f&TIME=20241002T155002Z&CID=531098720&EID=&tids=15000&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=DA18C8825356BAC4E7B23066FFFFFFFF HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: g.bing.comConnection: Keep-AliveCookie: MUID=26AE0A0CA95760E617551F00A8FF61C1; _EDGE_S=SID=0B17A30DED8768390590B601EC0C6913; MR=0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: dne.sendyouropinions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: dne.sendyouropinions.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49752 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@17/5@10/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 --field-trial-handle=2392,i,11199523818883284269,10067761302341695483,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://dne.sendyouropinions.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 --field-trial-handle=2392,i,11199523818883284269,10067761302341695483,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
dne.sendyouropinions.com	206.126.172.72	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://dne.sendyouropinions.com/favicon.ico	false	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239351692183_1GSWAYG616F8PFDNZ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false	unknown
http://dne.sendyouropinions.com/	false	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239370639606_1UY6VCV79VNDR5KH5&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239395019081_1G8JFT41D9TYPNUJJ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239370639595_1MX6CE6U5QJ1LNKB2&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239351692182_1I6V30R2J66NF61KL&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239395019080_17DEM3LK5H7QUOJTP&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false	unknown
https://dne.sendyouropinions.com/	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
206.126.172.72	dne.sendyouropinions.com	United States	15084	CONVERGYSUS	false

Private

IP
192.168.2.23
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1524361
Start date and time:	2024-10-02 17:48:32 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://dne.sendyouropinions.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@17/5@10/6

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.99, 142.250.185.206, 173.194.76.84, 34.104.35.123, 40.115.3.253, 20.12.23.50, 20.242.39.171, 20.103.156.88, 2.23.209.150, 2.23.209.133, 2.23.209.141, 2.23.209.140, 2.23.209.135, 2.23.209.148, 2.23.209.130, 2.23.209.149, 2.23.209.131, 20.3.187.198, 2.23.209.189, 2.23.209.182, 2.23.209.185, 2.23.209.187, 93.184.221.240, 142.250.186.35
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, g.bing.com, arc.msn.com, wu.azureedge.net, wns.notify.trafficmanager.net, iris-de-prod-azsc-v2-weu.westeurope.cloudapp.azure.com, clients2.google.com, e86303.dscx.akamaiedge.net, www.bing.com.edgekey.net, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, arc.trafficmanager.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.bing.com, client.wns.windows.com, fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, www-www.bing.com.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://dne.sendyouropinions.com

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	32038
Entropy (8bit):	5.104352236785294
Encrypted:	false
SSDEEP:	384:9FMKxxje8gZryMDXe3ibKSo3MdXA1SPrQHg4M:bpr68gVy1i2SzdXA1wrQHg4M
MD5:	4859E39AE6C0F1F428F2126A6BB32BD9
SHA1:	1C0C85678AE963BC96D0B7FBE1EB89074CF1FBE0
SHA-256:	A94F8A8553CAEA8430DD4CA3CC01D4E318D19828F74CB65453FFB7F5D9E2F44D
SHA-512:	97541B40D8BEAC0DD8831EF8D2814EFEF10CFB185DF316E05B4F3AEF0A2D1839FB7A39D90F141F490E21B2955C32DF9D690785CC4DEF97CDFCE21ACF9BBAA2C7
Malicious:	false
Reputation:	low
Preview:	............ .h...F... .... .........00.... ..%..V...@@.... .(B...:..(....... ..... .....@................................................................................................................................................u..L..n......................................................x..V..m......................................................{..X..n.........................................................\..q........................................................a..u........................................................d..x................................................S.......i..{................................................E.......q...................................................E.......o...................................................E.......q...................................................E.......u...................................................C........................................................

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.297090490066192
Encrypted:	false
SSDEEP:	3:qVZxQXbZ6TBXq/B8ixj0LRaqKBcz:qzxO96TI/RwYqXz
MD5:	71C2683BC7C67D463B3C7890340DD609
SHA1:	A4FEDBF5651D00BA59FA80EFBBF610E00CDAB400
SHA-256:	B9B8A5611AA20343BC12AEC9EB62CDA634C3C174FA1257BA8E90DF215C6FD35E
SHA-512:	3B99F136D2DF1C0326384D863C081EE92A1ABAA0AA369134DEC406FCF7F78182A73A50348E12D7EE1E99CB7AF6626CBC45A4A4601F5203E8D17DAEAE5C345220
Malicious:	false
Reputation:	low
URL:	https://dne.sendyouropinions.com/
Preview:	<html><head></head><body>..<center>..<h2> Under construction </h2>..</center>....</body></html>

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	32038
Entropy (8bit):	5.104352236785294
Encrypted:	false
SSDEEP:	384:9FMKxxje8gZryMDXe3ibKSo3MdXA1SPrQHg4M:bpr68gVy1i2SzdXA1wrQHg4M
MD5:	4859E39AE6C0F1F428F2126A6BB32BD9
SHA1:	1C0C85678AE963BC96D0B7FBE1EB89074CF1FBE0
SHA-256:	A94F8A8553CAEA8430DD4CA3CC01D4E318D19828F74CB65453FFB7F5D9E2F44D
SHA-512:	97541B40D8BEAC0DD8831EF8D2814EFEF10CFB185DF316E05B4F3AEF0A2D1839FB7A39D90F141F490E21B2955C32DF9D690785CC4DEF97CDFCE21ACF9BBAA2C7
Malicious:	false
Reputation:	low
URL:	https://dne.sendyouropinions.com/favicon.ico
Preview:	............ .h...F... .... .........00.... ..%..V...@@.... .(B...:..(....... ..... .....@................................................................................................................................................u..L..n......................................................x..V..m......................................................{..X..n.........................................................\..q........................................................a..u........................................................d..x................................................S.......i..{................................................E.......q...................................................E.......o...................................................E.......q...................................................E.......u...................................................C........................................................

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 2, 2024 17:49:39.360151052 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.360183954 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.360207081 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.360357046 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.360394001 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.360466957 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.366780043 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.366842985 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.366885900 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.366885900 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.366957903 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.366976023 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.367041111 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.399707079 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.399774075 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.399904013 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.399914980 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.399924994 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.399960041 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.400276899 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.400317907 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.400350094 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.400355101 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.400403023 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.400764942 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.400806904 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.400835037 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.400840044 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.400862932 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.400887012 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.401134014 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.401176929 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.401211977 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.401216984 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.401254892 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.401276112 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.404726982 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.404772997 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.404819012 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.404824018 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.404865980 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.405205965 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.405250072 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.405277967 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.405282974 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.405303955 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.405328035 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.405462980 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.405503988 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.405527115 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.405531883 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.405565023 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.405586004 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.405956030 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.405996084 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.406035900 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.406043053 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.406083107 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.425724030 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.425781965 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.425853014 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.425868034 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.425901890 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.425926924 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.439291000 CEST	443	49727	2.23.209.179	192.168.2.6
Oct 2, 2024 17:49:39.439429998 CEST	49727	443	192.168.2.6	2.23.209.179
Oct 2, 2024 17:49:39.439450026 CEST	443	49727	2.23.209.179	192.168.2.6
Oct 2, 2024 17:49:39.439517975 CEST	49727	443	192.168.2.6	2.23.209.179
Oct 2, 2024 17:49:39.439523935 CEST	443	49727	2.23.209.179	192.168.2.6
Oct 2, 2024 17:49:39.439547062 CEST	443	49727	2.23.209.179	192.168.2.6
Oct 2, 2024 17:49:39.439570904 CEST	49727	443	192.168.2.6	2.23.209.179
Oct 2, 2024 17:49:39.439596891 CEST	49727	443	192.168.2.6	2.23.209.179
Oct 2, 2024 17:49:39.442265987 CEST	49727	443	192.168.2.6	2.23.209.179
Oct 2, 2024 17:49:39.442284107 CEST	443	49727	2.23.209.179	192.168.2.6
Oct 2, 2024 17:49:39.444314003 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.444375038 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.444433928 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.444469929 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.444503069 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.444533110 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.446017981 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.446068048 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.446145058 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.446161985 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.446217060 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.447937965 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.448004007 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.448075056 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.448096991 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.448132992 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.448149920 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.449641943 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.449702024 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.449769974 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.449786901 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.449815989 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.449850082 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.488512993 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.488564014 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.488661051 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.488682032 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.488718033 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.488739014 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.489202023 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.489243984 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.489274025 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.489279032 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.489331007 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.489557981 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.489598989 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.489624023 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.489629030 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.489658117 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.489680052 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.490087032 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.490127087 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.490148067 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.490151882 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.490196943 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.490644932 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.490684986 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.490720987 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.490725040 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.490751028 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.490771055 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.491317034 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.491357088 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.491399050 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.491404057 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.491456985 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.491919994 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.491959095 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.492000103 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.492003918 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.492028952 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.492048979 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.492058039 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.492100000 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.492120981 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.492125034 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.492170095 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.515105963 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.515173912 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.515223026 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.515233994 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.515290022 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.515999079 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.516041040 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.516083002 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.516088963 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.516124010 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.516151905 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.517180920 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.517224073 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.517277002 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.517282963 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.517343998 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.519023895 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.519068003 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.519108057 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.519115925 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.519161940 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.531932116 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.531972885 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.532058001 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.532098055 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.532125950 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.532174110 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.533370972 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.533395052 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.533463955 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.533478975 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.533519030 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.533538103 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.534435987 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.534466982 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.534527063 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.534540892 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.534574986 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.534595013 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.535471916 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.535547018 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.535590887 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.535605907 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.535645962 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.535665989 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.535895109 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.535921097 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.535963058 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.535975933 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.536007881 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.536032915 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.536429882 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.536482096 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.536521912 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.536535978 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.536562920 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.536587954 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.537872076 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.537924051 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.537981987 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.537996054 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.538136959 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.538160086 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.539499044 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.539547920 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.539606094 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.539621115 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.539664984 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.539686918 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.551599026 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.551635981 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.551906109 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.551906109 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.551934958 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.577140093 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.577168941 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.577286959 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.577310085 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.577522039 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.577752113 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.577768087 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.577827930 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.577833891 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.577877045 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.578285933 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.578319073 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.578353882 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.578361034 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.578396082 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.578421116 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.578768969 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.578866959 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.578927994 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.578932047 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.578974009 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.579571962 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.579612970 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.579658031 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.579663038 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.579695940 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.579719067 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.579823017 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.579869986 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.579883099 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.579888105 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.579936981 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.580414057 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.580475092 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.580485106 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.580502987 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.580533981 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.580558062 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.580667019 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.580733061 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.580774069 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.580821991 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.580894947 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.580945015 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.581056118 CEST	49731	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.581068993 CEST	443	49731	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.605699062 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.605788946 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.605886936 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.605895996 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.605971098 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.606616974 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.606714010 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.606714964 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.606787920 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.606816053 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.606843948 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.607491016 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.607542992 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.607582092 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.607585907 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.607697010 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.608347893 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.608398914 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.608436108 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.608441114 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.608469009 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.608494043 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.609210968 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.609252930 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.609291077 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.609294891 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.609352112 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.609380007 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.610153913 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.610196114 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.610235929 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.610240936 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.610286951 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.610310078 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.620533943 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.620626926 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.620708942 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.620724916 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.620806932 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.621260881 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.621315956 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.621359110 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.621371031 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.621398926 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.621424913 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.622191906 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.622235060 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.622282028 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.622296095 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.622347116 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.622365952 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.623014927 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.623064041 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.623105049 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.623117924 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.623158932 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.623179913 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.623888016 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.623939991 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.623994112 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.624008894 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.624042034 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.624068022 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.624373913 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.624440908 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.624466896 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.624481916 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.624511003 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.624530077 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.624979973 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.625025034 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.625063896 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.625077009 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.625109911 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.625140905 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.625443935 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.625488043 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.625523090 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.625535965 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.625562906 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.625592947 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.625994921 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.626039982 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.626081944 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.626095057 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.626126051 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.626144886 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.626393080 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.626440048 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.626477957 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.626491070 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.626518011 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.626540899 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.626763105 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.626815081 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.626848936 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.626862049 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.626956940 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.627079964 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.627129078 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.627159119 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.627171993 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.627199888 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.627218962 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.627995968 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.628047943 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.628081083 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.628093958 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.628145933 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.628165960 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.628797054 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.628849030 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.628886938 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.628899097 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.628932953 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.628957033 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.696265936 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.696341038 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.696471930 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.696500063 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.696513891 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.696544886 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.696650028 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.696702003 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.696731091 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.696736097 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.697192907 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.697240114 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.697240114 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.697247028 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.697261095 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.697285891 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.697324038 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.697359085 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.697937965 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.697985888 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.698015928 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.698020935 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.698048115 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.698071957 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.698491096 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.698539019 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.698570967 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.698575974 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.698620081 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.698642015 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.701224089 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.701262951 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.701312065 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.701318026 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.701430082 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.701694965 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.701734066 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.701765060 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.701770067 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.701793909 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.701813936 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.702440977 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.702481985 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.702528000 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.702533007 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.702570915 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.702589035 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.708980083 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.709021091 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.709094048 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.709124088 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.709151030 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.709177017 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.709516048 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.709541082 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.709579945 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.709593058 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.709631920 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.709650040 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.710213900 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.710237980 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.710305929 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.710319042 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.710350990 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.710370064 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.710696936 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.710728884 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.710777998 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.710791111 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.710818052 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.711376905 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.711422920 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.711435080 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.711450100 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.711477995 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.711498022 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.711518049 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.712095976 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.712158918 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.712199926 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.712219000 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.712243080 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.712279081 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.712585926 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.712630987 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.712666035 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.712678909 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.712706089 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.712728977 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.713125944 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.713165998 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.713207006 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.713218927 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.713248014 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.713264942 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.713519096 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.713561058 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.713591099 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.713603020 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.713629961 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.713648081 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.713820934 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.713850975 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.713890076 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.713903904 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.713932037 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.713951111 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.714447021 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.714474916 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.714519024 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.714531898 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.714560032 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.714579105 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.717588902 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.717629910 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.717689991 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.717704058 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.717732906 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.717752934 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.718095064 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.718136072 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.718173027 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.718187094 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.718213081 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.718233109 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.718477964 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.718519926 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.718559027 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.718570948 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.718596935 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.718621969 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.719003916 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.719043970 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.719082117 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.719095945 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.719121933 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.719141006 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.753592968 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.753613949 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.753688097 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.754213095 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.754228115 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.786808968 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.786840916 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.786947012 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.786964893 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.786993980 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.787015915 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.787226915 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.787246943 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.787288904 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.787293911 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.787327051 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.787345886 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.787830114 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.787848949 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.787900925 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.787908077 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.787936926 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.787956953 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.788110971 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.788131952 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.788167000 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.788172007 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.788201094 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.788223982 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.788786888 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.788820982 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.788866043 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.788871050 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.788918018 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.789156914 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.789192915 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.789227009 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.789232969 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.789258003 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.789279938 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.789503098 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.789524078 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.789582968 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.789588928 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.789629936 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.790165901 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.790188074 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.790230989 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.790236950 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.790262938 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.790283918 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.797235012 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.797272921 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.797363043 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.797384024 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.797413111 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.797432899 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.797472000 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.797498941 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.797529936 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.797544956 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.797573090 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.797590017 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.798157930 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.798199892 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.798235893 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.798249006 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.798281908 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.798297882 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.798393965 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.798435926 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.798470020 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.798482895 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.798511982 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.798527002 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.798989058 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.799036980 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.799074888 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.799088001 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.799114943 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.799134970 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.799483061 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.799504995 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.799540997 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.799552917 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.799576044 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.799581051 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.799604893 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.799616098 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.799631119 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.799633026 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.799663067 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.799681902 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.800302029 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.800327063 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.800388098 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.800401926 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.800431967 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.800451040 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.801152945 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.801215887 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.801254988 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.801269054 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.801302910 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.801322937 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.801423073 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.801467896 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.801497936 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.801511049 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.801541090 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.801559925 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.801855087 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.801877975 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.801925898 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.801939011 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.801964045 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.801986933 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.802149057 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.802170038 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.802208900 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.802222967 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.802248001 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.802269936 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.802599907 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.802615881 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.802671909 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.802685022 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.802711964 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.802736044 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.803731918 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.803746939 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.803817987 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.803832054 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.803884029 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.804125071 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.804141998 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.804186106 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.804199934 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.804227114 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.804244041 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.804558992 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.804574966 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.804641008 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.804655075 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.804709911 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.878462076 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.878532887 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.878621101 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.878635883 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.878660917 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.878683090 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.878726006 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.878772020 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.878797054 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.878802061 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.878835917 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.878859043 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.878943920 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.878987074 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.879015923 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.879020929 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.879057884 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.879079103 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.879555941 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.879602909 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.879664898 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.879669905 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.879684925 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.879712105 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.879864931 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.879905939 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.879934072 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.879939079 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.879970074 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.879983902 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.880234003 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.880275011 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.880304098 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.880311012 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.880337000 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.880357027 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.880561113 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.880609989 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.880650997 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.880656004 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.880685091 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.880697966 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.880912066 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.880950928 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.880987883 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.880992889 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.881026030 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.881045103 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.886037111 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.886068106 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.886142969 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.886161089 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.886178017 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.886183977 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.886208057 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.886208057 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.886243105 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.886257887 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.886292934 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.886307955 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.886606932 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.886630058 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.886667967 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.886682034 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.886710882 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.886725903 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.886868954 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.886946917 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.886959076 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.886986017 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.887008905 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.887034893 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.887243986 CEST	49729	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.887273073 CEST	443	49729	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.889461040 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.889527082 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.889564037 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.889579058 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.889609098 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.889626980 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.889786005 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.889831066 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.889859915 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.889872074 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.889899015 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.889915943 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.890197992 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.890238047 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.890271902 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.890285015 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.890314102 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.890331030 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.890588045 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.890628099 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.890657902 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.890671015 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.890695095 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.890714884 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.890909910 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.890938044 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.890981913 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.890995026 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.891021967 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.891041994 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.892157078 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.892177105 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.892252922 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.892267942 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.892294884 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.892313957 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.892466068 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.892482042 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.892755985 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.892767906 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.892817974 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.892858982 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.892874002 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.892918110 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.892930984 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.892959118 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.892977953 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.967999935 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.968081951 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.968152046 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.968173981 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.968200922 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.968219995 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.969356060 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.969414949 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.969458103 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.969461918 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.969470978 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.969497919 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.969646931 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.969692945 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.969710112 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.969716072 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.969754934 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.969979048 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.970020056 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.970042944 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.970046997 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.970077038 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.970151901 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.970598936 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.970639944 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.970674992 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.970679998 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.970712900 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.970731020 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.970740080 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.970801115 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.970827103 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.970832109 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.970858097 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.970875978 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.971364975 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.971440077 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.971452951 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.971468925 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.971503973 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.971518040 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.971652031 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.971709967 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.971728086 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.971731901 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.971760035 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.971776962 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.971781969 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.971822023 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.971880913 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.971930027 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.977907896 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.977937937 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.978012085 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.978022099 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.978058100 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.978081942 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.978300095 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.978322983 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.978362083 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.978368044 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.978398085 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.978413105 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.978491068 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.978528976 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.978558064 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.978564978 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.978589058 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.978596926 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.978621960 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.978643894 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.983321905 CEST	49728	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.983338118 CEST	443	49728	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:39.983581066 CEST	49730	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:39.983603954 CEST	443	49730	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.142388105 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.142589092 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.144440889 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.144454956 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.144628048 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.144633055 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.254678011 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.254697084 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.254751921 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.255404949 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.255404949 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.255419970 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.258730888 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.311758995 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.311930895 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.312390089 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.312397003 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.312609911 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.312616110 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.340632915 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.340660095 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.341283083 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.341294050 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.341439962 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.342295885 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.342318058 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.342618942 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.342626095 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.342730045 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.420130014 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.420192003 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.420234919 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.420275927 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.420310974 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.420320988 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.420363903 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.431168079 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.431197882 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.431425095 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.431437969 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.431592941 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.432142019 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.432157993 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.432940960 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.432979107 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.432984114 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.433887005 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.433887005 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.434652090 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.434667110 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.434731960 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.434743881 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.435250998 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.502302885 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.502330065 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.502429962 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.502448082 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.502485037 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.504110098 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.504132032 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.504209995 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.504216909 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.504252911 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.521636009 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.521692038 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.521754980 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.521760941 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.521825075 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.521848917 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.522145033 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.522162914 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.522274017 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.522284031 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.522583961 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.522763014 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.522799969 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.522860050 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.522860050 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.522865057 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.522926092 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.523638010 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.523654938 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.523710012 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.523725033 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.523780107 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.523933887 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.526551008 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.526568890 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.526788950 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.526794910 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.526932955 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.526958942 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.526964903 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.527165890 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.527165890 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.527831078 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.527847052 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.527899027 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.527903080 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.528170109 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.589024067 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.589061975 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.589148045 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.589163065 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.589191914 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.589209080 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.590255976 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.590281010 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.590339899 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.590347052 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.590488911 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.591315031 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.591340065 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.591381073 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.591402054 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.591417074 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.591435909 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.592283010 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.592303991 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.592364073 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.592370033 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.592401981 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.611989021 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.612006903 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.612111092 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.612170935 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.612170935 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.612178087 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.612425089 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.612719059 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.612752914 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.612752914 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.612759113 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.613079071 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.613142967 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.613142967 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.613142967 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.613149881 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.613392115 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.613410950 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.613451958 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.613451958 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.613456964 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.613751888 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.613765955 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.613795042 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.613795042 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.613795042 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.613802910 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.614037991 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.614059925 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.614062071 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.614062071 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.614070892 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.615416050 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.615416050 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.676023006 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.676070929 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.676146984 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.676166058 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.676201105 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.676217079 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.676592112 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.676623106 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.676665068 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.676672935 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.676701069 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.676716089 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.677270889 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.677297115 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.677334070 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.677339077 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.677364111 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.677382946 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.678105116 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.678128004 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.678172112 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.678180933 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.678201914 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.678220987 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.679084063 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.679115057 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.679160118 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.679167986 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.679202080 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.679220915 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.679938078 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.679966927 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.680015087 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.680022955 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.680058002 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.680079937 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.680227995 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.680253029 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.680286884 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.680294991 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.680320024 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.680337906 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.702532053 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.702553034 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.702637911 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.702652931 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.702759027 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.702837944 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.702856064 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.702953100 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.702953100 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.702960968 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.703243017 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.703272104 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.703277111 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.703394890 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.703394890 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.703772068 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.703784943 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.703877926 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.703883886 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.704103947 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.704125881 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.704164028 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.704164028 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.704170942 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.704298019 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.704298019 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.704372883 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.704387903 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.704432964 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.704438925 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.704452038 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.704571009 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.704850912 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.704864979 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.704911947 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.704917908 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.704962015 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.705274105 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.705290079 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.705322981 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.705337048 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.705354929 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.706018925 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.762583971 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.762648106 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.762741089 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.762757063 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.762790918 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.762801886 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.762823105 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.762851000 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.762871027 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.762875080 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.762919903 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.762933016 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.762964010 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.763295889 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.763338089 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.763364077 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.763370991 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.763396025 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.763480902 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.763710022 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.763753891 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.763771057 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.763780117 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.763807058 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.763825893 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.767600060 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.767643929 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.767703056 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.767713070 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.767736912 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.767755985 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.768068075 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.768114090 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.768127918 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.768135071 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.768167019 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.768557072 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.768600941 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.768621922 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.768629074 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.768647909 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.768666983 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.769032955 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.769074917 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.769109964 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.769117117 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.769140959 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.769160986 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.793339968 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.793365955 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.793690920 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.793756962 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.793756962 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.793771029 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.793904066 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.794162989 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.794184923 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.794243097 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.794260979 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.794514894 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.794562101 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.794569016 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.794676065 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.794676065 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.794985056 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.795000076 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.795408010 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.795414925 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.795526981 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.795588017 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.795634985 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.795656919 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.796037912 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.796091080 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.796091080 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.796106100 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.796197891 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.796197891 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.849119902 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.849155903 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.849281073 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.849298954 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.849350929 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.849445105 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.849467993 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.849508047 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.849514008 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.849536896 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.849555016 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.849831104 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.849858046 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.849886894 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.849893093 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.849915028 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.849932909 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.850318909 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.850358963 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.850374937 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.850380898 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.850408077 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.850428104 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.850577116 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.850598097 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.850630999 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.850636959 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.850660086 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.850677013 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.851054907 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.851077080 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.851119995 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.851125956 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.851150036 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.851170063 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.851346016 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.851366043 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.851394892 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.851401091 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.851424932 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.851440907 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.851953030 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.851974010 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.852013111 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.852020025 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.852049112 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.852065086 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.884114981 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.884140015 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.884340048 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.884350061 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.884447098 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.884448051 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.884459019 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.884493113 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.884526968 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.884605885 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.884612083 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.884908915 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.884932041 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.884957075 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.885207891 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.885214090 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.885317087 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.885346889 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.885350943 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.885458946 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.885458946 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.885685921 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.885709047 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.885780096 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.885780096 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.885785103 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.885859966 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.886185884 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.886207104 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.886253119 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.886277914 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.886277914 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.886285067 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.886332989 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.886332989 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.886337996 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.886377096 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.886389017 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.886440992 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.886715889 CEST	49732	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.886742115 CEST	443	49732	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.945133924 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.945178032 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.945265055 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.945271015 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.945287943 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.945312977 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.945314884 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.945353985 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.945364952 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.945379019 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.945404053 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.945657015 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.945678949 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.945719004 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.945728064 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.945774078 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.945774078 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.945985079 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.946006060 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.946062088 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.946069956 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.946079016 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.946106911 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.946415901 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.946449995 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.946521997 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.946531057 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.946578026 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.946983099 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.947011948 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.947048903 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.947056055 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.947088957 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.947092056 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.947112083 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.947118998 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.947134018 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.947144985 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.947184086 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.947609901 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.947637081 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.947686911 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.947695017 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:40.947715044 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:40.947736979 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.022938967 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.022967100 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.023169994 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.023211002 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.023230076 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.023252964 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.023271084 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.023279905 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.023313046 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.023592949 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.023621082 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.023652077 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.023659945 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.023690939 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.023711920 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.024051905 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.024076939 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.024128914 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.024135113 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.024144888 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.024166107 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.024535894 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.024559975 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.024593115 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.024599075 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.024620056 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.024636030 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.024795055 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.024816990 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.024847031 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.024852991 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.024872065 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.024888992 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.025254965 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.025278091 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.025305033 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.025310993 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.025357008 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.025357008 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.025500059 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.025518894 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.025567055 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.025573015 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.025603056 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.109700918 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.109744072 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.109864950 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.109883070 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.109925985 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.110048056 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.110079050 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.110106945 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.110115051 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.110137939 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.110156059 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.110476017 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.110500097 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.110531092 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.110539913 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.110563993 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.110580921 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.110843897 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.110866070 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.110898972 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.110904932 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.110930920 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.110953093 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.111112118 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.111135006 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.111170053 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.111176968 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.111201048 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.111219883 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.111543894 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.111572027 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.111608982 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.111617088 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.111644030 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.111659050 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.112015963 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.112036943 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.112080097 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.112087011 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.112113953 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.112137079 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.112284899 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.112333059 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.112350941 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.112360001 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.112379074 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.112396955 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.112396955 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:41.112440109 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.112827063 CEST	49733	443	192.168.2.6	150.171.28.10
Oct 2, 2024 17:49:41.112838984 CEST	443	49733	150.171.28.10	192.168.2.6
Oct 2, 2024 17:49:42.939414024 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 2, 2024 17:49:42.939414024 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 2, 2024 17:49:43.283185959 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 2, 2024 17:49:50.365520000 CEST	49740	80	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:50.365962029 CEST	49741	80	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:50.370444059 CEST	80	49740	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:50.370536089 CEST	49740	80	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:50.370779991 CEST	49740	80	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:50.371010065 CEST	80	49741	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:50.371071100 CEST	49741	80	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:50.375675917 CEST	80	49740	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:50.887684107 CEST	80	49740	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:50.939656973 CEST	49740	80	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:51.619716883 CEST	49743	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:51.619817019 CEST	443	49743	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:51.619992018 CEST	49743	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:51.620419025 CEST	49743	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:51.620456934 CEST	443	49743	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:52.146748066 CEST	443	49743	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:52.147037029 CEST	49743	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:52.147077084 CEST	443	49743	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:52.148135900 CEST	443	49743	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:52.148200989 CEST	49743	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:52.149283886 CEST	49743	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:52.149343014 CEST	443	49743	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:52.149480104 CEST	49743	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:52.149496078 CEST	443	49743	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:52.189665079 CEST	49743	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:52.325174093 CEST	443	49743	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:52.325444937 CEST	443	49743	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:52.325510979 CEST	49743	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:52.326642036 CEST	49743	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:52.326713085 CEST	443	49743	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:52.553637981 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 2, 2024 17:49:52.553664923 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 2, 2024 17:49:52.701144934 CEST	49744	443	192.168.2.6	142.250.184.196
Oct 2, 2024 17:49:52.701174974 CEST	443	49744	142.250.184.196	192.168.2.6
Oct 2, 2024 17:49:52.701231003 CEST	49744	443	192.168.2.6	142.250.184.196
Oct 2, 2024 17:49:52.706528902 CEST	49744	443	192.168.2.6	142.250.184.196
Oct 2, 2024 17:49:52.706545115 CEST	443	49744	142.250.184.196	192.168.2.6
Oct 2, 2024 17:49:52.748408079 CEST	49745	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:52.748456955 CEST	443	49745	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:52.749021053 CEST	49745	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:52.749679089 CEST	49745	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:52.749692917 CEST	443	49745	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:52.895586967 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 2, 2024 17:49:53.246500969 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:53.246567011 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:53.246643066 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:53.250897884 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:53.250926018 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:53.284516096 CEST	443	49745	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:53.328608036 CEST	49745	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:53.365617990 CEST	443	49744	142.250.184.196	192.168.2.6
Oct 2, 2024 17:49:53.406718016 CEST	49744	443	192.168.2.6	142.250.184.196
Oct 2, 2024 17:49:53.526554108 CEST	49745	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:53.526592970 CEST	443	49745	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:53.527043104 CEST	49744	443	192.168.2.6	142.250.184.196
Oct 2, 2024 17:49:53.527056932 CEST	443	49744	142.250.184.196	192.168.2.6
Oct 2, 2024 17:49:53.528073072 CEST	443	49745	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:53.528932095 CEST	49745	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:53.529131889 CEST	443	49745	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:53.529386044 CEST	49745	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:53.530797005 CEST	443	49744	142.250.184.196	192.168.2.6
Oct 2, 2024 17:49:53.530879974 CEST	49744	443	192.168.2.6	142.250.184.196
Oct 2, 2024 17:49:53.560790062 CEST	49744	443	192.168.2.6	142.250.184.196
Oct 2, 2024 17:49:53.561100006 CEST	443	49744	142.250.184.196	192.168.2.6
Oct 2, 2024 17:49:53.575402975 CEST	443	49745	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:53.609944105 CEST	49744	443	192.168.2.6	142.250.184.196
Oct 2, 2024 17:49:53.609958887 CEST	443	49744	142.250.184.196	192.168.2.6
Oct 2, 2024 17:49:53.656718969 CEST	49744	443	192.168.2.6	142.250.184.196
Oct 2, 2024 17:49:53.891566038 CEST	443	49745	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:53.891602993 CEST	443	49745	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:53.891709089 CEST	49745	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:53.891742945 CEST	443	49745	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:53.891762972 CEST	443	49745	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:53.891819000 CEST	49745	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:53.891824007 CEST	443	49745	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:53.891887903 CEST	49745	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:53.897636890 CEST	443	49745	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:53.897694111 CEST	443	49745	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:53.897706985 CEST	49745	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:53.897722960 CEST	443	49745	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:53.897752047 CEST	49745	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:53.897773027 CEST	49745	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:53.897788048 CEST	443	49745	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:53.898056030 CEST	49745	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:53.904115915 CEST	49745	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:53.904130936 CEST	443	49745	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:53.907393932 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:53.907517910 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:53.913970947 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:53.914004087 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:53.914412975 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:53.969232082 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:54.103601933 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:54.151400089 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:54.288319111 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:54.288387060 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:54.288513899 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:54.288546085 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:54.288561106 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:54.288567066 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:54.288588047 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:54.288592100 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:54.317394972 CEST	49747	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:54.317451954 CEST	443	49747	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:54.317600012 CEST	49747	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:54.317928076 CEST	49747	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:54.317946911 CEST	443	49747	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:54.599416971 CEST	443	49719	173.222.162.64	192.168.2.6
Oct 2, 2024 17:49:54.599520922 CEST	49719	443	192.168.2.6	173.222.162.64
Oct 2, 2024 17:49:54.960403919 CEST	443	49747	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:54.960489988 CEST	49747	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:54.984211922 CEST	49747	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:54.984239101 CEST	443	49747	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:54.984714985 CEST	443	49747	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:55.018323898 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.018374920 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.018457890 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.019227982 CEST	49747	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:55.022650957 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.022669077 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.059425116 CEST	443	49747	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:55.234570026 CEST	443	49747	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:55.234659910 CEST	443	49747	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:55.234716892 CEST	49747	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:55.235809088 CEST	49747	443	192.168.2.6	184.28.90.27
Oct 2, 2024 17:49:55.235826969 CEST	443	49747	184.28.90.27	192.168.2.6
Oct 2, 2024 17:49:55.541876078 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.542162895 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.542193890 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.543246984 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.543308973 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.543658972 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.543724060 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.543941021 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.543953896 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.594398022 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.753071070 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.753142118 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.753164053 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.753207922 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.753207922 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.753245115 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.753256083 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.753277063 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.753277063 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.753297091 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.753333092 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.753376007 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.797595978 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.813730001 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.813750982 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.813779116 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.813811064 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.813810110 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.813832045 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.813863039 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.813882113 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.814145088 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:49:55.814207077 CEST	443	49748	206.126.172.72	192.168.2.6
Oct 2, 2024 17:49:55.814251900 CEST	49748	443	192.168.2.6	206.126.172.72
Oct 2, 2024 17:50:03.261023998 CEST	443	49744	142.250.184.196	192.168.2.6
Oct 2, 2024 17:50:03.261171103 CEST	443	49744	142.250.184.196	192.168.2.6
Oct 2, 2024 17:50:03.261302948 CEST	49744	443	192.168.2.6	142.250.184.196
Oct 2, 2024 17:50:04.143258095 CEST	49752	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:04.143285990 CEST	443	49752	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:04.143333912 CEST	49752	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:04.143841982 CEST	49752	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:04.143855095 CEST	443	49752	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:04.301265955 CEST	49744	443	192.168.2.6	142.250.184.196
Oct 2, 2024 17:50:04.301291943 CEST	443	49744	142.250.184.196	192.168.2.6
Oct 2, 2024 17:50:04.713748932 CEST	443	49752	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:04.714061975 CEST	49752	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:04.714823008 CEST	443	49752	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:04.718874931 CEST	49752	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:05.068424940 CEST	49752	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:05.068448067 CEST	443	49752	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:05.069418907 CEST	443	49752	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:05.069622040 CEST	49752	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:05.071356058 CEST	49752	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:05.111423016 CEST	443	49752	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:05.180969000 CEST	443	49752	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:05.181092024 CEST	49752	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:05.181103945 CEST	443	49752	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:05.181176901 CEST	443	49752	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:05.181199074 CEST	49752	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:05.181282043 CEST	49752	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:05.181282043 CEST	49752	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:05.181287050 CEST	443	49752	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:05.181323051 CEST	49752	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:05.181323051 CEST	49752	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:06.155318022 CEST	49754	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:06.155339003 CEST	443	49754	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:06.155415058 CEST	49754	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:06.155719042 CEST	49754	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:06.155734062 CEST	443	49754	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:06.883414984 CEST	443	49754	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:06.883565903 CEST	49754	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:06.884082079 CEST	49754	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:06.884092093 CEST	443	49754	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:06.884366989 CEST	49754	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:06.884375095 CEST	443	49754	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:06.997402906 CEST	443	49754	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:06.997565031 CEST	49754	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:06.997632980 CEST	49754	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:06.997665882 CEST	443	49754	150.171.27.10	192.168.2.6
Oct 2, 2024 17:50:06.997719049 CEST	49754	443	192.168.2.6	150.171.27.10
Oct 2, 2024 17:50:35.375751972 CEST	49741	80	192.168.2.6	206.126.172.72
Oct 2, 2024 17:50:35.380881071 CEST	80	49741	206.126.172.72	192.168.2.6
Oct 2, 2024 17:50:35.891407013 CEST	49740	80	192.168.2.6	206.126.172.72
Oct 2, 2024 17:50:35.896394968 CEST	80	49740	206.126.172.72	192.168.2.6
Oct 2, 2024 17:50:50.649997950 CEST	49741	80	192.168.2.6	206.126.172.72
Oct 2, 2024 17:50:50.655347109 CEST	80	49741	206.126.172.72	192.168.2.6
Oct 2, 2024 17:50:50.655414104 CEST	49741	80	192.168.2.6	206.126.172.72
Oct 2, 2024 17:50:52.713403940 CEST	49761	443	192.168.2.6	142.250.186.68
Oct 2, 2024 17:50:52.713488102 CEST	443	49761	142.250.186.68	192.168.2.6
Oct 2, 2024 17:50:52.713566065 CEST	49761	443	192.168.2.6	142.250.186.68
Oct 2, 2024 17:50:52.713922977 CEST	49761	443	192.168.2.6	142.250.186.68
Oct 2, 2024 17:50:52.713963032 CEST	443	49761	142.250.186.68	192.168.2.6
Oct 2, 2024 17:50:53.353658915 CEST	443	49761	142.250.186.68	192.168.2.6
Oct 2, 2024 17:50:53.354007006 CEST	49761	443	192.168.2.6	142.250.186.68
Oct 2, 2024 17:50:53.354047060 CEST	443	49761	142.250.186.68	192.168.2.6
Oct 2, 2024 17:50:53.354398966 CEST	443	49761	142.250.186.68	192.168.2.6
Oct 2, 2024 17:50:53.354787111 CEST	49761	443	192.168.2.6	142.250.186.68
Oct 2, 2024 17:50:53.354861975 CEST	443	49761	142.250.186.68	192.168.2.6
Oct 2, 2024 17:50:53.407105923 CEST	49761	443	192.168.2.6	142.250.186.68
Oct 2, 2024 17:51:03.284445047 CEST	443	49761	142.250.186.68	192.168.2.6
Oct 2, 2024 17:51:03.284621954 CEST	443	49761	142.250.186.68	192.168.2.6
Oct 2, 2024 17:51:03.284691095 CEST	49761	443	192.168.2.6	142.250.186.68
Oct 2, 2024 17:51:04.289222956 CEST	49761	443	192.168.2.6	142.250.186.68
Oct 2, 2024 17:51:04.289264917 CEST	443	49761	142.250.186.68	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 2, 2024 17:49:47.777669907 CEST	53	61196	1.1.1.1	192.168.2.6
Oct 2, 2024 17:49:47.785626888 CEST	53	63007	1.1.1.1	192.168.2.6
Oct 2, 2024 17:49:48.982003927 CEST	53	55402	1.1.1.1	192.168.2.6
Oct 2, 2024 17:49:50.021920919 CEST	63596	53	192.168.2.6	1.1.1.1
Oct 2, 2024 17:49:50.024769068 CEST	56920	53	192.168.2.6	1.1.1.1
Oct 2, 2024 17:49:50.303908110 CEST	53	63596	1.1.1.1	192.168.2.6
Oct 2, 2024 17:49:50.392879009 CEST	53	56920	1.1.1.1	192.168.2.6
Oct 2, 2024 17:49:51.260593891 CEST	51101	53	192.168.2.6	1.1.1.1
Oct 2, 2024 17:49:51.262012005 CEST	61838	53	192.168.2.6	1.1.1.1
Oct 2, 2024 17:49:51.595994949 CEST	53	51101	1.1.1.1	192.168.2.6
Oct 2, 2024 17:49:51.618426085 CEST	53	61838	1.1.1.1	192.168.2.6
Oct 2, 2024 17:49:52.669810057 CEST	57901	53	192.168.2.6	1.1.1.1
Oct 2, 2024 17:49:52.670221090 CEST	62957	53	192.168.2.6	1.1.1.1
Oct 2, 2024 17:49:52.677097082 CEST	53	57901	1.1.1.1	192.168.2.6
Oct 2, 2024 17:49:52.677112103 CEST	53	62957	1.1.1.1	192.168.2.6
Oct 2, 2024 17:49:54.528064013 CEST	60770	53	192.168.2.6	1.1.1.1
Oct 2, 2024 17:49:54.528722048 CEST	51780	53	192.168.2.6	1.1.1.1
Oct 2, 2024 17:49:54.795197964 CEST	53	51780	1.1.1.1	192.168.2.6
Oct 2, 2024 17:49:54.985019922 CEST	53	60770	1.1.1.1	192.168.2.6
Oct 2, 2024 17:50:06.113854885 CEST	53	58188	1.1.1.1	192.168.2.6
Oct 2, 2024 17:50:25.356859922 CEST	53	56686	1.1.1.1	192.168.2.6
Oct 2, 2024 17:50:47.667787075 CEST	53	59449	1.1.1.1	192.168.2.6
Oct 2, 2024 17:50:48.353439093 CEST	53	54998	1.1.1.1	192.168.2.6
Oct 2, 2024 17:50:52.705192089 CEST	58483	53	192.168.2.6	1.1.1.1
Oct 2, 2024 17:50:52.705192089 CEST	60941	53	192.168.2.6	1.1.1.1
Oct 2, 2024 17:50:52.712086916 CEST	53	60941	1.1.1.1	192.168.2.6
Oct 2, 2024 17:50:52.712167025 CEST	53	58483	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 2, 2024 17:49:50.394068003 CEST	192.168.2.6	1.1.1.1	c245	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 2, 2024 17:49:50.021920919 CEST	192.168.2.6	1.1.1.1	0x8112	Standard query (0)	dne.sendyouropinions.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:49:50.024769068 CEST	192.168.2.6	1.1.1.1	0x3db4	Standard query (0)	dne.sendyouropinions.com	65	IN (0x0001)	false
Oct 2, 2024 17:49:51.260593891 CEST	192.168.2.6	1.1.1.1	0x7f71	Standard query (0)	dne.sendyouropinions.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:49:51.262012005 CEST	192.168.2.6	1.1.1.1	0xb0f0	Standard query (0)	dne.sendyouropinions.com	65	IN (0x0001)	false
Oct 2, 2024 17:49:52.669810057 CEST	192.168.2.6	1.1.1.1	0xaf16	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:49:52.670221090 CEST	192.168.2.6	1.1.1.1	0x56c2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 2, 2024 17:49:54.528064013 CEST	192.168.2.6	1.1.1.1	0x22f7	Standard query (0)	dne.sendyouropinions.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:49:54.528722048 CEST	192.168.2.6	1.1.1.1	0x8e67	Standard query (0)	dne.sendyouropinions.com	65	IN (0x0001)	false
Oct 2, 2024 17:50:52.705192089 CEST	192.168.2.6	1.1.1.1	0xf30c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:50:52.705192089 CEST	192.168.2.6	1.1.1.1	0x4630	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 2, 2024 17:49:50.303908110 CEST	1.1.1.1	192.168.2.6	0x8112	No error (0)	dne.sendyouropinions.com		206.126.172.72	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:49:51.595994949 CEST	1.1.1.1	192.168.2.6	0x7f71	No error (0)	dne.sendyouropinions.com		206.126.172.72	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:49:52.677097082 CEST	1.1.1.1	192.168.2.6	0xaf16	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:49:52.677112103 CEST	1.1.1.1	192.168.2.6	0x56c2	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 2, 2024 17:49:54.985019922 CEST	1.1.1.1	192.168.2.6	0x22f7	No error (0)	dne.sendyouropinions.com		206.126.172.72	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:50:04.142441988 CEST	1.1.1.1	192.168.2.6	0xf0cf	No error (0)	g-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 17:50:04.142441988 CEST	1.1.1.1	192.168.2.6	0xf0cf	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:50:04.142441988 CEST	1.1.1.1	192.168.2.6	0xf0cf	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:50:52.712086916 CEST	1.1.1.1	192.168.2.6	0x4630	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 2, 2024 17:50:52.712167025 CEST	1.1.1.1	192.168.2.6	0xf30c	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:51:00.927045107 CEST	1.1.1.1	192.168.2.6	0xaea	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 2, 2024 17:51:00.927045107 CEST	1.1.1.1	192.168.2.6	0xaea	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

tse1.mm.bing.net

www.bing.com

dne.sendyouropinions.com

fs.microsoft.com

g.bing.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49740	206.126.172.72	80	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 2, 2024 17:49:50.370779991 CEST	439	OUT	GET / HTTP/1.1 Host: dne.sendyouropinions.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 2, 2024 17:49:50.887684107 CEST	137	IN	HTTP/1.0 302 Moved Temporarily Location: https://dne.sendyouropinions.com/ Server: BigIP Connection: Keep-Alive Content-Length: 0
Oct 2, 2024 17:50:35.891407013 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49741	206.126.172.72	80	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 2, 2024 17:50:35.375751972 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49731	150.171.28.10	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:49:38 UTC	346	OUT	GET /th?id=OADD2.10239370639606_1UY6VCV79VNDR5KH5&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-10-02 15:49:39 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 612524 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 601CBB5254B646659875DD5AD1DBDE61 Ref B: EWR30EDGE0415 Ref C: 2024-10-02T15:49:39Z Date: Wed, 02 Oct 2024 15:49:38 GMT Connection: close
2024-10-02 15:49:39 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 19 c4 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 31 31 3a 32 31 20 31 36 3a 31 39 3a 33 36 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 04 38 a0 03 00 04 00 00 00 01 00 00 07 80 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``ExifMM*bj(1r2i``Adobe Photoshop 25.1 (Windows)2023:11:21 16:19:368
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: f4 d9 2d b4 98 20 9d 76 b4 6b 86 ad b8 2c 53 6e 7f bd 56 12 dc 06 af 3b 11 8f 95 64 93 d1 1e ae 17 03 4f 0f 77 1d d9 02 5a 8d bc 52 49 69 9f ad 5d 58 f1 fc 34 e6 84 fd fe f5 c1 ed 19 d7 ca 65 3d a6 3f 86 ab 5c e9 b0 49 f7 e0 dd b7 fb cb 5b fe 58 3c f7 a8 e4 8f 0b cd 54 6a be 84 ba 69 1c dd ce 95 6c df 7e d9 7e 5f f6 6a bd f6 85 67 3d bb 66 25 c3 2d 74 37 0a 87 a7 cd 54 ee 3e 45 f6 ae 98 56 9d d6 a6 33 8a 69 a6 b4 3c 8f 5c b0 7d 3b 52 92 d8 fd d5 fb bf 4a aa 17 1c d7 41 e3 44 9e 6d 51 9c 44 db 63 e3 75 61 e0 86 c1 f9 4f fb 55 f4 54 aa 73 41 37 b9 f2 75 a9 28 d4 69 2d 08 b6 9a 5d b5 6b 4f b5 7b bb a5 89 3a b5 74 96 be 13 cb 29 66 dc 29 54 af 0a 7f 13 34 a3 83 ab 55 5e 2b 43 90 db fe c5 39 41 3c 05 dd 5e 86 9e 1c b3 5b 7d 9e 52 e7 fb d4 26 85 6f 13 71 12 fc Data Ascii: - vk,SnV;dOwZRIi]X4e=?\I[X<Tjil~~_jg=f%-t7T>EV3i<\};RJADmQDcuaOUTsA7u(i-]kO{:t)f)T4U^+C9A<^[}R&oq
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: 7b 35 47 72 e2 a2 77 34 c7 6d d1 e4 d3 b0 9b 23 99 ce ee 6a 1d f8 a4 b8 6e f5 59 e5 ad 63 13 26 ec 4f 23 e5 6a ac 8f de 9e 92 67 8a 6c cb 9a b4 91 2c a5 32 fd e3 55 e4 1f 35 5e ba c2 ae 2a 9c c3 1d 2b 58 ea 67 22 07 27 6f 15 0b 65 9b 9e 95 2b 0c d3 15 71 5a 23 36 3a 1e 7e b5 2a 81 d3 bd 47 c2 d2 ab f7 0d ba 90 d6 85 88 db 1c 54 88 d8 aa 68 fb 79 a9 16 40 29 34 52 68 b5 95 ab 10 c8 3c b6 15 9e b2 76 ed 53 a4 9e bd 6a 1a 1d d1 75 65 c7 f1 d3 92 53 54 7c df 7a 96 39 81 e7 75 4d 98 d4 8b 6b 21 ed 4e 67 90 2e 6a bc 72 62 4a b4 ac ae b8 35 0f 43 44 d3 22 de 4f de a5 5d df 36 29 2e 19 23 e9 50 b5 c8 14 12 dd 89 d1 87 f1 7f 15 39 08 eb ba a8 34 c6 9d 1c c4 7d 69 f2 b0 e6 2d 39 1b aa 09 9b b5 47 35 c0 35 0b 5c 67 a7 f0 d5 46 2c 57 40 e7 14 8b 29 dd 4c df 96 cf 7a Data Ascii: {5Grw4m#jnYc&O#jgl,2U5^+Xg"'oe+qZ#6:~GThy@)4Rh<vSjueST\|z9uMk!Ng.jrbJ5CD"O]6).#P94}i-9G55\gF,W@)Lz
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: b6 91 a1 25 e6 7a 54 6f 73 bb ad 50 f9 a9 39 fb b5 6a 9a 25 d4 93 2c bc c4 36 29 16 e0 af 23 ad 56 62 7a 53 76 92 d5 5c a8 5c cc b5 24 e5 a9 9e 79 dd ef 50 b2 b9 a4 db 21 a3 95 0a ec 95 a5 27 a5 27 99 51 6c 71 cf cd 48 ca 68 b0 b5 24 69 7e 6c 9a 6b 3d 33 63 fe 34 be 4b 95 a6 20 69 3f bd 48 d2 0d b9 ff 00 d0 68 f2 1e 9b f6 79 3b 6e a6 2d 43 cc c5 2f 9d 85 a6 79 12 0e 4a d1 e5 3e de 68 d0 35 1f e7 93 47 9c 6a 3f 2c ee a7 79 47 77 34 83 51 7c d6 a1 a6 cf 06 8f 2a 8f 2b 3d 16 98 6a 1b fb 52 ac 94 e4 84 9f ef 54 a9 6e 4e df 96 90 6a 41 e6 7a d2 b3 9f f7 6a e2 5a 65 b8 a4 6b 27 db 90 94 5d 0f 95 95 77 d2 ef cf 15 37 d8 a4 fe ef 14 9f 65 71 c6 da 2e 85 66 45 ba 9e 8c 7a 54 89 6a fd 2a c4 36 44 b5 26 35 16 c8 13 9e bd 2a 68 c9 1d 2a da 59 a6 d5 15 3a 69 cd e5 e4 Data Ascii: %zTosP9j%,6)#VbzSv\\$yP!''QlqHh$i~lk=3c4K i?Hhy;n-C/yJ>h5Gj?,yGw4Q\|+=jRTnNjAzjZek']w7eq.fEzTj6D&5hY:i
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: 51 87 7a 29 56 29 3b ad 15 57 43 57 3c ee 3d 3c af c8 56 a6 4d 3d fb 7c d5 bc f1 80 cc 45 48 91 21 ae e7 58 e2 58 7b b3 9e 6b 27 f9 bf 74 d4 cb 8b 02 b6 ec fb 76 9a eb ed ed 23 f2 f2 7a 53 5e d6 17 99 45 47 d6 0b fa ab ee 70 72 24 89 c7 cc b4 c6 63 de bd 1a 1d 22 d2 49 18 95 56 f9 6a a5 e7 87 ed 9e 65 8d 22 55 1d 69 ac 54 2f 6b 12 f0 73 4b 46 70 de 6f cb 4f 47 3f dd ae fd fc 21 64 63 52 3a d4 2b e1 7b 68 be e3 35 0b 17 4d 8d e0 ea a3 8b 57 7f ee b5 2f 98 e1 79 ae ae 6d 2c 45 e6 79 7f 36 da 5d 2f 4d 12 49 be 45 da b5 5e da 36 b9 1f 57 9d ec 72 5e 6b 1e 36 d1 e6 1d d8 d9 5d 9e a1 a5 5b 15 ca 46 b5 5a 3d 3a d9 5b 7f 95 ca d1 1a d1 6a f6 14 a8 ce 2c e5 37 12 df 77 8a 55 86 47 5e 15 ab b0 fb 14 01 bf d5 2b 53 d6 de 21 c0 55 a7 ed 51 9f 2b 38 f6 d3 ae 4f fc b3 Data Ascii: Qz)V);WCW<=<VM=\|EH!XX{k'tv#zS^EGpr$c"IVje"UiT/ksKFpoOG?!dcR:+{h5MW/ym,Ey6]/MIE^6Wr^k6][FZ=:[j,7wUG^+S!UQ+8O
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: 0e 46 6b e6 ff 00 2a e1 57 fd 6c ab ff 00 02 34 f5 9f 53 f9 71 a8 5d ff 00 b3 fb f7 ff 00 1a 39 96 f7 d0 4d be c7 b7 dc 69 9a 8b ea 56 d1 c5 6d bb cb bb 94 fc ac 3e 51 d8 fe 55 d5 7c 39 d2 b5 1b 7f 18 69 97 72 ae db 7b 39 26 49 19 98 2e dd e0 e3 f0 af 9e f4 4d 46 5b 38 64 92 ef 53 d4 a3 92 46 1b 55 59 f6 ff 00 df 59 aa 97 1a d6 bb 23 6c fe d7 be 68 f7 65 57 cc 2d f4 ab e7 84 af 7b 85 de 88 fa fb c1 3a 6e a1 7b e3 2d 42 e2 58 bc bb 69 22 57 89 9b fe 5a 05 73 9c 7a d7 2f 6b a3 eb ab ad 5b 4e 90 49 24 70 5d cb 37 ca a5 b6 83 21 c6 6b c1 7c 31 e2 6b cb 4b a8 9f 57 f1 0e ad 04 6b 21 f3 23 b4 62 8f b3 1d bb 1e 69 66 f8 97 e3 99 21 6b 78 f5 ab 95 8b a2 b4 79 47 60 0f cb b8 a9 e4 d2 b4 5b bd ec 35 78 c5 2b 1e cf f1 32 d2 f1 e1 d1 5d ec e5 5d d7 71 c8 df ec 81 d7 Data Ascii: Fk*Wl4Sq]9MiVm>QU\|9ir{9&I.MF[8dSFUYY#lheW-{:n{-BXi"WZsz/k[NI$p]7!k\|1kKWk!#bif!kxyG`[5x+2]]q
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: 95 a4 93 b3 01 e8 7a d7 44 21 a3 5b b3 39 68 fb 12 eb 96 f6 da 4e a1 04 76 57 9e 64 b1 4b e7 c5 27 f1 48 08 07 e6 3d 8f 06 b6 34 a3 e2 8f 11 c3 78 2d ef 2d 16 26 6f 32 49 6e 72 db 9f ae d0 47 46 fa d6 44 76 11 de de 39 92 fb 75 bc 16 91 f9 77 2b 1f ca c7 1c 93 e9 83 5d 17 87 e5 d2 34 f8 6c f4 7b 6d 63 cd f3 67 12 4a d1 46 7e 69 08 c6 37 7a 62 b4 a7 7d 35 22 76 5d 0f 4e d2 6e 74 eb 7b 3b 1d 3a 59 f7 5d f9 0b f2 b2 95 dc 40 f9 88 ad 04 78 17 f8 57 fd aa e4 fe 1b 9b 6f 18 c9 17 8a e2 fd d5 be 99 77 75 67 69 1c 79 65 b8 c7 c8 ec d9 e9 86 1c 57 72 b6 f1 2f f0 d7 e8 38 1a b5 25 41 39 ab 76 f4 3e 2f 17 49 46 b4 94 19 51 ae 23 0b c7 4a 85 ee 80 ab ef 04 72 49 fd dd b4 d9 ac 61 2b f7 76 d7 5a 94 4e 57 09 b3 3d af 31 d2 95 6f 10 fd f5 6a 95 ad 46 ea 89 a1 0a d8 db Data Ascii: zD![9hNvWdK'H=4x--&o2InrGFDv9uw+]4l{mcgJF~i7zb}5"v]Nnt{;:Y]@xWowugiyeWr/8%A9v>/IFQ#JrIa+vZNW=1ojF
2024-10-02 15:49:39 UTC	16065	IN	Data Raw: 9b 8e a4 e2 92 4b 41 1c 32 47 03 33 2e df ee ed 65 23 a8 aa b7 10 20 85 6e 64 fb 4b 49 12 fe ef cb 8f 6a a8 3e e2 a5 ca ec 51 5a 92 eb 96 d2 db dc 79 69 b5 ae 22 52 5b 6f cd b8 9e 40 f7 ac ed 54 59 5b 6b 1f e8 13 ac a2 4b 60 7e 65 1b 56 42 3e 65 1d b1 42 de 5f c5 6f 3d d4 53 b4 93 45 24 6e ad 27 cc aa 33 8c 7d 6a 7d 4a 24 ba 68 e5 75 58 8e e0 7f 77 85 dd 57 16 9a d3 60 69 1e 63 e2 69 24 93 c4 4b 6e 1b f7 8d 26 ff 00 bb f7 70 3a 56 cf 89 e3 8f ed 56 db e0 56 13 c1 19 6f 97 6e d3 d3 1f 98 cd 49 e3 2d 30 58 78 9a 42 19 65 5b 98 01 9f 72 fc ec e4 9f 96 b3 a1 d3 fc 8b a5 f2 b6 f9 77 5c 34 72 b3 b6 dc fe 06 bb 25 26 f5 b9 ce 96 e8 9f ec 9a 75 af 86 ee 8d bc 1f bd 8e 45 46 7f 2c ae e7 6c 9d dd 4e 30 a3 a5 72 5e 20 b7 92 e1 56 48 a7 91 a6 66 c4 9e 64 9b 96 40 3d Data Ascii: KA2G3.e# ndKIj>QZyi"R[o@TY[kK`~eVB>eB_o=SE$n'3}j}J$huXwW`ici$Kn&p:VVVonI-0XxBe[rw\4r%&uEF,lN0r^ VHfd@=
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: c5 61 6f f6 69 23 8b 01 65 59 37 3a c8 7f bc 4f 6a cf d0 ef b5 7b 0b ed 42 7d 51 7c a5 f2 8f 95 1c 8c 36 c9 8e ca be 9b a9 de 3e b8 f3 b5 45 80 ed b7 6b 49 cb cb 3a af ca d8 c0 c8 ce 73 59 7a 7d e4 fa 85 f3 46 97 3f 69 8b fd 5c 6d 24 61 a6 62 79 07 ff 00 d5 5b c5 7b bb 0e c5 a8 58 4d ab 2d e6 a0 df 6a 5d a2 35 8e 5c 6d 84 9e 72 17 f8 45 7a 5f 84 33 67 e0 d8 f7 ea 6a d7 32 37 ef 16 08 36 c7 b0 74 ce 3a 8a f2 cf 12 48 96 97 51 cb 35 f4 11 cc d1 ec 68 15 4e e5 1d b3 ee 6b d2 d7 49 8d fc 27 15 dd 84 f0 4f 35 d4 6b ba e6 35 da ac 3a f1 9f a5 0e e1 a6 85 3d 2f 4d bb b1 d7 27 fb 06 8b 69 2d c4 8d e7 4b 2c 6d bf e4 3d 95 88 1b 6b ad 8c 41 77 a3 c7 1d 97 99 15 aa a9 92 55 91 4f ef 09 fe f7 ae 2b 21 2f a4 81 67 bf 2e df ea 82 49 1a c7 b5 18 0f ee fb d6 bd 84 85 f4 Data Ascii: aoi#eY7:Oj{B}Q\|6>EkI:sYz}F?i\m$aby[{XM-j]5\mrEz_3gj276t:HQ5hNkI'O5k5:=/M'i-K,m=kAwUO+!/g.I
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: d2 fd 9a 49 60 b9 5f 32 36 56 75 55 19 fe 2c 73 f8 1a 85 74 e8 e3 b8 93 cf b1 8f 6a b0 f2 f6 e1 95 7d 73 81 fa d4 be 20 1a af 93 05 86 8f 3c 71 45 24 65 d5 99 87 cc 7d 0f b0 aa bd dd 90 b6 47 9b f8 9b c5 32 8d 4a 4b 0d 57 41 82 5d b3 e6 da 35 91 d5 76 0e 8c 54 1c 31 22 bb 2f f8 49 ec 2c bc 3f 6b 73 2d 9d dc 11 b7 0a b1 30 f9 46 3a 30 e3 22 b2 34 8b 2f 12 c9 70 b7 17 16 cd 98 24 22 4b 96 64 74 6f 5e 36 e7 1f 43 56 b5 0d 37 5d 96 f3 c8 b3 97 ed 92 b4 81 f6 c9 6d 1b 5b c2 9d 87 3f c5 5a d4 97 be bc 82 2b dd b3 2d a6 b3 a2 6b 16 b2 59 47 05 ce 6e 9b 0a db 86 ec ff 00 b5 db 8a e8 3c 43 a2 dc 5a 78 7e db 31 41 1d bf cb 1a af 94 19 fa 60 6d 03 8a ab e1 7d 3b 51 92 69 6d b5 3b 1b 48 04 8c 0a ed 51 1e dc 7b af ad 6a 6b 1a 6c f1 d8 f9 96 73 f9 12 c7 26 7f 77 21 77 Data Ascii: I`_26VuU,stj}s <qE$e}G2JKWA]5vT1"/I,?ks-0F:0"4/p$"Kdto^6CV7]m[?Z+-kYGn<CZx~1A`m};Qim;HQ{jkls&w!w

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49727	2.23.209.179	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:49:39 UTC	367	OUT	GET /th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Connection: Keep-Alive
2024-10-02 15:49:39 UTC	627	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Type: image/png Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QWthbWFp"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Content-Length: 1107 Date: Wed, 02 Oct 2024 15:49:39 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.1ed01702.1727884179.f50548c
2024-10-02 15:49:39 UTC	1107	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 03 e8 49 44 41 54 48 4b bd 56 df 6f 54 45 14 9e 7b 79 37 a2 bc 17 2a 7f 82 fa 2c 94 d7 96 1f 09 0f e2 0b d1 44 30 1a c5 42 4b 20 d0 90 00 89 89 3f 23 0b a1 a5 2d 82 b4 90 b4 1a 69 81 6e 63 49 20 41 5e 08 a5 85 85 6e 03 16 24 d8 b4 5d 76 bb eb da 36 e9 9c 73 c6 ef cc bd bb 4b c0 1a 5b 13 6f 72 ee f7 ed cc dd f3 cd f9 e6 cc cd 35 22 c2 ac b7 28 4a 5c f1 6f 79 fc a8 5e ff c4 fd c5 b8 0c 3b e7 e6 af f6 f0 ec b1 bd 3c d7 76 88 e6 da 0e 02 0f 2a 56 78 fb 21 9a 39 b6 87 e5 ee 10 0f 67 7e a4 9e d4 47 9c 1c dd 4d Data Ascii: PNGIHDRw=sRGBgAMAapHYs%%IR$IDATHKVoTE{y7,D0BK ?#-incI A^n$]v6sK[or5"(J\oy^;<vVx!9g~GM

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49728	150.171.28.10	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:49:39 UTC	375	OUT	GET /th?id=OADD2.10239395019081_1G8JFT41D9TYPNUJJ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-10-02 15:49:39 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 714951 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: DD54B6DA2881453694E5FF0460117434 Ref B: EWR30EDGE1621 Ref C: 2024-10-02T15:49:39Z Date: Wed, 02 Oct 2024 15:49:39 GMT Connection: close
2024-10-02 15:49:39 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 1c bc 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 34 3a 30 34 3a 33 30 20 31 37 3a 35 33 3a 34 31 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``ExifMM*bj(1r2i``Adobe Photoshop 25.4 (Windows)2024:04:30 17:53:418
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: 26 b6 19 22 d3 76 d5 88 e2 a9 7c aa 8e 63 48 d3 6f 52 a4 6b 4f 92 2f e3 a9 76 ec 9a a5 8d 7f 82 97 31 71 a6 9b 29 f9 54 ef 2b fb f5 63 ca a7 6c a3 98 a8 d2 29 6d a3 6d 5a f2 a4 4f 2e 88 e2 a7 cc 65 ec dd ec 55 db 4d db 57 fc aa 64 8b b2 8e 71 ca 85 91 4e 9b b4 d5 c9 23 a8 bc aa a5 24 cc a5 49 a6 41 46 d3 52 bc 7b 29 24 5a 7c cb a0 4a 32 be c4 7b 4d 1b 4d 49 22 d1 4c 97 1b 3b 11 ed 34 6d 34 ed b4 35 02 b6 84 74 53 b6 9a 74 6b 4e e3 8a bb 22 d9 4b cd 49 4d a2 e5 0d a2 9d b4 d1 45 c9 e5 19 b2 96 9d 45 17 09 0d a2 9d 46 d3 4c 91 b4 6d f6 a7 51 b4 d0 03 68 a7 51 40 0d db ed 45 3b 69 a2 80 1b 45 3a 8d a6 80 0a 28 a7 50 04 74 ea 28 a0 02 9b 4e a2 80 0a 6d 3b 69 a7 e2 80 b8 ca 28 a2 80 1b 4e a3 69 a7 52 b8 0d a2 9d 45 20 1b b4 d1 4f c5 32 9e e0 36 8d be d4 ea 36 Data Ascii: &"v\|cHoRkO/v1q)T+cl)mmZO.eUMWdqN#$IAFR{)$Z\|J2{MMI"L;4m45tStkN"KIMEEFLmQhQ@E;iE:(Pt(Nm;i(NiRE O266
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: f3 24 ff 00 a6 95 cf 7c 2f d1 64 8b 56 b9 4b ab 38 7c c8 ff 00 e7 ad 7a 14 73 68 3c 27 b4 bf bc 96 c7 9d 5f 25 a8 f1 9e cf ec b7 b9 c3 41 a6 5d fd aa 3b 5f 27 cb 92 4f f5 7e 6d 68 f8 9f 4a 8f 4f d2 7e 4f de 49 e6 79 72 49 5e c1 a9 68 b6 9a 86 a1 6d 3b fe ed ed eb 8d f8 cd a6 4e 96 91 f9 1f bb 83 cc f3 24 ac 28 66 ff 00 58 c4 42 36 b7 56 74 d7 c9 56 1b 0d 52 57 bf 63 cb f6 9a 24 5a 92 45 a3 6d 7d 22 67 c8 f2 b2 3d a6 8d a6 a4 db 45 01 f0 91 d1 b4 d4 9b 68 a7 70 71 4c 83 65 1b 2a 5d b4 6d a6 64 d2 4c af b6 89 16 ac 6d a2 45 aa e6 23 95 d9 95 f6 d1 b6 a6 da 69 db 68 e6 22 30 4c af 1a d1 b6 a6 da 68 db be 8e 61 a8 b1 9b 28 d9 4f db b2 89 16 8e 61 a5 7e 84 3b 69 fb 2a 58 e3 a9 7e cd 23 cd 43 9a 1c 69 bb 6d 72 96 da 7c 6b 56 a4 82 44 a8 b6 d1 ce 99 52 a7 ca ec Data Ascii: $\|/dVK8\|zsh<'_%A];_'O~mhJO~OIyrI^hm;N$(fXB6VtVRWc$ZEm}"g=EhpqLe]mdLmE#ih"0Lha(Oa~;iX~#Cimr\|kVDR
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: 97 c9 04 3e 5c 75 b3 e4 47 50 3d 69 2c 44 e4 ad 7d 0c d5 28 a7 cd d4 64 10 51 e5 53 e8 dd 59 f3 1a 04 6b 53 db ad 45 1d 4f 05 26 ee 05 88 ea 5d db ea 28 ea 58 ea 00 c9 f1 a3 18 a1 d3 66 6b ab a8 3f d3 15 00 b3 8b 73 65 d1 96 b1 ad 2c 83 78 f2 e1 3f e1 1c ba bc f3 2c a1 93 ed 1a 95 df f7 5d d7 ee 7c df fa 0d 6b fc 48 98 41 e1 29 2e da 59 6d c5 a5 cc 33 99 23 8b 7b 7c b3 2d 62 6a f0 2b f8 bb 49 1f d8 7a a6 a0 d2 45 71 07 9b a8 5d 79 5f dc 93 fb df ec ff 00 76 bc ec 42 fd ef dd fd 6c ce ca 57 e4 fb ff 00 42 38 5b 7e 93 ad 78 6a 7d 5b 45 d3 e0 92 e6 e6 0f b3 db 45 bd f6 cb f3 7d df fb 69 fd da fc c4 f1 75 8f d8 ae ef b4 e7 ff 00 97 79 1e de 4f f8 0b d7 ea 56 9d 1d d6 91 e2 6d 48 c6 7c 3f a3 c7 71 1d bb fe f3 ef fd cd 9f ec 6e e9 5f 9f 1f b4 af 87 74 2d 2f e3 Data Ascii: >\uGP=i,D}(dQSYkSEO&](Xfk?se,x?,]\|kHA).Ym3#{\|-bj+IzEq]y_vBlWB8[~xj}[EE}iuyOVmH\|?qn_t-/
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: d9 52 ed a3 6d 1c c1 ca c8 b6 51 b2 a7 db 46 da 39 8b b3 b1 1e d3 46 d3 52 6d a7 ec a5 ce 22 0d a6 8a 9f 65 1b 28 e7 1d 88 36 9a 36 9a 9f 65 1b 29 39 5c 2c 41 b4 d1 b4 d4 fb 29 9b 69 f3 88 8f 69 a2 a4 db 46 da 39 c7 62 3d a6 8d a6 a7 d9 46 ca 39 c4 41 46 d3 52 6d a3 6d 1c e0 47 45 49 b6 8d b4 73 83 8d c8 f6 9a 2a 4d b4 6d a3 9c 14 6c 47 45 49 b6 8d b4 f9 80 8e 8d a6 a4 db 46 da 39 87 62 3a 2a 4d b4 6d a3 98 9e 42 3a 6f 35 26 da 36 d1 cc 2e 52 2d 94 6c a9 76 d1 b6 8e 60 e5 23 e6 93 65 4b b6 8d b4 73 0f 90 8b 65 1b 29 fb 4d 3b 6d 1c c2 e5 22 d9 46 ca 7e d3 49 e5 51 cc 83 94 6e ca 36 54 bb 68 db 47 30 72 91 6c a3 65 4b b6 8d b4 73 07 29 16 ca 36 54 bb 68 db 47 31 4e 24 5b 28 d9 52 ed a3 6d 1c c4 f2 91 6c a3 65 3f 69 a3 69 a3 98 39 48 76 d1 b6 a6 da 68 da 68 Data Ascii: RmQF9FRm"e(66e)9\,A)iiF9b=F9AFRmmGEIsMmlGEIF9b:MmB:o5&6.R-lv`#eKse)M;m"F~IQn6ThG0rleKs)6ThG1N$[(Rmle?ii9Hvhh
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: b5 49 3d 64 d5 fd 55 ef f2 77 4d 1c 79 cd 45 52 34 69 45 5b 95 3b 7a 3b 7e 47 d1 9b 68 db 53 49 16 c9 bc b7 a6 6c af 7f 98 f0 39 58 ca 2a 4e 69 36 51 cc 2e 56 45 45 4b b2 99 b6 8e 62 79 18 da 29 db 68 db 47 30 35 27 d0 6d 14 ed b4 fd 94 73 17 ca c8 a8 db 52 ec a3 65 1c c1 62 2d b4 ed b4 fd 94 6c a5 cc 90 f9 46 6d ae 63 e2 4e 99 f6 df b3 4e 9a 94 d6 53 db c6 fe 57 df d9 26 ef e1 6a eb 76 9a 86 ea cf ed 1f f2 da 68 ff 00 eb 95 79 99 b6 12 18 ec 24 b0 f2 57 b9 a5 34 e3 2e 63 e7 9d 57 57 bf d2 b5 0f ec bd 5e 1b 4b db 19 3f 79 1c b1 4b f3 f9 bf c3 e5 b7 de ff 00 be ab 85 f1 e6 9f 76 f3 79 f0 43 69 6f 77 6f fb cb 9b 6b 9f fd 09 fe 95 f4 67 c4 2f 08 47 aa fe e1 3c 99 27 92 4f de dc cb f7 e3 ff 00 7b b3 d7 8f 7c 50 f0 7e a7 a6 6a 3b e7 d6 22 d4 64 b8 fd e5 b7 ee Data Ascii: I=dUwMyER4iE[;z;~GhSIl9X*Ni6Q.VEEKby)hG05'msReb-lFmcNNSW&jvhy$W4.cWW^K?yKvyCiowokg/G<'O{\|P~j;"d
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: dd fc ff 00 dc fb ff 00 ee d7 25 63 63 e1 4b 89 be d5 a8 78 6e 5d 57 55 f2 ff 00 ef de ea c1 57 72 5a bb 9b 4a 11 8e c8 bd 1f c4 6f 0b c9 a9 47 6f a5 da cd a8 cd e6 79 71 8b 2b 49 ae 19 ff 00 f4 15 ab 7e 26 f1 8f 8a e2 b1 da 34 9d 3f 42 9a f3 e4 b2 93 55 9b fe fb 77 fe 14 da bf de fb d5 0f 87 5a e2 de ee 33 1f 85 74 fd 09 3c cf de 49 2c de 75 c6 df fa 67 5b da b7 89 ed ee 2c ff 00 e2 5f f6 49 2e be 7f 2e de f6 5d 91 49 fe d3 75 af 22 a6 39 3e 6f 7f 95 fe 76 fb 9f e4 76 c2 84 dc 53 e5 b9 f3 2f ed 4d e1 8f 15 e8 70 ff 00 c2 49 7b a7 68 72 5f 45 1c 37 f7 3a b6 89 fb 99 a3 96 3f 97 ed 6d 1b 7f cb 25 dd f3 38 fe 2d 95 e5 b7 5e 1a d2 7c 5b f0 77 5b d7 b5 7f 15 4d 6f e2 a9 2f 52 38 fc cb bf b3 c3 70 92 7c f2 79 ab fc 7e 62 fa 7f c0 ab d2 ff 00 6a 66 f1 0d ea c7 Data Ascii: %ccKxn]WUWrZJoGoyq+I~&4?BUwZ3t<I,ug[,_I..]Iu"9>ovvS/MpI{hr_E7:?m%8-^\|[w[Mo/R8p\|y~bjf
2024-10-02 15:49:39 UTC	16065	IN	Data Raw: fe 8d 2a 7e ff 00 e4 dc 9e 5e ea d4 8f c6 3e 1e 79 ae 5f fe 10 f8 7c bf f9 f6 8a 54 fd df fb f5 eb d3 f8 bf c0 8f 6b b3 fb 37 c3 3e 5f fc f3 96 d1 36 7f df 3b 68 83 c5 5e 0c 8b e4 b2 d3 7c 33 1f fd 72 b4 87 ff 00 89 af 2e be 79 86 9c b9 bd 8c d3 f9 af c8 d2 38 7a 51 7a 62 a3 6e be e5 df e2 8f 0a b1 d5 74 2b d8 6e 6c a1 f0 7d dc 92 49 23 c9 1d cc 5f 7f e6 fe 1f f8 0d 75 fe 04 d3 f4 db 48 64 d5 ef 74 1d 42 f6 3f 2f fd 5c 52 a3 fd 9d bf db 5a f4 c9 fc 59 e1 34 bb 8e 79 f4 df 0c f9 ff 00 f3 d3 e4 df 4c 8f c4 7e 0c 4f 31 3f b1 fc 33 1f 99 27 99 27 ee 93 f7 8f f7 7e 6d b5 15 b8 82 13 83 84 69 ca 31 7e 6d fe a3 8e 17 0b 1a 8a 4e bc 1d bf b9 ff 00 00 f3 ef 17 78 97 4d b4 9b 64 fe 15 9a 49 3e 4f 32 3f 2a a8 78 aa ef ed 16 91 a5 96 83 0d 97 ee d3 cc 93 ca d9 e6 23 Data Ascii: ~^>y_\|Tk7>_6;h^\|3r.y8zQzbnt+nl}I#_uHdtB?/\RZY4yL~O1?3''~mi1~mNxMdI>O2?x#
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: 3f 35 7a 54 9a 37 86 ff 00 79 ff 00 12 78 a4 49 3e 79 3f 75 4d d3 b4 ff 00 0f 37 99 0d 96 9b f6 7f 32 4d f2 79 91 3a 79 8d fc 2d 43 ce 22 d3 71 83 fd 3f 33 37 97 ce fd 0f 3e 87 41 bc b8 8a 37 fb 5c 32 7e f1 d3 cb f9 ff 00 7f fe c2 6e ae af c2 56 9f 62 bc 8f 5b 86 1f 2e d7 cb d9 6f 6f e5 6f 7d bb 3e 4f f7 76 d7 45 e4 c1 14 51 c3 0e 9d fe af fd 5f fb 14 eb 58 e0 8a d7 ec a9 e5 79 32 7f cb 3f f7 be f5 71 e2 33 29 55 83 8d b4 fd 3a 95 4f 09 28 3b ad cc cb 1b 1d ba e7 9f e7 79 97 57 91 f9 9f ec 6e 5f 9a 99 a5 40 f6 3f 67 85 e2 8a 39 bf d5 c9 27 df d8 db f7 ee fc ab a0 46 83 f7 69 e5 4b fb bd e9 e6 49 fe d5 4b 6f 78 9f 7d 3f 77 e5 c9 be 3f dd 57 9f 2c 54 ec f4 b9 af d5 a7 74 db 33 2e a5 d4 be cb 70 ff 00 f2 d2 e2 4f dd f9 bf f2 d1 1f fe 5a 48 d5 2d af fc 81 23 Data Ascii: ?5zT7yxI>y?uM72My:y-C"q?37>A7\2~nVb[.ooo}>OvEQ_Xy2?q3)U:O(;yWn_@?g9'FiKIKox}?w?W,Tt3.pOZH-#
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: ab 39 a4 bb fd f7 96 9e 5c 7e 56 cf de b7 dd 6f fd 95 69 ca 60 f3 2e 1f cd f3 d2 3f f9 69 f7 fe f7 ff 00 67 4d d9 45 4f 96 fd fd 3f af cc 71 a6 ed be a6 86 df b3 da fc 92 cb fc 1e 5c 7f e7 de 9d 3d 8f 95 e5 a3 f9 b1 bf cf bf f7 bf e7 75 73 cd 06 99 73 35 b5 e4 7a 8c d7 10 5b f9 df eb 25 75 df fc 2c 8f fd f7 5d dc 7f 15 4f 63 a5 e9 ba 66 9f 6f 0b 45 37 91 69 23 c1 27 99 be 5f bc fb ff 00 79 fe ca b3 7d ea 23 4a e9 a9 2d 7a 76 f3 d4 1e 96 d7 f0 35 66 fb 2b 69 72 47 3c d2 08 7c bf de 49 24 bb 1b 6f dd fb df c3 ed 50 69 b2 58 4f f3 d8 f9 b2 42 91 fe ee 4f 37 fd 67 fb b4 25 96 99 75 0c 70 7d 93 cc b5 f9 d2 38 fc ad fb d7 f8 bf f1 ea 92 c5 c4 51 c7 04 31 7d 9d 1e 3f f4 7f f7 13 f8 ff 00 d9 5e d5 3c ae 6e ee ec 14 92 4f 7b 93 79 b6 eb 27 91 fb ab 84 1b fc bf e0 Data Ascii: 9\~Voi`.?igMEO?q\=uss5z[%u,]OcfoE7i#'_y}#J-zv5f+irG<\|I$oPiXOBO7g%up}8Q1}?^<nO{y'

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49729	150.171.28.10	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:49:39 UTC	346	OUT	GET /th?id=OADD2.10239395019080_17DEM3LK5H7QUOJTP&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-10-02 15:49:39 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 531158 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C954FBFDF3DD4C04864940939EEF11CD Ref B: EWR30EDGE0417 Ref C: 2024-10-02T15:49:39Z Date: Wed, 02 Oct 2024 15:49:38 GMT Connection: close
2024-10-02 15:49:39 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 1b 56 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 34 3a 30 34 3a 33 30 20 31 37 3a 35 34 3a 30 30 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 04 38 a0 03 00 04 00 00 00 01 00 00 07 80 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``VExifMM*bj(1r2i``Adobe Photoshop 25.4 (Windows)2024:04:30 17:54:008
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: 80 1b 4e a3 6d 14 00 53 69 d4 50 03 68 a7 51 40 05 14 51 40 0d a7 51 c5 1c 50 2b 85 14 71 47 14 05 c2 8e 28 5a 38 a0 41 45 14 71 41 41 45 1c 51 c5 02 b8 51 c5 1c 51 c5 02 0e 28 e2 8e 28 e2 80 0a 28 e2 8e 28 1d c2 95 69 fc d1 cd 2d c5 72 36 a7 ec a5 e6 8e 68 60 47 c5 7a 57 c3 3f 06 3e a1 e1 4b 99 ee 6c fe 7b d9 3c bb 6f f7 6b 92 f0 2e 90 9a c7 88 62 b6 9f fd 44 7f bc 92 be a7 f0 5e 91 02 69 f6 c8 90 f9 71 c7 5e 06 79 99 3c 2c 14 23 be e7 d1 e4 19 5a c5 4d d4 a8 bd d4 64 78 03 c1 92 68 fa 4c 76 b0 43 0c 90 47 5e ab e1 f8 36 5a 46 8f 54 ec 5e 0b 7f 92 b5 a0 96 3a fc ef 19 8a a9 5e 4d cd ea cf d1 70 d8 78 51 82 8c 36 45 a8 17 65 58 81 6a 18 1b 7d 5a 4a f3 64 ee 76 44 7c 9f 25 45 1c 95 62 3f 9e 9d 1c 51 d4 94 4b 6f 53 d4 71 fc 95 22 54 c8 a2 4e 68 e6 8e 6a 37 Data Ascii: NmSiPhQ@Q@QP+qG(Z8AEqAAEQQQ((((i-r6h`GzW?>Kl{<ok.bD^iq^y<,#ZMdxhLvCG^6ZFT^:^MpxQ6EeXj}ZJdvD\|%Eb?QKoSq"TNhj7
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: 83 6f f1 d5 ad 36 ce 4b 8b b8 d1 21 a7 da db 49 2c db 20 87 cc 92 4f f5 71 d7 b4 7c 3d f0 9c 76 fe 1e b6 fb 54 3f bf 93 f7 95 e7 e6 19 8c 30 90 e6 7b b3 d6 ca 72 79 e3 ab 5b a2 3c df fe 11 3b bf b5 c9 b2 1f dc 47 ff 00 2d 2a 5f 08 f8 56 4b bd 72 37 f2 7f 71 1c 9f eb 25 af 7b 83 48 8f ec 91 c0 f0 fe ee ab c7 a2 c7 14 df 27 fa bf f9 e7 5f 36 f8 82 72 8b 47 da 47 86 68 46 6a 56 d9 dc c3 d3 65 b4 8b fd 16 ca 1f 32 bb 0f 0e 58 c7 17 ef df fd 65 3b c3 fa 1d a5 94 d2 3a 43 fe b3 fe 5a 57 43 1d b2 57 ce 62 b1 51 93 b4 4f a7 c3 e1 dc 55 d8 fb 18 b6 56 8c 6b 55 51 76 55 ab 5f 9e bc b9 3b bb 9d d1 56 43 6e bc c4 87 7a 55 78 da 4a bb 23 46 95 0b d2 02 0f 3e 99 24 b4 4e db 21 a8 24 97 f7 35 51 57 13 76 19 76 d5 97 3e a5 1c 53 6c ab 17 cd fb 9a c6 ba 82 4f 27 f7 75 d3 Data Ascii: o6K!I, Oq\|=vT?0{ry[<;G-*_VKr7q%{H'_6rGGhFjVe2Xe;:CZWCWbQOUVkUQvU_;VCnzUxJ#F>$N!$5QWvv>SlO'u
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: b8 c9 61 6d cb 4e 36 90 da 6d 3a 8a ed 4e e7 98 36 8a 75 36 99 31 0a 29 d1 ae fa bf 3e 91 76 9f 3a 7e f2 3a 99 4e 31 f8 9d 8b 8d 19 cd 3e 55 7b 19 d4 ed b5 d4 68 7e 10 bb bd 86 39 d3 fd 5d 77 9f f0 88 58 5c 69 31 c1 e4 f9 72 57 9b 88 cd b0 f4 5a 5b 9e ae 17 23 c4 57 8b 6f 43 c6 68 af 48 d4 be 18 6a 52 dd fe e2 68 63 82 ae 78 67 e1 84 71 5d f9 f7 b3 7d a2 38 ff 00 e5 9d 29 67 38 38 c2 fc fa f6 0f ec 3c 64 aa 72 da cb b9 e5 75 3c 11 7e fa 3f 3f ce 8e 39 2b d7 fc 4d f0 ca 0b db c8 e7 d3 bc 9b 74 8f fd 64 7f f3 d2 ab cf e1 0d 4a f6 68 ec a7 86 1b 7b 5b 7f f9 69 59 7f 6d e1 e5 14 d3 b7 7b f4 37 5c 3f 88 8b 7c cf d3 cc f3 cf f8 45 ef e5 f3 27 b5 87 cc 83 fe 7a 55 0b ad 2b 52 b7 9b 64 f6 73 47 5e ed a1 e8 33 d9 7e e1 3f d4 54 f7 5e 1c 8e e3 fd 7c 3f bc ae 1f f5 Data Ascii: amN6m:N6u61)>v:~:N1>U{h~9]wX\i1rWZ[#WoChHjRhcxgq]}8)g88<dru<~??9+MtdJh{[iYm{7\?\|E'zU+RdsG^3~?T^\|?
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: cd e7 ea 9e 24 d5 ae 3f 77 ff 00 3f 6f 51 49 f0 77 52 bb 87 7c f0 cd 71 ff 00 5d 62 77 ac a5 99 c7 6d 3f 33 45 81 7a 3d 7f 23 e8 9d 77 e2 cf c3 3d 32 18 a4 bc f1 4c 3e 5c 91 f9 91 f9 71 3b 6f ae 42 fb f6 8a f8 6d 6f 2e cb 2b 3d 5b 50 ff 00 b6 5b 12 b8 8d 47 e1 34 91 5a 69 3f 6a 9a d2 de 3b 6b 2f 2f f7 b2 a4 3f fa 15 73 fa c5 b7 c2 ef 0e 43 ff 00 13 bf 1e 68 71 c9 ff 00 3c fc df 39 ff 00 f1 ca c9 e6 15 1e df 82 34 8e 05 76 fb d9 ad f1 0b 5e d1 be 3d 5d 69 ba 5d f7 85 ae f4 e8 34 9b 9f 32 da 59 65 ff 00 58 ed 5c 87 ed 79 ad fc 39 f8 59 aa 49 e1 3d 07 c1 5a 25 ce af a5 d9 43 20 b9 b9 f9 ff 00 7b 27 fc f4 af 4c fd 9d ac 6c af 7c 77 a9 6b 56 10 cb 26 8f a3 5b 89 e3 cf fc b4 97 67 cb 5f 3a 78 db e1 7f c4 ff 00 88 5e 2a d6 bc 63 e2 3f 07 ea db b5 cd 5b cf 8a c7 Data Ascii: $?w?oQIwR\|q]bwm?3Ez=#w=2L>\q;oBmo.+=[P[G4Zi?j;k//?sChq<94v^=]i]42YeX\y9YI=Z%C {'Ll\|wkV&[g_:x^*c?[
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: f5 bf fc 02 ba 56 29 46 9d e7 a3 f4 df d1 18 4e 9a e6 33 7c 69 e3 dd 0b 44 bb d1 1e 0d 7b 4f 92 0d 56 4f 2f fb fe 62 7f bd fc 35 d8 6d 8f ef a7 ef 23 93 fd 5c 95 f1 6f c6 68 a0 be f1 65 f7 f6 2f 86 f5 0f 0e d8 c9 27 99 fd 93 7d f2 3c 6e df 79 92 bd 43 e1 2f c5 df 1d a5 a5 b7 c3 3b 5f 07 da 6b 5e 2a b2 b6 f3 2c a4 f3 76 43 25 aa fc cc 8f fe dd 79 58 1c de a4 eb ce 15 d5 bb 5a fd 3f cf 42 aa 51 4a 37 8e c7 d0 1b 4d 15 91 a6 f8 97 4d ff 00 84 7a da f7 c4 b7 9a 7e 83 7d 24 7e 65 ce 9b 25 de ff 00 b3 ff 00 c0 a8 af 6a 58 aa 11 76 94 d2 7e a8 c3 92 47 43 b4 d1 b4 d3 a8 a5 73 7e 56 37 69 a3 69 a7 51 45 c3 95 8d da 68 da 69 d4 51 71 8d da 68 da 69 d4 51 71 59 0d da 68 a7 51 45 c5 ca 86 d3 24 5a 96 8a 2e 2e 54 b6 23 db 1d 26 ca 7d 1b 4d 52 76 0b 0d e6 93 65 3f 69 Data Ascii: V)FN3\|iD{OVO/b5m#\ohe/'}<nyC/;_k^*,vC%yXZ?BQJ7MMz~}$~e%jXv~GCs~V7iiQEhiQqhiQqYhQE$Z..T#&}MRve?i
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: f8 7f 57 b0 b2 86 4b dd 3b 47 86 de 09 3f 77 1d ef f1 c0 ff 00 df 55 fe f5 72 1e 27 82 d2 f7 5c d2 3e cb 65 34 91 c7 a8 f9 97 3a 94 bf f2 d1 ab cf c3 e2 a8 e2 ea 4e 0d 59 35 6d 64 96 a9 3b 6f f7 79 76 3a e1 52 9b 82 d9 bf 43 d1 b4 a8 f4 9d 13 e0 8e b7 a2 da eb 13 7f 6e 6b d2 7d 92 e6 4f f9 f0 b5 4f fe 29 b6 56 b6 9b fb 3b 78 eb c5 7e 09 d3 75 3d 46 2f 33 4e 8e 24 93 cc 8b fe 5e 13 fd da e7 f4 ab 4b bb bf 13 47 7a 9a 94 32 69 b6 f1 fe f2 3f f9 e9 fe f3 57 dc 5f 0d f1 37 c1 1d 15 e1 f2 a3 f3 2c bf 77 fb d4 fe 2a 30 b0 71 52 d3 96 51 4e 56 4d 3d 56 c9 fe 27 af 85 a5 49 c6 3a 5d 5d 2f 4f 3f 91 e1 1a 77 c3 0f 88 b3 da 47 f6 5d 0a 1f 2f ee 47 f7 2a d4 7f 0a 7e 28 27 fc c0 61 ff 00 c7 2b df b4 bf 16 78 6b 40 11 e8 fa bf 88 f4 ab 7d 43 fe 7d a4 ba f9 ea 7d 43 e2 Data Ascii: WK;G?wUr'\>e4:NY5md;oyv:RCnk}OO)V;x~u=F/3N$^KGz2i?W_7,w0qRQNVM=V'I:]]/O?wG]/G~('a+xk@}C}}C
2024-10-02 15:49:39 UTC	16065	IN	Data Raw: ed a5 de a5 0e a9 e2 4d 43 c4 53 c9 fe b2 2d 36 2d 89 ff 00 01 6a ee fc 33 a4 69 b6 56 92 5a f8 7b e1 bd de 95 a6 dc 47 fe 93 ad 5f 5d ec 9a 38 bf 8b 6d 61 41 e2 8b b7 d2 63 fb 17 89 3c 3d e1 98 23 ff 00 8f 98 ec 62 f9 ff 00 e0 35 ca 6b 9a bf 86 ee 3e cd 75 af 78 ab c6 3e 26 f2 e4 f3 23 b2 96 5f b3 c3 fe eb 6d 6a f3 68 4f 13 56 7c d5 1d 97 cd bf c1 25 f8 9e b4 56 16 8a 4d 28 af b9 3f c5 b7 f8 18 da 3e 99 27 85 ee af b4 19 3c 79 a8 49 f6 2b d7 92 da 3f e3 f2 9b fb d5 76 0b 3b 49 75 0b 99 ff 00 e1 36 bb 92 c6 4f de 49 e5 4a ff 00 fa 15 33 e2 56 b3 69 e2 0f 13 df 6b da 45 9d a6 9d 6b 24 69 1d b4 77 3f eb be 5a e7 23 b9 bf d2 a1 d9 75 fd 9f f6 59 3f e9 97 f7 bf 82 be eb db 60 ea f3 54 55 12 9c b4 7b f5 de da 6f 73 c1 ad 2a 6e 6f 95 ab 5e e8 ed 74 7d 0e 0b 5d Data Ascii: MCS-6-j3iVZ{G_]8maAc<=#b5k>ux>&#_mjhOV\|%VM(?>'<yI+?v;Iu6OIJ3VikEk$iw?Z#uY?`TU{os*no^t}]
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: 0b eb 98 e5 b4 8d de 6f dd c9 ff 00 2c e5 ff 00 97 87 ff 00 9e 5f f0 1a b5 5d 34 ae ae fd 2c 0f 31 86 8d df ee 7f d6 86 a4 93 ec b4 8b cb ff 00 48 fd e7 97 e6 45 ff 00 b3 53 e3 f9 e6 f2 3f d6 7e f3 ff 00 1f ac bd 61 a4 b4 d3 e4 4f f9 f8 93 cc 8b ca f9 1e 47 a7 5a de 41 2e b9 6d 6b e4 fe f2 cb fd 5c 9f ef 7d ea 3d bc 23 0f 68 96 86 93 c5 4a 9b 5c cb 5d 3f 12 e4 97 30 24 de 43 ff 00 d7 3a 7d d4 ff 00 b9 d8 9f ea ff 00 d6 79 9f c1 55 ec 67 df f6 e7 78 7c cb 5f f5 96 df dc f9 6a 9c 1e 7d bc 3b 35 1b c8 64 92 4d f7 12 47 e4 fc 9e 57 f7 6a 9d 55 25 79 27 cc 15 31 6e da ee f6 6f 6f bc d1 9e 5f b2 43 f2 7e ef ff 00 1f 9a a6 92 29 2d 26 d9 e4 c3 24 9f eb 3f e0 15 97 04 b7 6f 77 1c 09 0c 3f 6a 8e 4f 2f cb ff 00 9e 69 fe c5 3a fa e6 3f de 7f cb 3f 2f fe 5a 4b ff 00 Data Ascii: o,_]4,1HES?~aOGZA.mk\}=#hJ\]?0$C:}yUgx\|_j};5dMGWjU%y'1noo_C~)-&$?ow?jO/i:??/ZK
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: b2 fd e6 a5 27 95 ff 00 1f 0f 27 fc b4 7f f6 52 a5 92 e6 d2 ef c3 db 35 1f f4 d8 23 bd fb 45 b7 9b ff 00 2f 1b 7e ee ef f6 6a b9 66 93 8a 71 7a ab f4 fb bb 9b 2a 98 9a ca 6e 95 48 b5 67 bb 6a d2 d3 77 6d 75 d2 de 7e 63 2d 65 b0 d3 3c 41 6c e9 fb bb 5b db 9f 32 3b 2b 99 77 fd ef e2 4f ee 53 7f b4 ae d7 56 d5 92 f6 f2 5f 23 55 bd f2 ec 6d bf e5 b6 ff 00 fe 25 6a ac 92 c7 ac 5d c9 a8 4f 34 37 3a 95 bd ea 49 1d cc 5f 24 31 c5 ff 00 3c f6 7b 53 6d 6d ad fc 39 e6 3e a9 fb cf 2e e5 fe cd 73 ff 00 2d a4 f3 7e ea ff 00 bb 4e 32 72 a6 dc e1 77 6d 09 8e 37 11 ec e3 55 51 7c bb a7 75 d7 be bb df 9b 4f f3 2f 4f 7d 24 be 5c f7 53 7e f2 de e7 cb ff 00 ae 96 ff 00 c3 b7 fd a6 6a b1 a3 c1 3f fc 24 d7 da f5 94 d0 c9 24 91 fd af ed 37 3f 7e 39 65 fd d2 7c be db 29 9a 3d d6 Data Ascii: ''R5#E/~jfqz*nHgjwmu~c-e<Al[2;+wOSV_#Um%j]O47:I_$1<{Smm9>.s-~N2rwm7UQ\|uO/O}$\S~j?$$7?~9e\|)=

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49730	150.171.28.10	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:49:39 UTC	375	OUT	GET /th?id=OADD2.10239370639595_1MX6CE6U5QJ1LNKB2&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-10-02 15:49:39 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 664170 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C0963F975D124C9187AFE677B2B532AF Ref B: EWR30EDGE1408 Ref C: 2024-10-02T15:49:39Z Date: Wed, 02 Oct 2024 15:49:38 GMT Connection: close
2024-10-02 15:49:39 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 1b 42 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 31 31 3a 32 31 20 31 36 3a 31 39 3a 35 34 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``BExifMM*bj(1r2i``Adobe Photoshop 25.1 (Windows)2023:11:21 16:19:548
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: aa d5 95 54 d4 6c 8d 28 db 9a e6 de dc 53 59 69 52 41 22 a9 1d 69 24 04 2d 71 9d 82 ee 1b 69 63 14 c5 00 d4 8a 40 a4 c0 6b a8 dd 9a a1 79 7d 1a 49 80 b5 2e a1 7a 8b ba 31 d6 b2 9c 6e 6c 9a d2 11 ea cc a7 2d 74 2c be a0 4f 45 a1 2f f6 af cc bb 8d 55 d9 f2 d0 c9 9a d2 d1 22 ec 96 69 84 9c 85 a8 a3 f9 aa 19 06 da 8e 1b 8d b2 66 ad 2d 08 e6 d4 b8 e8 2a ac d1 54 eb 30 dd cf 4a 26 8c 37 21 a8 4d a6 36 93 28 ed c5 57 b8 50 6a f3 c6 e1 7d ab 36 f9 cc 7b 81 ad a0 db 66 32 d1 11 6c ed 4d 9a 04 9b af 4a 9a d6 37 95 77 fd d1 53 34 21 7e 95 a7 3d 99 1c b7 5b 11 58 c5 15 af 11 44 ab bb ef 35 69 db 4f fc 5b 79 5a a9 66 91 bb 7c ed b4 ad 5f 6b 63 1b 31 4e 95 13 9d f7 2e 11 b6 c5 db 7b d7 0a a1 d5 71 fd e5 f4 ad 8b 3b 8b 79 21 e5 b6 9f f6 ab 01 23 22 3c 0a 92 37 65 6c 57 Data Ascii: Tl(SYiRA"i$-qic@ky}I.z1nl-t,OE/U"if-*T0J&7!M6(WPj}6{f2lMJ7wS4!~=[XD5iO[yZf\|_kc1N.{q;y!#"<7elW
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: 99 97 3b 72 bf dd ad 69 c3 91 dc 8a 92 73 56 33 66 49 57 ef c4 ca 3f da a8 10 90 d9 ad 4b ab 89 26 5d 8f d1 7e ed 55 e0 b6 3e f0 ad d3 39 dc 52 7a 15 96 63 ba 9c b2 e7 9a 9f 62 16 e5 57 6f f1 55 79 94 23 60 74 aa dc 97 a1 22 cb e9 4f 59 06 ee 6a 8b 37 a5 26 f7 14 72 87 31 7d 8e 5a a6 8e cd e4 5c af cd 59 f0 cd 96 f9 ab 53 4d 9d 07 5f ee d4 4e e9 15 0b 36 49 6f 00 8d 95 0f 5a bf 1c 20 af fb b5 12 4b 1b 36 6a cc 33 63 f8 6b 9e 72 67 55 38 c5 11 fd 9b 62 e4 f4 6a 67 96 47 23 a5 4f 34 85 e9 8c d8 8f 1b aa 53 65 d9 05 b3 e3 70 3f c5 f7 a9 cb 10 93 9f ee d4 0a f8 6a 9d 26 40 b8 a3 51 e9 d4 6b 42 7f bd 4b 08 f2 fa 52 bc a0 d4 7e 67 7a 35 16 85 c4 76 6a 64 84 f4 35 02 4f 8a 6b 4b bb 8a 94 98 db 44 94 33 67 ad 40 f2 6d 6c 52 e4 b7 4a a2 2e 4f b8 0a ab 70 d8 e6 a6 Data Ascii: ;risV3fIW?K&]~U>9RzcbWoUy#`t"OYj7&r1}Z\YSM_N6IoZ K6j3ckrgU8bjgG#O4Sep?j&@QkBKR~gz5vjd5OkKD3g@mlRJ.Op
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: 9b e1 af 15 e8 7e 32 8a d9 74 ed 7f 4f ff 00 48 58 65 96 28 25 89 96 37 60 18 67 1c 70 6b d4 8c a8 54 8d de 9a 1c 9f bd ba b2 d1 9e ad 7d a8 d9 5b 43 24 1e 6a db 2b 48 1e 39 2e ec 2e 23 e7 3c e7 7a e3 1d 45 49 05 fe 96 d3 7f a6 6a ba 5c a2 35 d8 ab 06 a5 12 33 7b 15 7c 16 1d eb d8 b4 5f 85 fe 08 36 7e 42 69 9e 20 b6 69 13 cb 69 23 d6 2e 37 e3 f1 62 3f 4a bb a8 7c 22 f0 1c b6 2c 96 cb ae db ca cb e5 f9 ad aa 49 33 28 ce 0e 16 5d c0 13 ea 07 15 e6 c7 31 a1 7d 99 d5 2c 3c d6 cd 1e 21 6d e2 1f 0e 2c cb 22 6a fa 6e d9 18 7e ed 6e 76 48 a7 83 9e 09 15 6a 4b dd 2e 6d 1e 53 1e ab 6d 73 0c b2 37 94 de 78 c4 85 78 1e f8 1b b3 51 7e d6 96 29 f0 b6 f3 41 b7 f0 85 fc e2 df 53 b6 b8 13 ae a0 b1 5e 6d 28 50 29 4f 31 09 43 f3 1e 45 5e fd 99 f4 21 f1 0f c1 97 5a 97 88 2f Data Ascii: ~2tOHXe(%7`gpkT}[C$j+H9..#<zEIj\53{\|_6~Bi ii#.7b?J\|",I3(]1},<!m,"jn~nvHjK.mSms7xxQ~)AS^m(P)O1CE^!Z/
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: dd dc 29 af a6 ca 15 9f 6b 2e d5 ae 9a dd a3 2c a0 d5 c9 0c 07 68 0b b8 55 3a ed 74 21 61 93 5b 9c 03 a3 a7 06 2f fc 76 91 59 3b af 35 e9 36 f0 5a 4f 1b 47 e4 2e e6 a4 fb 16 89 0c 7e 44 f0 2b 32 ff 00 16 da 9f ad ae c3 fa 9b fe 63 cf 63 c1 5f f5 1c 7f bb 4e 64 4e a6 06 ff 00 be 6b b6 9a 2d 28 fc 90 45 b4 ad 3f 4d b3 81 37 3e df 30 b5 53 c4 2b 5e c2 fa b3 be e7 0b b5 3b 44 d4 79 25 f8 11 37 fd f3 5d ac 96 f0 2c d9 11 2f fd f3 4a 8b 1f 40 ab 9a a5 59 3e 86 72 a2 e2 71 89 a7 dd b2 e5 20 97 1f ee d5 5b 59 a2 9b cd f2 27 8e 43 03 14 97 6b 6e f2 c8 ea 0d 7a 12 20 2d 81 f2 d7 95 6b 1e 2b f0 fd b7 88 2f 11 f4 58 e7 db 29 db 1c 70 04 6b 8c 9f bc 73 cf 5e f8 e6 bc dc d3 34 9e 0a 9c 65 18 73 5d d8 ee cb 72 e8 e2 e7 28 ca 4d 59 1b 36 a5 ee 6d d6 7b 66 f3 e2 6c ed 92 Data Ascii: )k.,hU:t!a[/vY;56ZOG.~D+2cc_NdNk-(E?M7>0S+^;Dy%7],/J@Y>rq [Y'Cknz -k+/X)pks^4es]r(MY6m{fl
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: 9e 35 0d d3 63 13 d0 12 3d ab 37 51 de e9 68 52 8a 2a 78 74 5f db d8 f9 7e 43 79 ab b5 e4 9e 59 e5 91 77 fb e0 92 bf 4a 93 c3 da ad c7 fc 26 9a 84 af 04 71 2c 9e 58 fd de fd 92 15 18 c9 27 9c 55 bd 36 ca f2 0b 79 12 cf c4 b0 47 6c d2 12 90 2c 01 93 61 fe 1c f5 3f 5a 92 dd 9e 2b c9 5d 22 55 8e 48 c0 dc aa 15 77 f6 39 c7 35 15 24 9a 04 b5 2e dd 6a 37 51 43 18 46 b4 cc ac 3c cf f4 b2 81 47 4f 5c d6 07 8e a3 9e f7 52 82 3b 8b 36 9e da 36 3f bb 96 7f 97 7e 38 21 89 ab 9e 2a bf 48 ae 2c e3 8e ce 79 e4 5f 9e 59 5a d3 cc 8f a7 03 8f f0 aa b6 f7 1a 9e bc d3 dc db aa fd 92 c6 2c 4a b2 46 52 65 cf fb 3c e5 6b 2b bb 32 92 2e c3 7e 9e 19 d0 ed 63 d3 34 af b6 34 4e 5e 48 b7 6d da 08 19 da c3 3b f9 fa 55 c9 b5 43 fd 93 2d e8 b6 68 da 49 01 58 e5 5f 95 73 e9 54 ac 75 3d Data Ascii: 5c=7QhRxt_~CyYwJ&q,X'U6yGl,a?Z+]"UHw95$.j7QCF<GO\R;66?~8!H,y_YZ,JFRe<k+2.~c44N^Hm;UC-hIX_sTu=
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: 37 2d 4f b8 b8 0b 1e 03 6e dd 58 b5 27 a1 b4 6c 8d 0b 5c a4 7c 7f 15 5a 86 54 89 b8 5d d5 cf fd a5 c4 8a 77 b6 3f bb fd ea 72 de 3a af ee f7 29 6f f6 ab 39 51 72 34 8d 74 8d 99 af 64 12 30 0b b7 b5 56 f3 8a 2f bd 66 b5 d3 b7 f1 52 7d a8 8e 5f ad 35 46 c2 75 db ea 5b be 9b 74 6c 37 6d 2a c2 a2 4b 9d ac d8 6f 33 fe 05 59 d2 39 69 18 9e ad 43 16 f9 4e d6 f5 ad 95 25 6b 18 fb 56 dd cb d7 17 53 85 c2 45 b7 6f f1 55 19 a7 b8 dc d8 5e 5b fb b5 3f 9b 27 42 bc 35 22 81 ba 9c 52 5d 01 b7 2e a5 09 3c fd b9 78 99 bf da aa f7 0c 47 f0 d6 ce f0 38 35 15 c2 86 e7 fb b5 a4 6a 5b a1 9c a9 df a9 88 d3 39 eb 49 b8 1e 95 a5 22 20 a8 b0 8d 26 11 79 6e 2b 55 35 d8 c1 d3 7d cc ed c4 53 5d fe ed 6d dc 41 16 dd 9b 79 55 aa d3 5b c0 17 3b 69 aa a9 f4 07 46 4b a9 8f 33 0d d5 16 ec Data Ascii: 7-OnX'l\\|ZT]w?r:)o9Qr4td0V/fR}_5Fu[tl7m*Ko3Y9iCN%kVSEoU^[?'B5"R].<xG85j[9I" &yn+U5}S]mAyU[;iFK3
2024-10-02 15:49:39 UTC	16065	IN	Data Raw: 71 e6 65 8f 4c 1c 74 e7 15 9b e2 cf 10 59 ea fe 07 b9 b3 b5 b1 b4 b5 b3 47 de b2 4a a5 c3 15 18 1b 14 7f 17 20 63 a2 d7 98 69 5a cb c1 6f f6 3b f9 2e 5a cd 59 9d 62 89 86 dd e4 63 ab 03 c5 5e 1f 02 b1 14 ae a3 ca d3 b5 af 7b ab 7e 60 ba d8 ee 6e f5 0b 59 bc 51 1f 91 a7 c7 7d 1e dd f7 30 41 1e f5 9a 5c 10 4e df d4 e2 b6 ff 00 b1 34 db ab c7 b8 b0 b1 8f 4c fb 52 2a 6f 92 42 8d 0e 47 cf 88 c9 c7 1b 5b 83 cd 79 35 a5 d8 49 1b c8 69 10 b6 7c b7 59 f0 56 ba 8d 3f c4 56 ef 6b 23 df 5e 6a 0a fb 0c 76 d0 3d c9 78 e3 4e bd 73 bb 76 7a 57 56 23 01 56 36 e4 7f d7 a5 c2 4a c8 f4 1b cd 4f 4e f0 f5 bd 9a 46 bf ea ed a4 f2 1d 5b ee c8 53 ef 28 23 19 24 75 a8 7c 03 a8 4f 67 1f f6 d6 a7 a8 34 b1 24 ad 6d 2c b1 2e e5 8c b2 e6 37 de 3e f6 0f 18 f7 e6 bc 8b ed b7 72 5c 45 27 Data Ascii: qeLtYGJ ciZo;.ZYbc^{~`nYQ}0A\N4LR*oBG[y5Ii\|YV?Vk#^jv=xNsvzWV#V6JONF[S(#$u\|Og4$m,.7>r\E'
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: ef fe 3d a9 26 fa 05 df 41 97 16 45 15 a2 33 c6 a3 f8 59 be 6f f3 f8 d5 7d 59 04 31 c7 95 56 8e 35 f9 5b 6e d6 ab 17 17 31 f9 6c 9e 7c 8d 32 fd df e0 fe 95 55 a5 47 87 2f 2b 4a dd 5a 36 61 fa 56 90 93 be a3 8c 9f 52 ab 31 33 28 12 ac 4a bf 79 97 d2 af 58 5a 5e 1b 86 26 08 e5 59 33 b5 a3 6f 9b 1e b4 9b 2d 9b 74 9f 2e 3c bc 79 72 7d df cf d6 ac c3 a9 5c 7d a3 22 25 8e 25 50 17 e6 1b b3 f9 d3 a9 51 b5 68 94 e7 7d 8d 1d 3e d1 d6 dd a0 96 79 32 d9 0b f3 7c cb f5 ec 6b 72 fa 19 23 b5 5f b1 fe ef f7 40 79 9f dd 19 e4 73 5c ec 3a d9 69 b0 55 57 cb 6f 95 62 5d cc d9 f4 cf 7a d1 b0 d5 0a 42 db ee 7e 46 6c f9 72 af cb cf a8 eb 5e 75 6f 6b b8 e3 36 5a b3 49 84 cc 9e 6c 92 fe ec 8d b1 e1 95 b3 d0 6e cd 52 7d 3e e0 5e 34 9b 62 99 d7 fd 5b 79 9f 32 83 d4 1e 2a e5 f6 ad Data Ascii: =&AE3Yo}Y1V5[n1l\|2UG/+JZ6aVR13(JyXZ^&Y3o-t.<yr}\}"%%PQh}>y2\|kr#_@ys\:iUWob]zB~Flr^uok6ZIlnR}>^4b[y2*
2024-10-02 15:49:39 UTC	16384	IN	Data Raw: e7 f1 e2 bd 19 fc 7b 9c ca de ce d6 2d e8 96 d1 47 6a b1 46 ea a7 a3 37 3f 89 ad 2b 87 9e 38 56 5b 09 56 29 a3 fb aa ac 77 2e 0f 04 7b d6 66 82 c5 63 8c 26 d6 e8 ad b6 b6 6d cc 5b 58 f9 5e 60 fe 15 6a e2 aa ae 76 53 b5 ac 7d 3f f0 66 1f 12 4b e1 16 93 c5 d7 9e 7d c4 aa 1e 05 69 0b b6 c6 19 1b ba 60 d6 af c2 df 12 cb e2 4b ed 6a dc 78 79 ac d7 49 7c 5c bb 29 64 90 9e 06 3b f3 d7 e9 5b 1f 0c e4 bb ba f8 5f a5 4a 62 9e 51 2d 8c 5b 9a 45 4f 31 78 c1 ce df f3 8a db d1 f4 eb 8b cb 79 d2 05 f2 96 e7 3b 9b cb 11 bf 1f de 6e b5 f3 31 52 ba 51 3d 09 24 9b be c8 ca b1 d2 a4 92 c6 7b 99 16 38 2e 95 8f 94 be 46 e6 c7 af 3f c8 d5 3b 1b 3d 1f 4a b8 b9 d9 7d 05 f6 e5 05 95 ad 8c 6a a4 f6 eb fa d6 d6 a5 a5 7d 9e 4f 35 1b f7 ea b9 da dc a3 00 3a d6 1b d8 45 73 75 15 ca 2c Data Ascii: {-GjF7?+8V[V)w.{fc&m[X^`jvS}?fK}i`KjxyI\|\)d;[_JbQ-[EO1xy;n1RQ=${8.F?;=J}j}O5:Esu,

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49732	150.171.28.10	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:49:40 UTC	346	OUT	GET /th?id=OADD2.10239351692182_1I6V30R2J66NF61KL&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-10-02 15:49:40 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 731103 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: D8C05C8792E1482388AB93579CD3C608 Ref B: EWR30EDGE0905 Ref C: 2024-10-02T15:49:40Z Date: Wed, 02 Oct 2024 15:49:39 GMT Connection: close
2024-10-02 15:49:40 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 1c c0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 32 3a 30 36 3a 32 38 20 31 31 3a 31 33 3a 35 33 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 04 38 a0 03 00 04 00 00 00 01 00 00 07 80 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``ExifMM*bj(1r2i``Adobe Photoshop 21.1 (Windows)2022:06:28 11:13:538
2024-10-02 15:49:40 UTC	16384	IN	Data Raw: 37 dc a6 49 40 9c 50 ca 2a 4e 6a 3a 08 0d b4 54 9c d1 cd 00 47 45 14 50 01 45 14 50 01 45 14 53 b9 21 45 14 53 00 a2 8a 28 00 a9 39 a3 9a 39 a0 08 ea 4e 68 e6 8e 68 02 3a 36 d4 9c d1 cd 00 47 b6 8a 93 9a 39 a0 03 9a 8e a4 e6 8e 68 24 39 a3 9a 39 a3 9a 00 39 a7 51 45 48 05 3b 75 36 8a 76 1d c7 53 a9 b4 ea 43 0d de f5 36 ed 95 0d 14 07 31 34 72 d4 fb ea 95 4d bb f7 34 1a 53 a9 65 a9 3c 8d 22 7d ca bf a1 ac 92 cd 1d 50 83 cb fe 3f f5 75 d4 78 56 da d2 e3 e7 82 6f de 57 3d 79 a8 41 b6 7a 18 3a 6e a5 55 67 f2 36 f4 79 64 78 64 47 a3 55 8a 3f b2 6c 7a b1 a6 af 93 e6 23 d4 57 5a 85 a3 f9 9b 2b c4 77 73 d1 1f 54 a2 95 25 cc ce 36 ea db f7 b2 3d 67 6d d9 f7 eb 5b 58 d4 23 4f 92 0f f5 95 87 3c b2 4b 36 f7 af 6a 92 9b 8e a8 f9 7c 5c a9 c6 76 8e e0 f5 04 9f 3d 3d e8 Data Ascii: 7I@P*Nj:TGEPEPES!ES(99Nhh:6G9h$999QEH;u6vSC614rM4Se<"}P?uxVoW=yAz:nUg6ydxdGU?lz#WZ+wsT%6=gm[X#O<K6j\|\v==
2024-10-02 15:49:40 UTC	16384	IN	Data Raw: 24 92 bb 7d 56 c7 ed 10 c6 e9 37 97 59 70 69 11 bc de 67 93 fb ca e9 86 2d ca 1c b3 67 14 f0 2a 35 14 a9 c7 63 2e 46 8e 58 63 9d 2c fc b9 23 a8 a7 b1 9e f6 d2 39 d2 1f 2e 4a ea 20 d3 e3 4f f9 63 57 6d 6c 63 ac 5e 2d 45 7b a6 d1 c1 f3 af 78 e3 e4 d0 7e d1 34 6f 3d 58 93 c3 91 fe ed d2 ba c9 2d a3 a3 c8 ac fe bb 53 a3 35 58 1a 49 dd a3 9a 8f 45 8f ec 9b 3c 9a c6 f1 06 99 1a 5a 48 89 5d f7 91 59 7e 20 b3 fd ce f4 a7 47 15 35 35 76 4d 7c 1c 25 4d e8 78 de b1 6d ff 00 13 0f 9f fd 5c 74 fb 5f 21 26 f9 ff 00 d5 d6 f6 b9 6d e6 c3 22 7f cf 3a c1 8e 2d f3 79 09 5f 4d 09 fb 48 1f 0f 5a 8b a3 5b 45 7b 85 f7 cf e6 55 0f 32 ae 5f 59 cf e7 6c a7 e9 ba 7f fa 5c 75 b4 65 15 1d cc 27 ed aa 55 51 4a c4 16 2d fe 95 b2 7a 74 f2 ec 87 62 51 7d 14 89 37 9e 90 fe ee af c1 a6 7f Data Ascii: $}V7Ypig-g*5c.FXc,#9.J OcWmlc^-E{x~4o=X-S5XIE<ZH]Y~ G55vM\|%Mxm\t_!&m":-y_MHZ[E{U2_Yl\ue'UQJ-ztbQ}7
2024-10-02 15:49:40 UTC	16384	IN	Data Raw: 8f bd 1b c6 ff 00 81 4b c5 5a 35 de 85 ab 49 65 3f fa e8 e3 4f 2e 4a ed be 0b eb 9f d9 33 5b 6a ff 00 b9 92 ee da 5f dd c7 e5 79 d3 48 bf ec c7 ed f7 aa 3f 18 ea f6 3e 38 9a 34 9f ec 96 57 5f f2 d2 5f 2b e7 ff 00 65 52 aa 78 73 4a d0 bc 3f ab 4b a7 ea f7 9f 68 7f 2f cc f3 3e 7f 27 ff 00 b2 a5 5a d5 69 38 4b 73 7c 3d 5a 74 ea aa 89 fb a7 b9 c1 f1 2f 5d d6 f5 0d 89 f6 bd 3a d6 38 de 4f 2e 5f f4 64 f9 7f f4 0a e4 bc 47 a2 e8 57 b0 c7 3d ad 9d a5 b5 f5 c4 8f 71 fe c5 c3 ff 00 17 fb bf 4a 83 c0 17 da 15 ec 31 fd 8a 18 6f 67 f2 fc c9 23 97 62 43 6f fe d3 2d 75 f6 b7 d7 7f 64 93 51 b2 d4 be cf 07 ee 63 bd d5 a2 b4 44 87 ca 93 ef 47 e6 7d e7 ff 00 80 d7 83 3c 0a a5 27 2b 5b d3 43 eb 29 e3 d5 68 a5 16 72 1a c5 9d 86 99 a2 58 e9 d7 b0 c3 1c 77 1b fe cd 7b f2 42 ff Data Ascii: KZ5Ie?O.J3[j_yH?>84W__+eRxsJ?Kh/>'Zi8Ks\|=Zt/]:8O._dGW=qJ1og#bCo-udQcDG}<'+[C)hrXw{B
2024-10-02 15:49:40 UTC	16384	IN	Data Raw: 73 5b f0 d5 c5 8d d5 bc 73 5a 4d fe b3 cb a5 18 ea ec 74 e1 e2 a2 ef 20 d3 74 eb 46 92 24 b5 87 cc 9a 49 53 fd 67 df af a6 fe 10 e9 56 9a 2f c2 db 68 6c bc 98 ef af 6f 6e 7c b9 65 f9 de 35 57 db bd ff 00 dd 55 af 9e 75 18 60 d3 e7 cb c5 e6 7d 9e 3f fb f9 5d 07 85 7e 22 dd 5a 78 7a 4b 38 09 8e de 4f f8 1f fb db 2b 1c 65 09 54 51 57 b2 4e f6 2b 07 99 7d 51 ce 73 a6 e4 de 97 ed e5 62 ff 00 c6 cf 05 5f e8 fa 85 ce ad 63 a9 1b dd 1e f6 5f 32 3b 8b 9d 9f 68 f3 5b ef ee af 57 f8 65 e2 1d 35 f4 3b 1f ec eb 39 af 64 fb 34 36 f2 7e f5 f6 47 2f f0 fc b5 e2 fa ff 00 8b 35 5d 42 19 04 c2 69 2d 7f e7 df ca d8 9f 2d 68 fc 33 f1 75 d7 85 35 0f ed 18 fc 39 15 cd 8c 92 7e f7 cd ff 00 d9 77 71 59 e2 f0 d2 c4 d0 f6 76 6a da fa 86 5d 9b aa 18 b7 39 42 d1 97 a1 e9 ff 00 b4 22 Data Ascii: s[sZMt tF$ISgV/hlon\|e5WUu`}?]~"ZxzK8O+eTQWN+}Qsb_c_2;h[We5;9d46~G/5]Bi--h3u59~wqYvj]9B"
2024-10-02 15:49:40 UTC	16384	IN	Data Raw: d0 6e a1 9a 3d 0e de 34 fb 17 db a2 44 7d ff 00 7b 6a fe f1 ff 00 bf 27 dd fa d7 2f f0 93 c3 56 9a 3e 87 63 aa 6a 3e 4f 99 1c 73 5b dc c7 e6 ff 00 ac f3 26 dc bf fa 05 7a 18 7a 6b 0f 07 56 32 b9 c9 59 aa f3 54 a5 1b 44 fa 8f c3 be 20 b0 b0 f8 51 a8 ea da a4 d1 c7 25 95 92 5a 49 1d ec a8 f3 5c 4b e4 a3 46 db 3e f7 cf be b9 4f d9 df 50 8e e3 c0 71 e9 6f 34 31 dd 59 48 fe 5d b7 f1 f9 4d fb cd db 3f bb f3 d7 cf 57 da bd df 8a 35 bd 5a f5 e6 9a 4b e9 2f 5e 4f b4 dc dd ef f3 3f ed af fb bf c5 5d 5f c3 95 d4 b5 bf 10 c7 06 91 79 0d bd f5 c4 7e 5d b4 9e 6f 92 fb f7 fc 8d e6 7f 05 6f 83 a5 2a 15 67 88 a8 ee e5 6b f6 56 56 38 b1 b4 e3 88 a1 1c 34 34 51 77 5d 4f a6 28 af 2d 93 e2 45 de 85 0d b6 83 3f 93 a8 dd 5b c7 e5 dc ea de 6e ff 00 de ef 75 7d d1 af df c7 fb d5 Data Ascii: n=4D}{j'/V>cj>Os[&zzkV2YTD Q%ZI\KF>OPqo41YH]M?W5ZK/^O?]_y~]oo*gkVV844Qw]O(-E?[nu}
2024-10-02 15:49:40 UTC	16384	IN	Data Raw: 35 cb dd 1a c3 1d 88 54 97 b4 6e 4a f6 b2 bf e7 73 9f bb d5 74 8f 12 5a c8 9a bc 59 92 38 df cb bc 8f e6 7a 3c 33 a7 a4 ba 55 cd b7 f6 ec be 4c 87 f7 76 ff 00 75 24 ff 00 81 7f 09 ad 4d 6b e1 d5 d4 7a 87 da bc 3d 2f 97 0c 9d 23 f3 b7 a3 ff 00 c0 ab 81 8c 5f d8 78 82 4b 57 8b cb 48 3e 7f f7 ff 00 dd aa c5 3a 75 f0 de e4 f5 5d 1e e6 b0 4e a4 5f b3 a9 b7 73 a2 fe c6 d6 ac a5 92 f7 fb 24 c7 f6 79 3f e7 92 7f c0 9a b3 26 b5 92 5d 5a 4c cb 2d a3 ff 00 cf 39 22 d9 bf fd da d8 f0 ff 00 89 74 99 ae bf b4 ee a6 bb b3 7f f9 f8 b1 ff 00 96 7b bf 83 6b 56 ce b9 7d 63 ad 5a c5 05 d7 95 22 47 1a 79 7a 8f f1 c7 fd fa f3 28 d6 af 4e 7c 93 86 8f 7f 21 39 7b 36 dc d5 9e c6 3d 86 9e 9f bb bc bf 9a 2b 88 e3 8f fe 59 ef f9 3f fd 55 87 71 17 d9 f5 2d d6 b7 be 7a 79 7b e3 ff 00 Data Ascii: 5TnJstZY8z<3ULvu$Mkz=/#_xKWH>:u]N_s$y?&]ZL-9"t{kV}cZ"Gyz(N\|!9{6=+Y?Uq-zy{
2024-10-02 15:49:40 UTC	16065	IN	Data Raw: 2e 52 e3 cb 92 69 65 8d e4 ff 00 57 e5 d7 51 a9 5b e9 ba 86 9f 8f ec 18 63 fd df ee ee 6c 7f f4 1f 97 8a e1 75 8b 49 f4 cd 5a 4b 59 3c ef fb 6b 5c 33 c2 a8 2b 37 73 b2 9c 68 d4 6f 92 5a ae 8c d9 33 a5 bc d1 de a7 9b 22 49 f2 47 e6 45 bf e6 ad 7d 26 7d 2a e2 eb fb 41 ff 00 77 75 e5 ba 55 3f 0c 5d c9 6f 65 1a 5b 5d cd 6e f2 49 be 48 fc ad c8 f5 7a e8 e9 10 6a 51 bc d6 92 59 cd 27 fc b4 b7 1b 3e 5f f7 7e ed 69 4e 52 a3 4c e2 c4 49 4a 3e ce ce ea fb 76 34 8d af 86 ee 3e cf 0f 89 26 9a 2b 7f f9 e9 6d 16 df f8 17 dd 6f 9f da 95 de 0d 23 cc d3 ec 9a 2b cb 2f bf 1f d9 a5 df e6 37 f7 bf d9 aa b7 89 0d 8c 71 bf da bc f8 7c cd 91 d2 5a 69 d0 5d cd f6 ad 2e 6f b3 dd 7f cb c5 bc b7 5b 12 7a 27 5a 0d 34 de ac e6 82 f6 f4 d5 37 b2 db cc d4 fe d3 b7 ba 8f fe 25 fe 6c 73 Data Ascii: .RieWQ[cluIZKY<k\3+7shoZ3"IGE}&}*AwuU?]oe[]nIHzjQY'>_~iNRLIJ>v4>&+mo#+/7q\|Zi].o[z'Z47%ls
2024-10-02 15:49:40 UTC	16384	IN	Data Raw: a8 d7 29 c9 85 93 75 bd f5 a7 a9 ce e8 1a b5 dc 5a b7 99 19 9a dd 3e 44 4f 2e 5f f5 f5 b1 1d f5 a6 a5 34 8f e6 c5 be 3f f5 72 79 55 cf de d8 5c 5b dd 79 ba 5c 52 dc 47 f2 24 7f f4 c2 a8 49 79 79 69 fe 89 7b 17 96 ff 00 7f f7 9f 2b d6 35 b0 75 14 ef 1d 1a 3d aa 98 58 d5 77 a6 ff 00 13 a1 b8 b9 b8 b4 bf d9 75 fe 91 e5 c9 be 39 22 fb e9 fe ed 75 f0 eb da 77 89 f4 ff 00 27 c4 36 70 de bf 96 9f e9 20 f9 37 7b 57 ee fc cd c3 d7 2d e0 a6 b0 d6 3c cb 2b ef f4 77 8f e7 b6 93 fe 5a ff 00 b4 9f dd f9 aa 4d 47 4a be 9f 50 92 df 45 b3 ba b8 f3 3f 71 e5 c5 17 cf 3f fc 03 b3 57 63 a7 f5 8a 0a 11 56 97 73 9e 2d 46 b7 b3 6a d2 5f 71 73 50 d0 75 5d 33 56 91 2d ae fc dd 3a 4f 9e da f3 ff 00 64 ff 00 7a 9b a6 f8 97 56 d2 a5 92 f6 f6 6f dc c9 f2 47 1c 9f 73 72 fd da 9f 46 d1 Data Ascii: )uZ>DO._4?ryU\[y\RG$Iyyi{+5u=Xwu9"uw'6p 7{W-<+wZMGJPE?q?WcVs-Fj_qsPu]3V-:OdzVoGsrF
2024-10-02 15:49:40 UTC	16384	IN	Data Raw: 2f 71 e0 9b 6d 39 f4 79 bf b5 7c c4 ff 00 55 bf c9 93 fd ef fd 0b e5 a5 85 c2 aa 90 84 a7 79 6b bf a1 d5 8d c6 ba 2e a4 20 d4 6c ba 99 7a 1e a7 61 fb b4 bd d4 ae ec a0 93 fd 1f cc ff 00 a6 5f c4 ab d3 ef 57 47 1d 9c 7a 27 8f 35 6d 47 4b fe cf 92 3f 33 cc 8f cd 97 7a 47 16 c4 7d cd 2f dd ff 00 38 ae 4f c1 5e 11 ff 00 84 eb ed d1 e9 9a 95 a5 94 7a 75 b7 99 2d c5 ce ff 00 93 e7 ff 00 e2 aa 78 2f a0 f0 fe ad 1f 86 bc 49 34 37 bf d9 d7 af 1c bf 66 97 ce 87 e5 ae fa d8 1a 72 93 f6 72 b3 b6 cf a9 e6 61 73 6a bc 8a 58 88 69 7d fb 1d dd d5 9e b5 a9 cd 73 e2 8b d8 6e ef 7f d2 61 ff 00 49 8b fd af ef 45 d3 f8 3e 5f ee d7 07 f0 9e c7 45 7d 3e 3b ad 47 ce 92 ea f6 e7 cb fd d4 5b df ff 00 1d ad 0f 8c 9f 14 f5 2b 8f 0e c9 a7 e9 93 45 64 f7 b2 27 d9 ad ad a5 de ff 00 67 Data Ascii: /qm9y\|Uyk. lza_WGz'5mGK?3zG}/8O^zu-x/I47frrasjXi}snaIE>_E}>;G[+Ed'g

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49733	150.171.28.10	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:49:40 UTC	375	OUT	GET /th?id=OADD2.10239351692183_1GSWAYG616F8PFDNZ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-10-02 15:49:40 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 878990 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: DC91D6CF489342689EBECBD602EF4BA3 Ref B: EWR30EDGE0806 Ref C: 2024-10-02T15:49:40Z Date: Wed, 02 Oct 2024 15:49:39 GMT Connection: close
2024-10-02 15:49:40 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 20 28 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 31 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 32 3a 30 36 3a 32 38 20 31 31 3a 31 31 3a 30 36 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF`` (ExifMM*bj(1r2i``Adobe Photoshop 21.1 (Windows)2022:06:28 11:11:068
2024-10-02 15:49:40 UTC	16384	IN	Data Raw: 85 1a 14 63 04 e2 fd ee 85 3d 2b fd 23 cb 7a eb ec 6d a4 8b f7 1f f3 ce ab e8 7a 7c 1f bb 7f f9 67 ff 00 3c eb b0 b5 81 3e fd 79 58 cc 42 bd a2 7b f9 7e 11 c6 17 6f 53 26 3d 2a 3b 88 77 bf fd b3 ab d1 c1 b2 1f 21 ea c5 f2 fe e7 e4 aa 11 b4 9f 6b f9 2b 81 49 cd 6a 7a 7c b1 83 d8 ce d7 34 18 e5 f2 de 3a af fd 87 1a 7d ca ea 36 f9 b0 d5 7d b1 a5 69 1c 45 44 ad 73 29 61 29 39 39 5b 73 83 93 43 91 f5 0f 93 fd 5d 5a 93 48 fb 3f cf 5d 74 76 db e6 de 94 47 14 7f ea df fd 5d 74 bc 64 e5 63 8e 39 7d 28 df 43 8d ba b3 4b 8b 4f f9 e7 24 75 97 e4 49 5e 81 7d a6 5a 5c 7c f0 7f ac 8e b2 6f b4 af f4 4d 89 fb b9 3f e5 a5 74 51 c5 45 ab 1c 98 9c bd fc 4b 53 9c b1 f3 3c ed f5 bd a6 b7 f0 3f ee e9 9a 6e 87 1b cd bd 3f 79 45 d2 c9 69 36 c7 ff 00 96 75 a5 49 c6 a3 b4 59 8d 1a Data Ascii: c=+#zmz\|g<>yXB{~oS&=*;w!k+Ijz\|4:}6}iEDs)a)99[sC]ZH?]tvG]tdc9}(CKO$uI^}Z\\|oM?tQEKS<?n?yEi6uIY
2024-10-02 15:49:40 UTC	16384	IN	Data Raw: 3a 27 4e 3e dd c6 0d 69 ae 9f d7 43 be d3 7f b5 af 74 98 d3 c9 9a ca ea 3d f1 dc c7 6d 16 cf 2f f8 37 ab ee f9 a9 ba e7 88 ff 00 b3 f4 39 34 1f 15 f8 6e ef 51 9e f6 d9 e3 92 e6 c7 7b cd bf 66 d6 f7 fb 95 c2 f8 0f e2 0f 8c 2e 3c 41 1d ad ae a5 35 ec 7a 8e fb 7f 32 e6 2d 97 3e 52 ec 6f bd d1 7f 82 bb 0b 5b c8 f5 df ed 2f b2 cd a8 5c 4f 6f fe 8f 27 df 49 ad ff 00 bc aa ff 00 c7 54 f0 b3 8b e5 ab d0 f4 e9 e3 23 52 17 a6 9a 7b 34 c7 4f 7d a2 ea 7e 21 8f c3 50 79 32 5a c7 64 ff 00 bb 96 5d 9f 79 36 6c 6f fd 08 57 1b f1 42 cf 52 f0 7f 89 ed b5 bf 0f 5e 5d c7 69 6f 22 79 71 dc ca ef ff 00 00 f9 bf 86 bd 63 ec 3a 4d dc 3f d9 1f ea e7 8e d9 24 d3 6f 65 ff 00 5d fe d7 bd 79 7f c5 3f ed 96 b5 fe c8 d6 ef 2e e4 8e ca 59 ae 23 bd b6 f9 d3 cd d9 b2 38 df fb bb 57 7d 2c Data Ascii: :'N>iCt=m/794nQ{f.<A5z2->Ro[/\Oo'IT#R{4O}~!Py2Zd]y6loWBR^]io"yqc:M?$oe]y?.Y#8W},
2024-10-02 15:49:40 UTC	16384	IN	Data Raw: f0 55 ef 36 b9 88 2e 64 ad 1b 5b c9 1f ef d7 2d 5a 0d 33 b2 8d 74 d5 99 b3 ba 3a 8a e2 b2 e4 bc f2 aa 58 ef 11 eb 1f 64 ce 88 d6 83 1b 7d 16 fa cd 9e ce ae 5f 6a 11 c5 f2 55 5f ed 28 2b 68 46 69 6c 73 d4 a9 49 bd 59 8f ac 2c 9e 4e ca cb 9f e7 ad 8d 56 58 2e 21 93 65 64 ed af 4a 8d f9 6c cf 1f 13 67 3b a2 be da 6c 8b 56 36 9a 64 8b 5b a7 63 93 94 8a 8f b9 4e db 46 da b2 07 c6 db 28 76 a6 6d a3 6d 4f 28 ef a1 af a5 2e c8 77 d6 a4 73 ec 8b e7 ac bb 1f 31 2d 2a 5f 37 64 3b e7 ae 2a 90 e6 91 e9 d1 9a 84 12 1d a9 4b e7 43 f2 56 24 8b b2 6a 7c f3 c8 f3 53 37 6f fb f5 d3 08 38 a3 86 bd 65 51 ea 3d 2a 48 e5 a8 79 a4 8e b4 e5 4c 88 c9 a6 6b f9 f5 5e 79 f7 d4 1e 6d 32 3a c6 30 57 36 95 57 25 a1 2c 75 3c 6d fb 9a a3 be 4a 9f fe 59 d3 94 6e 14 e7 a9 63 cd ad 1b 16 df Data Ascii: U6.d[-Z3t:Xd}_jU_(+hFilsIY,NVX.!edJlg;lV6d[cNF(vmmO(.ws1-_7d;KCV$j\|S7o8eQ=*HyLk^ym2:0W6W%,u<mJYnc
2024-10-02 15:49:40 UTC	16384	IN	Data Raw: d4 f6 24 6e da 73 ac 94 54 c9 48 a5 12 bd 15 2c 9f 3d 33 6d 03 6a cc 8e 45 a3 69 a9 36 d3 76 d3 b9 03 76 9a 36 9a 76 da 36 d3 01 bb 4d 1b 4d 3b 6d 3b 6d 48 0d db 56 23 8b 65 32 05 df 57 e3 b3 8d ff 00 e5 b5 4b 92 46 b4 e9 b9 5f 41 b6 36 de 6f df ad 18 e7 8e de 1d 9e 4f ef 2a 5b 1b 39 1e 1d 8f 5a d6 b6 30 3c 3b 1f f7 95 c3 52 b4 5b d4 f5 f0 f8 69 db 4d 0e 76 f9 a4 fb ef 4e b5 8a 37 87 7b d6 cb d9 c6 93 79 0f ff 00 2d 2b 3a 7b 6f f9 61 5a 46 a2 6a c6 55 28 ce 2f 9b 70 d3 6f 3c a9 a3 4a eb 2c 60 8e e3 e7 7a e4 ec 62 8d 2b a2 f0 ac f2 3c db 1f fd 5d 73 62 e2 ed 78 f4 3b 30 12 7a 29 f5 26 d4 a0 8d 3e 4a e7 af 96 48 bc c4 7a eb 75 c5 8f ef d6 1e b1 6d f6 8f 29 eb 2c 3c f6 b9 be 2a 9d ef 63 06 36 d9 35 58 db 27 df fe 0a 72 41 1a 4d 56 bc f8 ed fe 4a ed 94 af b1 Data Ascii: $nsTH,=3mjEi6vv6v6MM;m;mHV#e2WKF_A6oO[9Z0<;R[iMvN7{y-+:{oaZFjU(/po<J,`zb+<]sbx;0z)&>JHzum),<c65X'rAMVJ
2024-10-02 15:49:40 UTC	16384	IN	Data Raw: ed a6 92 3b 69 62 f9 24 f9 0f dd f9 bf bd 4a 97 b4 e6 6a d6 b7 e2 5d 67 46 d1 b3 bb 7b eb b1 c6 7c 72 f0 fc 7a 4c df db da 7c 3f 67 8e de 4f de f9 7f 73 e6 fb bf fa 15 72 1a 1f 8a bc 4f 69 77 14 e9 77 1c 77 76 f1 f9 71 c9 e5 3c bf 27 f1 57 b7 f8 ab c3 8f e3 5f 01 dc c9 6b 79 0c 77 57 12 f9 91 fd 9a 57 d9 bd 9f f7 7f eb 78 5c b5 78 bf c3 3d 3f 5a 9b c4 da b6 90 86 6b 7b e8 f4 e9 ad 3f d5 7f 1e fd be 5b ed f5 af 46 9d 65 28 b4 d6 c7 85 8a c0 b8 d6 8c e3 d7 5b 9e 9f e0 df 89 1a 34 57 71 cf e2 19 a1 b7 fe d5 b6 fd ed cc 5b ff 00 d6 c7 fe ad bf d8 fb 89 5c e7 8b 62 9e ef c6 fa b6 a9 1e 8f 35 cf 87 2f 63 fb 5c 77 bf 7d 23 b7 fb 9b 9d ff 00 bd eb 4b f1 5f c0 36 36 3e 2c b1 b2 d0 66 fb 15 ae a3 6d 0c 7f f4 c6 3b 85 f9 25 f9 7f da fb ff 00 2f f7 2b 6b e0 9d 9d dc Data Ascii: ;ib$Jj]gF{\|rzL\|?gOsrOiwwwvq<'W_kywWWx\x=?Zk{?[Fe([4Wq[\b5/c\w}#K_66>,fm;%/+k
2024-10-02 15:49:40 UTC	16384	IN	Data Raw: d2 f9 52 ec 4f f9 67 5f 63 85 ab 09 d0 8d 45 b5 8f 84 c6 51 94 31 13 a3 24 b4 7d 36 2d 5d 5b dd ad af da 9e 19 bc 8f f9 e9 4f f0 94 0f 2c 97 0f ff 00 3d 3e 48 fc cf fc 7a 8f 0c eb 4f a7 cd e4 09 7f eb 9d 6f 47 79 a5 5d c3 f6 ab ab 38 6d e4 f2 ff 00 d6 58 cb b3 cb 6f f6 92 ae 32 52 92 91 cd 51 4d 41 c2 c6 1e a8 d3 dd b4 96 bf 64 f3 1e 3f f9 67 5c fd bc ae ba 94 8e 9f bb ae df 4e b2 f3 ae ff 00 7d 77 0f 91 e6 7f ac 96 5f 2b 65 63 78 f3 44 93 4d d4 3c f8 62 ff 00 45 b8 e9 27 f0 52 95 48 49 f2 a9 2b ae 9d 47 84 a9 1d 61 6d c7 69 7f 65 bd 86 47 83 ce f3 2d ff 00 e5 9f 95 be ba 09 24 82 df cb 9f 4b f2 7f d2 64 48 e4 f2 bf e5 de 5f f7 6b 98 f0 9d 8a 3e a1 89 26 9a de 39 23 f3 2e 3c af bf b6 ba 98 2e 6c 25 b4 f9 3f 79 07 fc f3 fe 3f 97 f8 ab 9f dd bd 9a 3b a3 49 Data Ascii: ROg_cEQ1$}6-][O,=>HzOoGy]8mXo2RQMAd?g\N}w_+ecxDM<bE'RHI+GamieG-$KdH_k>&9#.<.l%?y?;I
2024-10-02 15:49:40 UTC	16065	IN	Data Raw: 47 25 64 fd 85 fc df 39 3c af de 51 cd cc 8a d2 12 6a 4a cc d4 f0 b6 97 71 a8 49 20 f3 fe c7 18 8d 3c c9 25 8b 7f ca df 2d 7d 31 e0 7b 39 35 0d 26 c6 7d 46 f3 cc 92 3b 2f b3 c9 1c bf f2 d3 fd aa f9 f7 c3 3e 20 7d 12 68 de e6 cf cd 8f fe 5a 79 9f c1 b6 bd 7f e1 47 88 20 ba f0 cf 9c 66 fb 34 97 12 ef 8f cd 97 e4 ff 00 b6 75 e3 e6 d0 ad ca 9a e8 7d 3f 0f 54 c3 5e 49 a7 cd 6b b3 13 f6 91 d1 74 db 2f 0d d8 bc 13 79 97 71 ca f1 c5 f7 37 f9 5f dd af 0b 8d ab ea 0d 4b 5c f0 d6 a7 ab 47 a7 6a 93 68 76 f3 fc f2 47 1d f4 5b fe 4a f3 cd 53 e1 3a 5e ff 00 a6 e8 fa 96 9f 71 3d c5 ec d1 ff 00 72 db 6f df 5d 9b 7e ed 56 07 10 a1 4f 92 aa b7 99 9e 6b 81 9d 6a ce ad 1b 3e 96 5e 47 93 da dc f9 57 71 3f fa bf de 7f ac af 7d fd 9f 56 3b 7d 3f 52 b2 f3 bf 7f e6 3f 9b 1f fb 7f Data Ascii: G%d9<QjJqI <%-}1{95&}F;/> }hZyG f4u}?T^Ikt/yq7_K\GjhvG[JS:^q=ro]~VOkj>^GWq?}V;}?R?
2024-10-02 15:49:40 UTC	16384	IN	Data Raw: 2a f3 be 13 ea d1 e9 1a 0c 37 bf 69 fd dc 97 b2 ef 7f dd 33 fd f5 df cd 70 62 e4 a0 fd 8c 63 ac ba 9e b6 1f 08 f1 14 25 3a 95 34 d7 fa f3 3c 97 47 f1 3f 9f f0 f7 5b d1 12 1f 2e fa 48 ac e3 8a 48 be 4f 33 65 ca 57 b4 68 fe 36 d7 5f c2 71 dd 3d 9f ee fe 49 23 f2 a2 9b 7d be df f6 bf dd 4f e1 fc ab e6 3f 02 b4 79 92 f6 f8 ff 00 c7 bc 9f bb 8f fd da ec 3c 39 e2 cd 4a ca eb ed b0 5d fd a1 3f e7 ce 5f b9 5e 4d 79 53 f7 69 cd bb a7 ba fe bc 82 96 71 f5 47 ec f9 6f 65 6b fd e7 b4 5f 5e 78 6a ef e2 c6 9b ad e9 77 90 c9 25 ed b3 dc 5c de dc c5 e7 3d c2 2a 79 7b 7e 75 60 9b 7c a4 fb df f3 d2 a9 68 fe 1e d2 7f e1 61 49 e2 bb a9 ae ff 00 79 73 f6 88 a3 b1 d3 ff 00 db ff 00 76 b8 2f 09 f8 f7 5a d3 fc 6d ff 00 09 2b c3 98 fe cd f6 7f b3 0f 91 36 33 ee f9 56 bd 17 4d f8 Data Ascii: 7i3pbc%:4<G?[.HHO3eWh6_q=I#}O?y<9J]?_^MySiqGoek_^xjw%\=y{~u`\|haIysv/Zm+63VM
2024-10-02 15:49:40 UTC	16384	IN	Data Raw: 7f f3 ef 1f fa ef b9 ff 00 3c ea 8a 6a 7e 74 7b ee a2 9a 39 bf e9 9d 74 b9 28 d6 f7 b6 3d 78 63 31 74 61 ec b4 94 0d 0d 52 7b bd 4f 56 b9 d4 6e a6 8b ed 77 b7 2f 25 cc 7f 73 e7 ff 00 76 92 eb 48 be b7 f9 24 b4 97 17 1f ea ee 3f e5 97 fd f7 55 6e a7 fb 44 3f 69 b2 8b cc 9a 39 36 49 1f f1 55 87 b9 f1 05 b1 8e 38 6d 25 b8 b5 8e 47 f3 23 8f fe f9 f9 ab bf 11 cb 28 46 51 57 47 9f 25 56 6f 6d 7c c9 26 5d 76 5b 5c ff 00 64 79 9e 5f c9 27 ef 7f 87 fd 9d b5 bd f0 eb 5c 4f 0d 6b 76 ba 85 97 fc 4b ae ad bc ef b4 49 17 fa e9 d1 93 fd 53 af 4a a6 d6 d2 25 af 9d 65 ff 00 7f 23 97 ee 2d 7b 1f 85 7e 24 7c 3a fe cd 8b 45 d7 bc 35 16 a3 63 67 6c 9f bd b9 b4 4b 99 a3 7f e3 ff 00 6b 6b 77 ae 59 55 5e f5 a3 a0 65 b5 e3 ed 97 be a9 db 6d 1f e3 bf de 60 47 a7 f8 5f ed 76 37 af Data Ascii: <j~t{9t(=xc1taR{OVnw/%svH$?UnD?i96IU8m%G#(FQWG%Vom\|&]v[\dy_'\OkvKISJ%e#-{~$\|:E5cglKkkwYU^em`G_v7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49743	206.126.172.72	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:49:52 UTC	667	OUT	GET / HTTP/1.1 Host: dne.sendyouropinions.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 15:49:52 UTC	741	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Content-Type: text/html; charset=utf-8 Server: X-AspNetMvc-Version: 5.2 Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-GAtOxeLzBrPcFKiEqU+3a0aaiA0wR7B18mCbMN8UBv4='; X-AspNet-Version: 4.0.30319 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-XSS-Protection: 1; mode=block Permissions-Policy: microphone=(), geolocation=() Date: Wed, 02 Oct 2024 15:49:52 GMT Content-Length: 95 Connection: close Set-Cookie: BIGipServer~shared~dne.sendyouropinions.com-443=!7cp7OMT8WzhuBVPoXdMIgqXtwSrnbA1iy3erkVYcfuhZ+tdAmC0S3KOFXM7jfqcLMMCnL7ZID8aJMVw=; path=/; Httponly; Secure
2024-10-02 15:49:52 UTC	95	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 0d 0a 3c 68 32 3e 20 55 6e 64 65 72 20 63 6f 6e 73 74 72 75 63 74 69 6f 6e 20 3c 2f 68 32 3e 0d 0a 3c 2f 63 65 6e 74 65 72 3e 0d 0a 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head></head><body><center><h2> Under construction </h2></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49745	206.126.172.72	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:49:53 UTC	699	OUT	GET /favicon.ico HTTP/1.1 Host: dne.sendyouropinions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipServer~shared~dne.sendyouropinions.com-443=!7cp7OMT8WzhuBVPoXdMIgqXtwSrnbA1iy3erkVYcfuhZ+tdAmC0S3KOFXM7jfqcLMMCnL7ZID8aJMVw=
2024-10-02 15:49:53 UTC	477	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Type: image/x-icon Last-Modified: Fri, 09 Aug 2024 14:12:48 GMT Accept-Ranges: bytes ETag: "10d1df3666eada1:0" Server: Referrer-Policy: no-referrer Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-XSS-Protection: 1; mode=block Permissions-Policy: microphone=(), geolocation=() Date: Wed, 02 Oct 2024 15:49:53 GMT Content-Length: 32038 Connection: close
2024-10-02 15:49:53 UTC	15907	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 d2 d1 83 cf cd cc 85 cf cc cb 85 cf cc cb 85 cf cc ca 85 ce cb ca 85 ce cb c9 85 bf bd bc b9 ce cc cb dd cd ca c9 dd cc c8 c6 dd cb c6 c4 dd cc c5 c3 db cb c5 c1 db cb c4 c1 db b6 b0 ae c1 f1 ee ec ff f4 e7 d6 ff f1 e1 ca ff ee e1 d0 ff ea e6 e4 ff e9 e5 e3 ff e9 e4 e2 ff e5 e2 e0 ff fd fb fa ff fc f9 f7 ff fb f6 f4 ff fa f4 f1 ff fa f2 ef ff f9 f1 ed ff f9 f1 ed ff df d7 d4 df f1 ee ee ff db b3 75 ff d0 9d 4c ff d0 ab 6e ff fc Data Ascii: hF 00 %V@@ (B:( @uLn
2024-10-02 15:49:53 UTC	19	IN	Data Raw: 3d 3d 7f d1 d1 d1 ff fd f8 f5 ff fd f8 f5 ff fd f8 f5 ff Data Ascii: ==
2024-10-02 15:49:53 UTC	16112	IN	Data Raw: fd f8 f5 ff fc f8 f5 ff fc f8 f5 ff fc f8 f4 ff fc f8 f4 ff fc f7 f4 ff fb f6 f4 ff fb f6 f4 ff fb f6 f3 ff fb f6 f3 ff fc f5 f3 ff fb f5 f2 ff fb f5 f2 ff fb f5 f2 ff fb f5 f2 ff fb f4 f2 ff fb f4 f1 ff fa f4 f1 ff fa f4 f0 ff fa f4 f0 ff fa f4 f0 ff fa f4 f0 ff fa f3 f0 ff f9 f3 f0 ff fa f3 f0 ff ba b5 b3 ff fe fc fc ff fe fc fb ff fe fc fb ff fd fb fa ff fd fb fa ff fd fa f9 ff fd fa f8 ff fd f9 f8 ff fc f8 f6 ff fc f8 f6 ff fc f7 f5 ff fc f7 f4 ff fb f6 f4 ff fb f5 f3 ff fb f5 f2 ff fb f4 f1 ff fa f4 f1 ff fa f3 f0 ff fa f3 ef ff fa f2 ef ff fa f2 ee ff fa f1 ee ff f9 f1 ed ff f9 f1 ed ff f9 f1 ed ff f9 f0 ed ff f9 f0 ec ff f9 f0 ec ff f9 f0 ec ff f9 f0 ed ff f9 f1 ed ff f9 f1 ed ff f9 f1 ed ff 3d 3d 3d 7f d0 d0 d0 ff fd f8 f6 ff fd f8 f6 ff fd f8 f6 Data Ascii: ===

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49746	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:49:54 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-02 15:49:54 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=89756 Date: Wed, 02 Oct 2024 15:49:54 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49747	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:49:55 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-02 15:49:55 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=89699 Date: Wed, 02 Oct 2024 15:49:55 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-02 15:49:55 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49748	206.126.172.72	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:49:55 UTC	498	OUT	GET /favicon.ico HTTP/1.1 Host: dne.sendyouropinions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipServer~shared~dne.sendyouropinions.com-443=!7cp7OMT8WzhuBVPoXdMIgqXtwSrnbA1iy3erkVYcfuhZ+tdAmC0S3KOFXM7jfqcLMMCnL7ZID8aJMVw=
2024-10-02 15:49:55 UTC	477	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Type: image/x-icon Last-Modified: Fri, 09 Aug 2024 14:12:48 GMT Accept-Ranges: bytes ETag: "10d1df3666eada1:0" Server: Referrer-Policy: no-referrer Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-XSS-Protection: 1; mode=block Permissions-Policy: microphone=(), geolocation=() Date: Wed, 02 Oct 2024 15:49:55 GMT Content-Length: 32038 Connection: close
2024-10-02 15:49:55 UTC	15907	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 d2 d1 83 cf cd cc 85 cf cc cb 85 cf cc cb 85 cf cc ca 85 ce cb ca 85 ce cb c9 85 bf bd bc b9 ce cc cb dd cd ca c9 dd cc c8 c6 dd cb c6 c4 dd cc c5 c3 db cb c5 c1 db cb c4 c1 db b6 b0 ae c1 f1 ee ec ff f4 e7 d6 ff f1 e1 ca ff ee e1 d0 ff ea e6 e4 ff e9 e5 e3 ff e9 e4 e2 ff e5 e2 e0 ff fd fb fa ff fc f9 f7 ff fb f6 f4 ff fa f4 f1 ff fa f2 ef ff f9 f1 ed ff f9 f1 ed ff df d7 d4 df f1 ee ee ff db b3 75 ff d0 9d 4c ff d0 ab 6e ff fc Data Ascii: hF 00 %V@@ (B:( @uLn
2024-10-02 15:49:55 UTC	19	IN	Data Raw: 3d 3d 7f d1 d1 d1 ff fd f8 f5 ff fd f8 f5 ff fd f8 f5 ff Data Ascii: ==
2024-10-02 15:49:55 UTC	16112	IN	Data Raw: fd f8 f5 ff fc f8 f5 ff fc f8 f5 ff fc f8 f4 ff fc f8 f4 ff fc f7 f4 ff fb f6 f4 ff fb f6 f4 ff fb f6 f3 ff fb f6 f3 ff fc f5 f3 ff fb f5 f2 ff fb f5 f2 ff fb f5 f2 ff fb f5 f2 ff fb f4 f2 ff fb f4 f1 ff fa f4 f1 ff fa f4 f0 ff fa f4 f0 ff fa f4 f0 ff fa f4 f0 ff fa f3 f0 ff f9 f3 f0 ff fa f3 f0 ff ba b5 b3 ff fe fc fc ff fe fc fb ff fe fc fb ff fd fb fa ff fd fb fa ff fd fa f9 ff fd fa f8 ff fd f9 f8 ff fc f8 f6 ff fc f8 f6 ff fc f7 f5 ff fc f7 f4 ff fb f6 f4 ff fb f5 f3 ff fb f5 f2 ff fb f4 f1 ff fa f4 f1 ff fa f3 f0 ff fa f3 ef ff fa f2 ef ff fa f2 ee ff fa f1 ee ff f9 f1 ed ff f9 f1 ed ff f9 f1 ed ff f9 f0 ed ff f9 f0 ec ff f9 f0 ec ff f9 f0 ec ff f9 f0 ed ff f9 f1 ed ff f9 f1 ed ff f9 f1 ed ff 3d 3d 3d 7f d0 d0 d0 ff fd f8 f6 ff fd f8 f6 ff fd f8 f6 Data Ascii: ===

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49752	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:50:05 UTC	732	OUT	GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8fFg99zOYc5H_hWS3hkd36zVUCUy6FBDKEyc-CqVImEytwrjLKWx8Qzg7rcFeU7AqI_TOC104rQj_DV4ts4MGNwPyS4zvUJblqqaHc4ucO95w4-9MBq0k_ODvbEO3oKgR5kHkyYOS_S-kdT4uRGQZwDxVT65g_riR-zGS5f9NYWfKpkB4%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZm9uZWRyaXZlLmxpdmUuY29tJTJmJTNmb2NpZCUzZGNtbTA3YjdkbnU0%26rlid%3Dda7fed0c8c8f1cff41c38bf1e71f2f8f&TIME=20241002T155002Z&CID=531098720&EID=531098720&tids=15000&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=DA18C8825356BAC4E7B23066FFFFFFFF HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: g.bing.com Connection: Keep-Alive
2024-10-02 15:50:05 UTC	862	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: MUID=26AE0A0CA95760E617551F00A8FF61C1; domain=.bing.com; expires=Mon, 27-Oct-2025 15:50:05 GMT; path=/; SameSite=None; Secure; Priority=High; Set-Cookie: MR=0; domain=g.bing.com; expires=Wed, 09-Oct-2024 15:50:05 GMT; path=/; SameSite=None; Secure; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: B45D7E43A53B47A581E64D0B13548523 Ref B: EWR30EDGE1406 Ref C: 2024-10-02T15:50:05Z Date: Wed, 02 Oct 2024 15:50:04 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49754	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 15:50:06 UTC	822	OUT	GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8fFg99zOYc5H_hWS3hkd36zVUCUy6FBDKEyc-CqVImEytwrjLKWx8Qzg7rcFeU7AqI_TOC104rQj_DV4ts4MGNwPyS4zvUJblqqaHc4ucO95w4-9MBq0k_ODvbEO3oKgR5kHkyYOS_S-kdT4uRGQZwDxVT65g_riR-zGS5f9NYWfKpkB4%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZm9uZWRyaXZlLmxpdmUuY29tJTJmJTNmb2NpZCUzZGNtbTA3YjdkbnU0%26rlid%3Dda7fed0c8c8f1cff41c38bf1e71f2f8f&TIME=20241002T155002Z&CID=531098720&EID=&tids=15000&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=DA18C8825356BAC4E7B23066FFFFFFFF HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: g.bing.com Connection: Keep-Alive Cookie: MUID=26AE0A0CA95760E617551F00A8FF61C1; _EDGE_S=SID=0B17A30DED8768390590B601EC0C6913; MR=0
2024-10-02 15:50:06 UTC	765	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: MSPTC=flXenlI0ONcwfwbStzi3O2Cbxdcf5qGj4lqQcZjobU4; domain=.bing.com; expires=Mon, 27-Oct-2025 15:50:06 GMT; path=/; Partitioned; secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 48DEF0FF843D4123B348C6ACB6C9D747 Ref B: EWR311000102025 Ref C: 2024-10-02T15:50:06Z Date: Wed, 02 Oct 2024 15:50:06 GMT Connection: close

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6832, Parent PID: 5860

General

Target ID:	0
Start time:	11:49:42
Start date:	02/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6412, Parent PID: 6832

General

Target ID:	2
Start time:	11:49:46
Start date:	02/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 --field-trial-handle=2392,i,11199523818883284269,10067761302341695483,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3992, Parent PID: 5860

General

Target ID:	3
Start time:	11:49:49
Start date:	02/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://dne.sendyouropinions.com"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://dne.sendyouropinions.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6832, Parent PID: 5860

General

Chronological Activities

Analysis Process: chrome.exePID: 6412, Parent PID: 6832

General

Chronological Activities

Analysis Process: chrome.exePID: 3992, Parent PID: 5860

General

Chronological Activities

Disassembly

Windows Analysis Report
http://dne.sendyouropinions.com