Edit tour

Windows Analysis Report
https://infosario.quintiles.com/

Overview

General Information

Sample URL:	https://infosario.quintiles.com/
Analysis ID:	1530639
Infos:

Errors URL not reachable

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6288 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2948 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1992,i,8342133861426151060,17564096738587947103,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6660 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://infosario.quintiles.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.9:49714 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.9:49726 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.9:49730 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.9:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.9:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.9:49727 version: TLS 1.2

Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.9:49714 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.9:49726 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.9:49730 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: infosario.quintiles.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.9:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.9:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.9:49727 version: TLS 1.2

Source: classification engine

Classification label: unknown1.win@19/6@12/3

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1992,i,8342133861426151060,17564096738587947103,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://infosario.quintiles.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1992,i,8342133861426151060,17564096738587947103,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://infosario.quintiles.com/	0%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
www.google.com	0%	Virustotal	Browse
google.com	0%	Virustotal	Browse
infosario.quintiles.com	0%	Virustotal	Browse

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
google.com	142.250.185.174	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.186.68	true	false	0%, Virustotal, Browse	unknown
infosario.quintiles.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States		15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false

Private

IP
192.168.2.9

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1530639
Start date and time:	2024-10-10 10:01:11 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://infosario.quintiles.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	UNKNOWN
Classification:	unknown1.win@19/6@12/3
Cookbook Comments:	URL browsing timeout or error

Errors

URL not reachable

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.99, 216.58.212.142, 74.125.206.84, 34.104.35.123, 95.100.63.156, 20.12.23.50, 184.86.251.7, 184.86.251.13, 184.86.251.14, 184.86.251.8, 184.86.251.15, 184.86.251.16, 184.86.251.10, 184.86.251.9, 184.86.251.11, 13.95.31.18, 13.85.23.206, 2.21.79.34, 2.21.79.40, 2.21.79.24, 2.21.79.35, 2.21.79.41, 2.21.79.33, 23.11.206.8, 2.21.79.32, 2.21.79.42
Excluded domains from analysis (whitelisted): www.bing.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, www-www.bing.com.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, e86303.dscx.akamaiedge.net, edgedl.me.gvt1.com, www.bing.com.edgekey.net, e16604.g.akamaiedge.net, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, clients.l.google.com, prod.fs.microsoft.com.akadns.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 07:02:14 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9775261351776767
Encrypted:	false
SSDEEP:	48:8EdgWT70HehHzidAKZdA1P4ehwiZUklqehAy+3:8/Wn0HiO/y
MD5:	1D5C9CE565ACF4A4E7461389E5ED8559
SHA1:	7C8878964DAC2CA3CCDFA88578B86889C78FDA32
SHA-256:	64A66A4751768FC2E0DF5326FB13451912D7C511F1A4A2D17ACC92510BF3835C
SHA-512:	0D1E5D728B24024042A1206D6E0D5A8E8132013D087D5D06933E82E4BA1D51D8CE769BE4FE524511546E5ECB19C0147C84CFA16B179A96D5D6CCEC20DB00ED2A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Z........v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IJYC@....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJYC@....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VJYC@....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VJYC@.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VJYG@...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........^.n$.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 07:02:13 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9908674627717415
Encrypted:	false
SSDEEP:	48:8NdgWT70HehHzidAKZdA1+4eh/iZUkAQkqehvy+2:8gWn0HDF9Q+y
MD5:	9E67E4F75D11570052F796F89F8132D8
SHA1:	ADA0514A2FB3A9C06C9B7316DE70C5C37DC8AE82
SHA-256:	1FB6C8963401CCE84E76652B4CD282AFBD5AA3270E8DEFC0D320B8D5AF1B85B2
SHA-512:	09D4670138ADE82322D1C07ECD7B8756342AF59C17558E8AC60E91271D2D523E424D638814D3947B918FC8F03F46D929CBB5145E450D5DEAA0E7DCC1E0F570B5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......l.......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IJYC@....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJYC@....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VJYC@....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VJYC@.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VJYG@...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........^.n$.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:56:51 2023, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.002539896095691
Encrypted:	false
SSDEEP:	48:8HdgWT70HVHzidAKZdA1404eh7sFiZUkmgqeh7sVy+BX:82Wn0HvInLy
MD5:	CDD3B1FA598A1B34CD6839EB9142FF12
SHA1:	5C94407B6DC6E3465600D63FAACA4979AA37E03D
SHA-256:	C265B954F5FA690C1870CA9D1B472E632862FA9685F3E2AF2AB259D13F06DFAE
SHA-512:	E1B03D194470EB03AA586E1C503C00AADCED94B768BDDE4AE3A0306F934FC1D159E31CFA93F8BDFDA9D97FC29761D4C244F8002A003B93A7D435A98297B37DC9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....<}.i.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IJYC@....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJYC@....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VJYC@....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VJYC@.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VEW.F...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........^.n$.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 07:02:13 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9886980912458956
Encrypted:	false
SSDEEP:	48:81dgWT70HehHzidAKZdA1p4ehDiZUkwqehjy+R:8IWn0HU5ty
MD5:	030732D7857CD3CD30FB4CC5AB78BB8E
SHA1:	98DD3D9B22DE8AE319F79A3C7497CD8DB48AB4A9
SHA-256:	30AC9382ECA1A4759DF9C43AC3D84B06DB21118E37DC22DAE0B17932739604E7
SHA-512:	63AFEFB1661F5EA20E49DAC59005713F49C0AF99995A6F5BC28A99E0D12BEB920CCD2EF31DF502C20F78002694B86EA28CC68C484BB578B673F054063CE5CCC2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....5h.......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IJYC@....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJYC@....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VJYC@....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VJYC@.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VJYG@...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........^.n$.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 07:02:14 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.979734009768548
Encrypted:	false
SSDEEP:	48:8KdgWT70HehHzidAKZdA1X4ehBiZUk1W1qehBy+C:8BWn0H6b9hy
MD5:	092A6BEEBB8BA9490AF52B6B90F78724
SHA1:	4E47AFAF86C70D57F4187912B7C4FF9B696AA20A
SHA-256:	3FFF41817509CAA029D5961148FC9C1568A3E4A86DB366736683E6F3D363E1E7
SHA-512:	19389FF0AA66F9EB7278A5FA07F091659493E9034DED34EAC065612E900E3EBD77A4679797EDFB8F6BF361114E067F3B2DC0B1F39ACA515B579433930AF0B1EA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......v.......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IJYC@....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJYC@....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VJYC@....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VJYC@.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VJYG@...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........^.n$.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 07:02:13 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9867138232470336
Encrypted:	false
SSDEEP:	48:8+dgWT70HehHzidAKZdA1duTc4ehOuTbbiZUk5OjqehOuTbLy+yT+:8NWn0HPTcJTbxWOvTbLy7T
MD5:	00970EDA020D9DD819FD02C4441F622D
SHA1:	9D00C74E73AD111EE3DB9BCC6291E17683ED371A
SHA-256:	626E3F91042F8FFCD286E5FD1A3B6F858517351B4E18D80AA7D827A1D62D6C79
SHA-512:	8B5DEC86E1AEEE65ABA031760A9409F2E8789AC9A2E20615D070E2C69186A94A24A65BF87442FA0355204F553A4B51AD8FB39C6D4AC1012AAC95BA623F3AF038
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....G.Y.......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IJYC@....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJYC@....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VJYC@....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VJYC@.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VJYG@...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........^.n$.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 10:02:01.614516020 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.614542961 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.614615917 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.614782095 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.614782095 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.614799976 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.614883900 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.616494894 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.616513014 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.616628885 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.616636992 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.616712093 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.618113995 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.618134975 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.618232965 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.618247032 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.618295908 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.618295908 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.619335890 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.619354963 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.619416952 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.619424105 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.619482994 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.619985104 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.620059013 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.620093107 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.620099068 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.620107889 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.620210886 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.622709990 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.622725964 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.622881889 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.622896910 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.623172045 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.626579046 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.626595974 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.626691103 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.626698971 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.626765966 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.628237009 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.628268957 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.628350019 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.628364086 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.628627062 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.629512072 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.629528999 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.629621029 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.629628897 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.629718065 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.630091906 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.630109072 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.630196095 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.630201101 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.630269051 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.630351067 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.630367041 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.630456924 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.630462885 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.630562067 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.631077051 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.631150961 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.631216049 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.631216049 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.631880045 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.631894112 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.631903887 CEST	49707	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.631911039 CEST	443	49707	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.689261913 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.689305067 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.689429998 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.691361904 CEST	49710	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.691361904 CEST	49709	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.691414118 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.691422939 CEST	443	49709	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.691509962 CEST	49710	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.691509962 CEST	49709	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.692476988 CEST	49711	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.692492008 CEST	443	49711	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.692606926 CEST	49711	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.692764044 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.692778111 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.693182945 CEST	49710	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.693182945 CEST	49709	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.693201065 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.693213940 CEST	443	49709	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.693262100 CEST	49711	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.693274975 CEST	443	49711	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.693806887 CEST	49712	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.693859100 CEST	443	49712	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.693931103 CEST	49712	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.694020987 CEST	49712	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.694036961 CEST	443	49712	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.708178043 CEST	443	49709	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.709368944 CEST	49713	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.709398031 CEST	443	49713	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.709506989 CEST	49713	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.710001945 CEST	49713	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.710016966 CEST	443	49713	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.718420029 CEST	443	49711	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.718522072 CEST	49711	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.718832970 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.718851089 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.718879938 CEST	49711	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.718904018 CEST	443	49711	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.718921900 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.718998909 CEST	443	49712	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.719067097 CEST	49712	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.719096899 CEST	49712	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.719115973 CEST	443	49712	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.719223976 CEST	49715	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.719244003 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.719258070 CEST	443	49715	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.719259977 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.719331980 CEST	49715	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.719484091 CEST	49715	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.719496012 CEST	443	49715	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.730536938 CEST	443	49713	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.730629921 CEST	49713	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.730717897 CEST	49713	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.730732918 CEST	443	49713	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.733406067 CEST	49716	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.733434916 CEST	443	49716	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.733520031 CEST	49716	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.733767033 CEST	49716	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.733779907 CEST	443	49716	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.740854979 CEST	443	49715	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.740971088 CEST	49715	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.741005898 CEST	49715	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.741020918 CEST	443	49715	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.743244886 CEST	49717	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.743283987 CEST	443	49717	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.743412971 CEST	49717	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.743552923 CEST	49717	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.743558884 CEST	443	49717	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.744507074 CEST	443	49716	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.744793892 CEST	49718	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.744810104 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.744899988 CEST	49718	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.745147943 CEST	49718	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.745162010 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.764885902 CEST	443	49717	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.765044928 CEST	49717	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.765161991 CEST	49717	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.765182018 CEST	443	49717	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.765508890 CEST	49719	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.765525103 CEST	443	49719	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.765597105 CEST	49719	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.765872002 CEST	49719	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.765880108 CEST	443	49719	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.777241945 CEST	443	49719	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.780461073 CEST	49720	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.780493975 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:01.780646086 CEST	49720	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.780977964 CEST	49720	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:01.780991077 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.107522964 CEST	49676	443	192.168.2.9	23.206.229.209
Oct 10, 2024 10:02:02.107588053 CEST	49675	443	192.168.2.9	23.206.229.209
Oct 10, 2024 10:02:02.295120001 CEST	49674	443	192.168.2.9	23.206.229.209
Oct 10, 2024 10:02:02.328574896 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.329116106 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.329127073 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.329713106 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.329725027 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.342541933 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.343250036 CEST	49710	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.343267918 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.343425989 CEST	49710	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.343431950 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.387242079 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.387566090 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.393266916 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.393315077 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.393677950 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.394551039 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.408314943 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.408538103 CEST	49718	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.410624027 CEST	49718	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.410645008 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.410908937 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.412003040 CEST	49718	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.427071095 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.427102089 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.427258015 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.427273035 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.427337885 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.427421093 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.427470922 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.427598000 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.427598000 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.427598000 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.427618980 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.429178953 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.429256916 CEST	49720	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.430329084 CEST	49720	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.430340052 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.430473089 CEST	49721	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.430499077 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.430582047 CEST	49721	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.430799007 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.430835009 CEST	49721	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.430846930 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.431505919 CEST	49720	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.435409069 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.443977118 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.444000959 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.444057941 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.444083929 CEST	49710	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.444129944 CEST	49710	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.444376945 CEST	49710	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.444396019 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.445456982 CEST	49710	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.445465088 CEST	443	49710	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.447170973 CEST	49722	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.447196960 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.447412968 CEST	49722	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.447433949 CEST	49722	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.447438002 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.455441952 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.479404926 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.491329908 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.491357088 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.491422892 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.491453886 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.491543055 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.491681099 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.491705894 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.491735935 CEST	49714	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.491744041 CEST	443	49714	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.494482994 CEST	49723	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.494509935 CEST	443	49723	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.494764090 CEST	49723	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.494764090 CEST	49723	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.494801044 CEST	443	49723	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.505877972 CEST	443	49723	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.506227016 CEST	49724	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.506262064 CEST	443	49724	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.506382942 CEST	49724	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.506575108 CEST	49724	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.506589890 CEST	443	49724	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.518562078 CEST	443	49724	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.520755053 CEST	49725	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.520793915 CEST	443	49725	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.520926952 CEST	49725	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.521087885 CEST	49725	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.521104097 CEST	443	49725	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.529402018 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.529486895 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.529736996 CEST	49720	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.529736996 CEST	49720	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.529783010 CEST	49720	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.529799938 CEST	443	49720	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.532886982 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.532926083 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.533149004 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.533149004 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.533180952 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.546576977 CEST	443	49725	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.546700001 CEST	49725	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.546745062 CEST	49725	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.546761036 CEST	443	49725	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.547043085 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.547079086 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.547149897 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.547430038 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.547446012 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.549976110 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.550045967 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.550173998 CEST	49718	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.550375938 CEST	49718	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.550376892 CEST	49718	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.550391912 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.550403118 CEST	443	49718	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.553251982 CEST	49728	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.553278923 CEST	443	49728	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.553541899 CEST	49728	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.553541899 CEST	49728	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.553572893 CEST	443	49728	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.575308084 CEST	443	49728	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.575413942 CEST	49728	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.575500011 CEST	49728	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.575520992 CEST	443	49728	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.575764894 CEST	49729	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.575798988 CEST	443	49729	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.575898886 CEST	49729	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.577397108 CEST	49729	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.577419996 CEST	443	49729	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:02.732558012 CEST	49708	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:02.732588053 CEST	443	49708	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.028454065 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.028476000 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.028599977 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.028630972 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.029958963 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.030031919 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.030045986 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.034674883 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.034698009 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.035260916 CEST	443	49729	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.035537958 CEST	443	49729	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.035695076 CEST	49729	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.066272020 CEST	49729	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.066289902 CEST	443	49729	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.070732117 CEST	49730	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.070760965 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.070883989 CEST	49730	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.071028948 CEST	49730	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.071037054 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.078619003 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.079235077 CEST	49721	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.079250097 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.079633951 CEST	49721	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.079647064 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.082104921 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.082395077 CEST	49722	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.082410097 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.082835913 CEST	49722	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.082842112 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.132803917 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.134272099 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.134319067 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.134330034 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.134335995 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.202332020 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.202390909 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.202454090 CEST	49722	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.202508926 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.202584028 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.202665091 CEST	49721	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.202753067 CEST	49722	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.202753067 CEST	49722	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.202769041 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.202783108 CEST	443	49722	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.202805042 CEST	49721	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.202809095 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.202830076 CEST	49721	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.202835083 CEST	443	49721	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.205765963 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.205765963 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.205796957 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.205817938 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.205851078 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.206007957 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.207052946 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.207062960 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.207367897 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.208117008 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.229948997 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.230257034 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.235915899 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.255410910 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.279365063 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.301475048 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.304081917 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.304161072 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.304182053 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.305243015 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.306341887 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.306365967 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.306492090 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.309267044 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.309339046 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.309415102 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.309560061 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.309560061 CEST	49726	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.309576035 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.309580088 CEST	443	49726	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.311527014 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.311556101 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.405225992 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.408181906 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.454583883 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.454658985 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.457725048 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.457848072 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.457870007 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.503839970 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.507116079 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.545137882 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.547815084 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.558825016 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.561950922 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.602828026 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.605496883 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.651406050 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.821747065 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.822592020 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.822664976 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.822691917 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.825397015 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.825412035 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.825642109 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.825648069 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.826147079 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.826153040 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.826710939 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.827410936 CEST	49730	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.827941895 CEST	49730	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.827954054 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.828356981 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.829243898 CEST	49730	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.871407986 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.914194107 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.916960955 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.917005062 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.924581051 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.924659967 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.924757957 CEST	49730	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.925077915 CEST	49730	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.925092936 CEST	443	49730	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.925952911 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.929091930 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.929128885 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:03.932012081 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.932188988 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:03.932204962 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.004774094 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.007671118 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.016603947 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.019635916 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.067414045 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.071011066 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.073540926 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.073575974 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.074223995 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.076617956 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.076633930 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.078615904 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.115453005 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.118827105 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.163408995 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.165889978 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.191833019 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.191869020 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.211108923 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.214287996 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.214868069 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.217705965 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.217726946 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.219799042 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.267400026 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.305610895 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.309614897 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.309665918 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.358921051 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.362132072 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.362155914 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.362184048 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.362215042 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.362242937 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.365139961 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.365272045 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.365292072 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.405384064 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.409256935 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.452591896 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.455948114 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.500924110 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.504395008 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.508912086 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.512001038 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.512016058 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.514569044 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.559405088 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.595498085 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.598942995 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.598999023 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.599596024 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.602821112 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.647409916 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.647488117 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.650634050 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.650676012 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.653726101 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.653758049 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.656785011 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.699414015 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.700009108 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.703454971 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.703516006 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.741300106 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.744740009 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.751379013 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.754935980 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.755918980 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:04.758891106 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:04.799411058 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.135509968 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.135569096 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.135705948 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.135782003 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.185606003 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.186240911 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.186254978 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.192151070 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.192171097 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.197653055 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.197664022 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.197784901 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.197791100 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.229952097 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.246385098 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.287450075 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.293283939 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.300730944 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.300847054 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.300863981 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.339834929 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.339853048 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.349543095 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.349550009 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.352216005 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.352221012 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.353430986 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.353435993 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.388612032 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.392138958 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.435403109 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.483659983 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.486735106 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.486809969 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.486845970 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.486864090 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.486870050 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.490108967 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.490119934 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.491209030 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.492856979 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.492892027 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.577353954 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.582725048 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.587691069 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.590694904 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.590764999 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.590780973 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.590893984 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.596874952 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.596932888 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.597381115 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.643413067 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.678072929 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.732486963 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.732516050 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.742450953 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.745490074 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.745526075 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.791923046 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.791980982 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.795548916 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.797255039 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.797276020 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.798238993 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.799074888 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.799093008 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.857528925 CEST	49677	443	192.168.2.9	20.189.173.11
Oct 10, 2024 10:02:05.891350031 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.895649910 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.939435005 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.939531088 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.940011978 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.982465029 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.982496023 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:05.998790026 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.999852896 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:05.999877930 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.000986099 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.001393080 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.001408100 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.030059099 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.033691883 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.079406977 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.125776052 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.128470898 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.128515959 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.128727913 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.169971943 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.170021057 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.172998905 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.175031900 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.180918932 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.181953907 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.181974888 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.219237089 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.279345036 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.279381037 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.297691107 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.301489115 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.301505089 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.341825008 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.574032068 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.575525045 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.575548887 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.577343941 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.578706980 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.578733921 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.586412907 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.631409883 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.672631979 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.718496084 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.718564034 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.718592882 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.719783068 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.719849110 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.719857931 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.763787031 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.938992023 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.939023018 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.946155071 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.946181059 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.946968079 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.946984053 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.948281050 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.948295116 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:06.948992968 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:06.948999882 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.037650108 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.049917936 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.049987078 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:07.050020933 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.091875076 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:07.143100977 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:07.143120050 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.145158052 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:07.145164967 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.146713018 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:07.146718979 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.185661077 CEST	49673	443	192.168.2.9	204.79.197.203
Oct 10, 2024 10:02:07.427004099 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.482464075 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:07.487093925 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:07.487114906 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.521009922 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.523895979 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.523952007 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:07.523983955 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.576266050 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:07.611454964 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.653229952 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:07.677514076 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:07.677606106 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.699882984 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:07.743411064 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.751972914 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:07.751996040 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.752587080 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:07.752592087 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.898869038 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.950404882 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.950526953 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:07.950552940 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.951879978 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.951957941 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:07.951977015 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:07.998140097 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:08.908773899 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:08.908807993 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:09.010215998 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:09.079225063 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:09.079265118 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:09.096446991 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:09.096477032 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:09.097460985 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:09.097467899 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:09.098326921 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:09.098331928 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:09.114403963 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:09.114424944 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:09.177808046 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:09.202214003 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:09.202255011 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:09.202310085 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:09.202337027 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:09.202377081 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:09.397519112 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:09.397583961 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:09.426202059 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:09.426259995 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:09.593498945 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:09.732496977 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:09.732517958 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:09.848623037 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:09.848654032 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:09.851579905 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:09.903398991 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:09.947052956 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.029347897 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.037663937 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.081104040 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.081161022 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.115339994 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.115366936 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.132592916 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.132641077 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.137876987 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.137898922 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.168804884 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.168839931 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.179542065 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.232676029 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.232727051 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.236202955 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.236247063 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.247040987 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.260410070 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.260468960 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.264832973 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.267513037 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.269916058 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.272145987 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.315417051 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.360548019 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.363789082 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.363858938 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.363919020 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.364463091 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.364494085 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.369319916 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.369344950 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.369813919 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.369822979 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.411634922 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.414259911 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.414298058 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.454421997 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.457082033 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.457123995 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.465137005 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.510525942 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.512510061 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.512564898 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.521707058 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.522135019 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.522152901 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.522545099 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.552964926 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.562191010 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.562235117 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.564423084 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.611438990 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.648586035 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.651532888 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.651575089 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.653290033 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.703727961 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.703788042 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.703835011 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.707150936 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.707436085 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.707453966 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.707496881 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.743935108 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.746918917 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.787426949 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.802944899 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.805746078 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.805804968 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.807918072 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.810292959 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.813422918 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.813465118 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.813550949 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.817832947 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.818471909 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.818499088 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.898631096 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.907913923 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.907965899 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.910376072 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.951415062 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.954968929 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.958066940 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:10.958131075 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:10.958208084 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.048914909 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.049000978 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.049047947 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.083844900 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.084551096 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.084583044 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.085207939 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.099824905 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.137775898 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.183418036 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.198002100 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.198021889 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.198098898 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.207027912 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.207079887 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.208795071 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.208821058 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.209901094 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.209918976 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.210961103 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.210977077 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.275540113 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.311542034 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.311866999 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.311897993 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.435600996 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.435650110 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.604118109 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.604166031 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.725105047 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.725150108 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.728864908 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.728878975 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.737180948 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.737193108 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.738711119 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.738725901 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.763751030 CEST	49676	443	192.168.2.9	23.206.229.209
Oct 10, 2024 10:02:11.763849974 CEST	49675	443	192.168.2.9	23.206.229.209
Oct 10, 2024 10:02:11.966854095 CEST	49674	443	192.168.2.9	23.206.229.209
Oct 10, 2024 10:02:11.969079971 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:11.972487926 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:11.972515106 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.063254118 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.065943003 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.065996885 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.066040039 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.066894054 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.066905975 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.068583965 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.069637060 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.070887089 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.070904970 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.071974993 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.119406939 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.153656006 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.157155991 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.157197952 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.167402029 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.170136929 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.170367002 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.232445955 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.232455969 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.238894939 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.240061998 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.240080118 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.252855062 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.259929895 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.260848045 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.263468981 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.307398081 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.334733009 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.351442099 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.351459026 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.353741884 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.353753090 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.355776072 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.403090954 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.406229019 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.430128098 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.433084011 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.475399017 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.494952917 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.497833014 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.497853994 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.497950077 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.529093981 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.529139042 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.529150009 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.532396078 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.532535076 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.532551050 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.532875061 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.575396061 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.588519096 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.591332912 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.591356993 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.628068924 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.631124973 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.631179094 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.674912930 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.677906036 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.677947998 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.678433895 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.727072954 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.727124929 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.727152109 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.731328964 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.731408119 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.731702089 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.731955051 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.769182920 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.772490025 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.815418005 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.827416897 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.830293894 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.830334902 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.832087994 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.914916039 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.915036917 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.915071964 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.922761917 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.922785044 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.925277948 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.926192045 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.926227093 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:12.926779032 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:12.967410088 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.013200998 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.017091036 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.017250061 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.023267984 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.026216030 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.026262045 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.026282072 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.026798010 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.029165983 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.029201984 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.113775015 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.121726990 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.121757030 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.124172926 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.124898911 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.124924898 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.175034046 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.177683115 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.207227945 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.209739923 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.251414061 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.266865015 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.269871950 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.269936085 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.269953966 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.270776987 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.270793915 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.273952007 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.273972988 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.274713993 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.274728060 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.305496931 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.308446884 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.355402946 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.360554934 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.363236904 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.363254070 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.371798992 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.374074936 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.374608994 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.419965982 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.419985056 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.423511028 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.423664093 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.423676968 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.459161997 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.471860886 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.471879959 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.476824999 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.519395113 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.522490978 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.541951895 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.545324087 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.555711985 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.558770895 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.599422932 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.614975929 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.618185043 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.618223906 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.637553930 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.642199039 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.651463032 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.654156923 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.699408054 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.703052044 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.706357002 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.706410885 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.714351892 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.717381954 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.738110065 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.740506887 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.750056028 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.753253937 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.795420885 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.802439928 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.805741072 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.805816889 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.814244032 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.817327023 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.836515903 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.840526104 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.849154949 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.851924896 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.899406910 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.901711941 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.904597044 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.904643059 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.917716980 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.917783976 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.920604944 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.921013117 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.921026945 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.948163033 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:13.951035976 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:13.995410919 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.000977993 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.004714012 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.004775047 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.008179903 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.011363983 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.044022083 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.047764063 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.095119953 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.098205090 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.103553057 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.106616020 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.151416063 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.488482952 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.488842010 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.488954067 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.488965034 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.497000933 CEST	49738	443	192.168.2.9	142.250.186.68
Oct 10, 2024 10:02:14.497033119 CEST	443	49738	142.250.186.68	192.168.2.9
Oct 10, 2024 10:02:14.497104883 CEST	49738	443	192.168.2.9	142.250.186.68
Oct 10, 2024 10:02:14.497565031 CEST	49738	443	192.168.2.9	142.250.186.68
Oct 10, 2024 10:02:14.497579098 CEST	443	49738	142.250.186.68	192.168.2.9
Oct 10, 2024 10:02:14.505562067 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.505589008 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.507591009 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.509587049 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.509604931 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.511709929 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.559408903 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.585686922 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.588886023 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.588907003 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.636583090 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.636607885 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.636683941 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.636698008 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.639946938 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.639969110 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.640850067 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.640860081 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.642115116 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.642123938 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.676019907 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.678713083 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.723412991 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.727099895 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.730530024 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.730581999 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.739197016 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.739267111 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.742563009 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.744848013 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.753535986 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.753680944 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.753695011 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.756762981 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.757455111 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.757473946 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.826586008 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.829703093 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.829802036 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.829880953 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.832329035 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.841003895 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.841062069 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.853023052 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.895407915 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.910490990 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.910588980 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.914371014 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.914378881 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.915132999 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.915138960 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.931587934 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:14.936392069 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:14.983205080 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:15.011528969 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:15.011554003 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:15.015239954 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:15.027293921 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:15.076225042 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:15.076247931 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:15.123085976 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:15.123112917 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:15.138446093 CEST	443	49738	142.250.186.68	192.168.2.9
Oct 10, 2024 10:02:15.139354944 CEST	49738	443	192.168.2.9	142.250.186.68
Oct 10, 2024 10:02:15.139405012 CEST	443	49738	142.250.186.68	192.168.2.9
Oct 10, 2024 10:02:15.140441895 CEST	443	49738	142.250.186.68	192.168.2.9
Oct 10, 2024 10:02:15.140511036 CEST	49738	443	192.168.2.9	142.250.186.68
Oct 10, 2024 10:02:15.142421961 CEST	49738	443	192.168.2.9	142.250.186.68
Oct 10, 2024 10:02:15.142503023 CEST	443	49738	142.250.186.68	192.168.2.9
Oct 10, 2024 10:02:15.169991970 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:15.170047998 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:15.185616970 CEST	49738	443	192.168.2.9	142.250.186.68
Oct 10, 2024 10:02:15.185647011 CEST	443	49738	142.250.186.68	192.168.2.9
Oct 10, 2024 10:02:15.216854095 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:15.216883898 CEST	443	49727	13.107.246.60	192.168.2.9
Oct 10, 2024 10:02:15.231781006 CEST	49738	443	192.168.2.9	142.250.186.68
Oct 10, 2024 10:02:15.263735056 CEST	49727	443	192.168.2.9	13.107.246.60
Oct 10, 2024 10:02:15.466881037 CEST	49677	443	192.168.2.9	20.189.173.11
Oct 10, 2024 10:02:22.612780094 CEST	49705	443	192.168.2.9	23.206.229.209
Oct 10, 2024 10:02:22.613147020 CEST	49745	443	192.168.2.9	23.206.229.209
Oct 10, 2024 10:02:22.613177061 CEST	443	49745	23.206.229.209	192.168.2.9
Oct 10, 2024 10:02:22.613466024 CEST	49745	443	192.168.2.9	23.206.229.209
Oct 10, 2024 10:02:22.614497900 CEST	49745	443	192.168.2.9	23.206.229.209
Oct 10, 2024 10:02:22.614562988 CEST	443	49745	23.206.229.209	192.168.2.9
Oct 10, 2024 10:02:22.614816904 CEST	49745	443	192.168.2.9	23.206.229.209
Oct 10, 2024 10:02:22.617721081 CEST	443	49705	23.206.229.209	192.168.2.9
Oct 10, 2024 10:02:25.056313992 CEST	443	49738	142.250.186.68	192.168.2.9
Oct 10, 2024 10:02:25.056382895 CEST	443	49738	142.250.186.68	192.168.2.9
Oct 10, 2024 10:02:25.056432962 CEST	49738	443	192.168.2.9	142.250.186.68
Oct 10, 2024 10:02:26.385797024 CEST	49738	443	192.168.2.9	142.250.186.68
Oct 10, 2024 10:02:26.385832071 CEST	443	49738	142.250.186.68	192.168.2.9

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 10:02:11.601207018 CEST	53	50611	1.1.1.1	192.168.2.9
Oct 10, 2024 10:02:11.972031116 CEST	53	51018	1.1.1.1	192.168.2.9
Oct 10, 2024 10:02:12.951843977 CEST	53	62711	1.1.1.1	192.168.2.9
Oct 10, 2024 10:02:13.098885059 CEST	52131	53	192.168.2.9	1.1.1.1
Oct 10, 2024 10:02:13.099267960 CEST	59496	53	192.168.2.9	1.1.1.1
Oct 10, 2024 10:02:13.122622013 CEST	53	52131	1.1.1.1	192.168.2.9
Oct 10, 2024 10:02:13.122862101 CEST	53	59496	1.1.1.1	192.168.2.9
Oct 10, 2024 10:02:13.123805046 CEST	63570	53	192.168.2.9	1.1.1.1
Oct 10, 2024 10:02:13.398241997 CEST	53	63570	1.1.1.1	192.168.2.9
Oct 10, 2024 10:02:13.469651937 CEST	57741	53	192.168.2.9	8.8.8.8
Oct 10, 2024 10:02:13.470498085 CEST	56555	53	192.168.2.9	1.1.1.1
Oct 10, 2024 10:02:13.476903915 CEST	53	57741	8.8.8.8	192.168.2.9
Oct 10, 2024 10:02:13.477364063 CEST	53	56555	1.1.1.1	192.168.2.9
Oct 10, 2024 10:02:14.487889051 CEST	60833	53	192.168.2.9	1.1.1.1
Oct 10, 2024 10:02:14.488039970 CEST	65268	53	192.168.2.9	1.1.1.1
Oct 10, 2024 10:02:14.489510059 CEST	59840	53	192.168.2.9	1.1.1.1
Oct 10, 2024 10:02:14.489821911 CEST	58735	53	192.168.2.9	1.1.1.1
Oct 10, 2024 10:02:14.494594097 CEST	53	60833	1.1.1.1	192.168.2.9
Oct 10, 2024 10:02:14.495345116 CEST	53	65268	1.1.1.1	192.168.2.9
Oct 10, 2024 10:02:14.513812065 CEST	53	59840	1.1.1.1	192.168.2.9
Oct 10, 2024 10:02:14.514513016 CEST	53	58735	1.1.1.1	192.168.2.9
Oct 10, 2024 10:02:19.530566931 CEST	60690	53	192.168.2.9	1.1.1.1
Oct 10, 2024 10:02:19.531002998 CEST	62614	53	192.168.2.9	1.1.1.1
Oct 10, 2024 10:02:19.554541111 CEST	53	62614	1.1.1.1	192.168.2.9
Oct 10, 2024 10:02:19.575586081 CEST	53	60690	1.1.1.1	192.168.2.9
Oct 10, 2024 10:02:19.576735020 CEST	54267	53	192.168.2.9	1.1.1.1
Oct 10, 2024 10:02:19.673316002 CEST	53	54267	1.1.1.1	192.168.2.9
Oct 10, 2024 10:02:30.057290077 CEST	53	62015	1.1.1.1	192.168.2.9

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 10, 2024 10:02:13.098885059 CEST	192.168.2.9	1.1.1.1	0x3106	Standard query (0)	infosario.quintiles.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 10:02:13.099267960 CEST	192.168.2.9	1.1.1.1	0x7e0f	Standard query (0)	infosario.quintiles.com	65	IN (0x0001)	false
Oct 10, 2024 10:02:13.123805046 CEST	192.168.2.9	1.1.1.1	0xb8f6	Standard query (0)	infosario.quintiles.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 10:02:13.469651937 CEST	192.168.2.9	8.8.8.8	0x5fda	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 10:02:13.470498085 CEST	192.168.2.9	1.1.1.1	0xbd0f	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 10:02:14.487889051 CEST	192.168.2.9	1.1.1.1	0x6f43	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 10:02:14.488039970 CEST	192.168.2.9	1.1.1.1	0xe98e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 10, 2024 10:02:14.489510059 CEST	192.168.2.9	1.1.1.1	0x66c9	Standard query (0)	infosario.quintiles.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 10:02:14.489821911 CEST	192.168.2.9	1.1.1.1	0xddc9	Standard query (0)	infosario.quintiles.com	65	IN (0x0001)	false
Oct 10, 2024 10:02:19.530566931 CEST	192.168.2.9	1.1.1.1	0xbb0d	Standard query (0)	infosario.quintiles.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 10:02:19.531002998 CEST	192.168.2.9	1.1.1.1	0x5fba	Standard query (0)	infosario.quintiles.com	65	IN (0x0001)	false
Oct 10, 2024 10:02:19.576735020 CEST	192.168.2.9	1.1.1.1	0xabd8	Standard query (0)	infosario.quintiles.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 10, 2024 10:02:13.122622013 CEST	1.1.1.1	192.168.2.9	0x3106	Name error (3)	infosario.quintiles.com	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 10:02:13.122862101 CEST	1.1.1.1	192.168.2.9	0x7e0f	Name error (3)	infosario.quintiles.com	none	none	65	IN (0x0001)	false
Oct 10, 2024 10:02:13.398241997 CEST	1.1.1.1	192.168.2.9	0xb8f6	Name error (3)	infosario.quintiles.com	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 10:02:13.476903915 CEST	8.8.8.8	192.168.2.9	0x5fda	No error (0)	google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 10, 2024 10:02:13.477364063 CEST	1.1.1.1	192.168.2.9	0xbd0f	No error (0)	google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 10, 2024 10:02:14.494594097 CEST	1.1.1.1	192.168.2.9	0x6f43	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 10, 2024 10:02:14.495345116 CEST	1.1.1.1	192.168.2.9	0xe98e	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 10, 2024 10:02:14.513812065 CEST	1.1.1.1	192.168.2.9	0x66c9	Name error (3)	infosario.quintiles.com	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 10:02:14.514513016 CEST	1.1.1.1	192.168.2.9	0xddc9	Name error (3)	infosario.quintiles.com	none	none	65	IN (0x0001)	false
Oct 10, 2024 10:02:19.554541111 CEST	1.1.1.1	192.168.2.9	0x5fba	Name error (3)	infosario.quintiles.com	none	none	65	IN (0x0001)	false
Oct 10, 2024 10:02:19.575586081 CEST	1.1.1.1	192.168.2.9	0xbb0d	Name error (3)	infosario.quintiles.com	none	none	A (IP address)	IN (0x0001)	false
Oct 10, 2024 10:02:19.673316002 CEST	1.1.1.1	192.168.2.9	0xabd8	Name error (3)	infosario.quintiles.com	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Oct 10, 2024 10:02:03.029958963 CEST	13.107.246.60	443	192.168.2.9	49727	CN=*.azureedge.net, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 19 17:30:52 CEST 2024 Thu Jun 08 02:00:00 CEST 2023 Thu Aug 01 14:00:00 CEST 2013	Sun Sep 14 17:30:52 CEST 2025 Wed Aug 26 01:59:59 CEST 2026 Fri Jan 15 13:00:00 CET 2038	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
					CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Jun 08 02:00:00 CEST 2023	Wed Aug 26 01:59:59 CEST 2026
					CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 01 14:00:00 CEST 2013	Fri Jan 15 13:00:00 CET 2038

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.9	49707	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 08:02:00 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 08:02:01 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 08:02:01 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 09 Oct 2024 03:56:29 GMT ETag: "0x8DCE8165B436280" x-ms-request-id: b415ce4c-a01e-0053-0c33-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T080201Z-185b7d577bdvdf6b7wzrpm3w2w00000001s000000000gpmg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 08:02:01 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-10 08:02:01 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-10 08:02:01 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-10 08:02:01 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-10 08:02:01 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-10 08:02:01 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-10 08:02:01 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-10 08:02:01 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-10 08:02:01 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-10 08:02:01 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.9	49708	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 08:02:02 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 08:02:02 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 08:02:02 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 971a1148-a01e-000d-48cd-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T080202Z-185b7d577bdrc75dwwr9n4aqsn00000000qg000000003hem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 08:02:02 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.9	49710	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 08:02:02 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 08:02:02 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 08:02:02 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 38350f62-a01e-0021-1402-1a814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T080202Z-185b7d577bdcmhtqq5qad662uw00000002dg0000000007bz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 08:02:02 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.9	49714	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 08:02:02 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 08:02:02 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 08:02:02 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c8ae7944-b01e-0002-48f9-191b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T080202Z-185b7d577bdd97twt8zr6y8zrg00000002c0000000003hrn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 08:02:02 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.9	49718	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 08:02:02 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 08:02:02 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 08:02:02 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 6aeebda2-001e-008d-31ea-1ad91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T080202Z-185b7d577bdtkrggcpubmrvqyg00000000mg000000005031 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-10 08:02:02 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.9	49720	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 08:02:02 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 08:02:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 08:02:02 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: db262c37-c01e-000b-125f-1ae255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T080202Z-185b7d577bdvdf6b7wzrpm3w2w00000001u000000000c9n0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 08:02:02 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.9	49721	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 08:02:03 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 08:02:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 08:02:03 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 93ca84ad-001e-0014-016e-1a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T080203Z-185b7d577bdvdf6b7wzrpm3w2w00000001x00000000055u9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 08:02:03 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.9	49722	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 08:02:03 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 08:02:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 08:02:03 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 14c2f8e7-301e-0000-27cc-19eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T080203Z-185b7d577bdvng2dzp910e3fdc00000002ag000000007p1w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 08:02:03 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.9	49726	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 08:02:03 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 08:02:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 08:02:03 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 38c0e901-901e-0016-3f33-1aefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T080203Z-185b7d577bdwmw4ckbc4ywwmwg00000001n000000000fwz4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 08:02:03 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.9	49730	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 08:02:03 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 08:02:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 08:02:03 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 35b61c96-e01e-0052-1103-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T080203Z-185b7d577bdfbqmxp7sbqeum4w000000023000000000fxtk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 08:02:03 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6288, Parent PID: 6124

General

Target ID:	0
Start time:	04:02:05
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2948, Parent PID: 6288

General

Target ID:	2
Start time:	04:02:08
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1992,i,8342133861426151060,17564096738587947103,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6660, Parent PID: 6124

General

Target ID:	3
Start time:	04:02:12
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://infosario.quintiles.com/"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://infosario.quintiles.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Private

General Information

Errors

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Connections

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6288, Parent PID: 6124

General

Chronological Activities

Analysis Process: chrome.exePID: 2948, Parent PID: 6288

General

Chronological Activities

Analysis Process: chrome.exePID: 6660, Parent PID: 6124

General

Chronological Activities

Windows Analysis Report
https://infosario.quintiles.com/